Data Yard Privacy Policy
Last updated: 11/05/2026
1. Introduction
o Building Materials Digital Services Limited, company number 16294141, of 1180 Elliott Court, Herald Avenue, Coventry, CV5 6UB, is the data controller responsible for personal data collected through the Data Yard platform
o This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. It applies to all Users of Data Yard, including Licensed Manufacturers, Licensed Merchants and guest users.
o This Privacy Policy should be read alongside the Data Yard Terms and Conditions of Use. By using Data Yard, you confirm that you have read and understood this Privacy Policy.
o If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at: info@bmds-idp.com
2. What Personal Data We Collect
o We collect the following categories of personal data in connection with your use of Data Yard:
▪ Account and login information: name, email address, username and password (stored in encrypted form).
▪ Contact details: telephone number and business address, where provided.
▪ Usage data: records of your access to Data Yard, including login times, pages viewed, product data searched, downloaded or exported, and actions taken within the platform.
▪ Communications: any correspondence you send to us in connection with Data Yard, including support requests or data quality queries.
▪ Technical data: IP address, browser type and version, device type, and operating system, collected automatically when you access Data Yard.
o We do not knowingly collect sensitive personal data (special category data) through Data Yard. Please do not submit such data through the platform.
3. How We Collect Personal Data
o We collect personal data in the following ways:
▪ Directly from you: when you are registered as a User, when you contact us, or when you update your account details.
▪ Automatically: through your use of Data Yard, including cookies and similar tracking technologies used to maintain your session and record platform activity.
▪ From your employer or organisation: where a Licensed Manufacturer or Licensed Merchant registers you as an Authorised User on their account.
4. Why We Use Your Personal Data
Purpose, Details and Lawful Basis:
Platform access, creating and managing your account and login credentials, performance of contract
Platform operation, recording your use of Data Yard, including access logs and download records, legitimate interests (operating and improving the platform)
Sharing usage statistics with suppliers, aggregated or identifiable records or merchants access, exports and downloads of Product Data may be shared with the relevant Licensed Manufacturer, legitimate interests (transparency between platform participants)
Communications, sending you notifications about changes to Product Data, platform updates, and matters relating to your use of Data Yard, legitimate interests / consent
Security and fraud prevention, monitoring platform activity to detect and prevent unauthorised access or misuse, legitimate interest (platform security)
Legal compliance, complying with applicable laws and responding to lawful requests from regulatory or enforcement authorities, legal obligation
5. Who We Share Your Personal Data With
o We may share your personal data with the following parties:
▪ Licensed Manufacturers: records of merchant access to, export and download of Product Data may be shared with the relevant Licensed Manufacturer, as described in the Data Yard Terms and Conditions.
▪ Technology partners: our platform technology provider (Omiteo) processes personal data on our behalf as a data processor, solely for the purposes of operating Data Yard. They are bound by appropriate data processing agreements.
▪ BMF and NMBS: our joint shareholders may receive aggregated, anonymised platform usage data for governance and reporting purposes. We will not share identifiable personal data with BMF or NMBS without your knowledge unless required by law.
▪ Legal and regulatory authorities: where required to do so by law, court order, or regulatory authority.
o We do not sell your personal data to any third party.
6. Cookies and Tracking Technologies
o Data Yard uses cookies and similar technologies to maintain your login session and ensure the platform functions correctly. These are strictly necessary for the operation of Data Yard and cannot be disabled without affecting your ability to use the platform.
o We may also use analytics cookies to understand how Users interact with Data Yard, in order to improve its functionality. Where we do so, we will seek your consent where required by applicable law.
o For further information about the cookies used on Data Yard, please contact us at info@bmds-idp.com
7. How Long We Keep Your Personal Data
o We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by law.
o Account and login data is retained for the duration of your active licence and for a period of [XX] years following termination or expiry of your licence, to comply with our legal obligations and resolve any disputes.
o Usage logs and access records are retained for a period of [XX] years from the date of the relevant activity.
o Where personal data is no longer required, we will delete or anonymise it securely.
8. International Data Transfers
o Data Yard is operated from within the United Kingdom. We do not currently transfer your personal data outside the UK or European Economic Area. If this changes, we will ensure that appropriate safeguards are in place in accordance with UK GDPR requirements and will update this Privacy Policy accordingly.
9. Your Rights
o Under UK GDPR, you have the following rights in relation to your personal data:
▪ Right of access: you may request a copy of the personal data we hold about you.
▪ Right to rectification: you may ask us to correct any inaccurate or incomplete personal data.
▪ Right to erasure: you may ask us to delete your personal data in certain circumstances.
▪ Right to restrict processing: you may ask us to restrict how we use your personal data in certain circumstances.
▪ Right to data portability: you may ask us to provide your personal data in a structured, commonly used and machine-readable format.
▪ Right to object: you may object to our processing of your personal data where we rely on legitimate interests as our lawful basis.
▪ Rights in relation to automated decision-making: Data Yard does not make decisions about you based solely on automated processing.
o To exercise any of these rights, please contact us at info@bmds-idp.com. We will respond within one calendar month of receiving your request.
o You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data. The ICO can be contacted at www.ico.org.uk or by telephone on 0303 123 1113.
10. Security
o We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These include encrypted password storage, access controls, and activity monitoring.
o While we use reasonable endeavours to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your login credentials confidential and for ensuring that any device you use to access Data Yard is adequately protected.
o If you believe your account has been compromised, please notify us immediately at support@bmds-idp.com
11. Changes to this Privacy Policy
o We may update this Privacy Policy from time to time to reflect changes in how we use personal data or changes in applicable law. Any material changes will be notified to Users via Data Yard or by email. Your continued use of Data Yard following notification of changes will constitute acceptance of the updated Privacy Policy.
o The date at the top of this Privacy Policy indicates when it was last updated.
12. Contact Us
o If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:
▪ By email: info@bmds-idp.com
▪ By post: Building Materials Digital Services Limited, 1180 Elliott Court, Herald Avenue, Coventry, CV5 6UB