Privacy Policy
Sphike Privacy Policy
Last updated: 22 September 2026
1. Introduction
Welcome to Sphike.
Sphike is a UK construction marketplace designed to connect customers, contractors, suppliers, hauliers, plant operators and other construction professionals seeking or offering construction services, materials, equipment, spare capacity and work opportunities.
This Privacy Policy explains how we collect, use, store, share and protect your personal information when you use the Sphike mobile application, website and related services (together, the "Sphike Platform").
Sphike is operated by SPHIKE Ltd., registered in England and Wales under company number 16719704, whose registered office is Suite RA01, 195-197 Wood Street, London, E17 3NU ("Sphike", "we", "us" or "our").
For the purposes of applicable UK data protection law, SPHIKE Ltd. is the data controller for the personal information processed as described in this Privacy Policy.
For questions about this Privacy Policy or the way we process your personal information, contact:
Email: [email protected]
Postal address: Suite RA01, 195-197 Wood Street, London, E17 3NU
2. Age Requirement
You must be 18 years of age or older to create an account or use the Sphike Platform.
Sphike is a commercial construction marketplace intended for adults, including customers, tradespeople, contractors, suppliers, operators and other participants in the construction industry.
Sphike is not intended for use by children or anyone under the age of 18.
We do not knowingly permit anyone under 18 to create a Sphike account.
If we become aware that an account belongs to a person under the age of 18, we may suspend or delete the account and take appropriate steps to delete associated personal information, subject to any legal requirements requiring particular information to be retained.
3. Information We Collect
The information we collect depends on how you use Sphike and the features you choose to use.
3.1 Account and Profile Information
When you create or manage a Sphike account, we may collect:
Your name;
Email address;
Telephone number;
Authentication and account information;
Business or trading name;
Business address;
Company registration details;
VAT information, where applicable;
Your role or job title;
Profile image or company logo;
Business description;
Services offered;
Areas served; and
Other information you choose to add to your profile.
3.2 Marketplace, Job and Listing Information
When you create, respond to or interact with marketplace listings, jobs or orders, we may process information relating to:
Services required or offered;
Construction waste removal requirements;
Aggregate requirements;
Plant and equipment requirements;
Available plant, vehicles, equipment or other capacity;
Contractor availability;
Work opportunities;
Trade-to-trade work transfers;
Project and site information;
Collection and delivery information;
Requested dates and times;
Pricing or quotation information;
Job and order history;
Photographs, documents or other files you upload; and
Communications relating to opportunities, jobs or transactions.
Certain information included in marketplace listings or business profiles may be visible to other Sphike users.
4. Location Information
Location is an important part of the Sphike marketplace because it enables us to connect users with relevant construction services, suppliers, jobs, contractors and available capacity.
With the appropriate device permissions, Sphike collects the precise GPS location of your device.
We may obtain your GPS coordinates, store location information in our database, associate location information with your account, job, listing or marketplace activity, use your location to identify nearby services, jobs, suppliers or opportunities, use location information to provide relevant geographical functionality, and share location information with Google APIs where required to provide mapping, geolocation, address, distance or related functionality.
You can manage Sphike's access to your device location through your device settings.
Disabling location access may prevent certain location-dependent Sphike features from operating correctly.
Where required by applicable law or platform requirements, Sphike will request permission before accessing precise device location.
5. Device and Notification Information
Sphike uses Firebase to provide push notifications.
To enable notifications, Sphike may collect a device notification token and share that token with Firebase.
This information may be used to deliver notifications relating to marketplace activity, job and order activity, new enquiries, responses, account activity, service messages and other relevant Sphike notifications.
You can manage notification permissions through your device settings.
6. Analytics, Advertising and Tracking
Sphike does not currently use third-party analytics or crash-reporting SDKs within the app.
Sphike does not currently use advertising or advertising-tracking SDKs within the app.
We do not currently use your information for third-party behavioural advertising.
If these practices change, we will update this Privacy Policy and, where required, obtain appropriate consent and update the relevant Apple App Store and Google Play privacy disclosures.
7. Technical Information
When you access the Sphike Platform, certain technical information may be processed as part of operating and securing the service.
Depending on how you access Sphike, this may include device type, operating system, app version, IP address, login information, device notification token, date and time of activity and technical information necessary to operate and secure the Platform.
We may use this information for Platform operation, authentication, security, troubleshooting and fraud prevention.
8. Hosting and Storage
Sphike uses Amazon Web Services (AWS) for cloud hosting and database infrastructure.
Personal information collected through Sphike may therefore be stored and processed using AWS infrastructure.
We use appropriate technical and organisational measures designed to protect information stored through our infrastructure from unauthorised access, disclosure, alteration, loss or destruction.
Where AWS or another service provider processes information outside the United Kingdom, the international transfer provisions described below apply.
9. How We Use Your Information
We use personal information where necessary to operate, secure and develop the Sphike Platform.
This includes providing Sphike, connecting customers and businesses, operating the capacity marketplace, facilitating trade-to-trade opportunities, providing location-based functionality, providing notifications through Firebase, operating and improving Sphike, communicating with users, security and fraud prevention, and complying with legal and regulatory obligations.
Where permitted by law, we may contact you regarding Sphike services, features and relevant opportunities.
Where consent is required, we will seek that consent separately.
You may opt out of direct electronic marketing at any time using the unsubscribe mechanism provided or applicable account preferences.
10. Our Lawful Bases for Processing
Depending on the circumstances, we may rely upon one or more of the following lawful bases:
Contract — where processing is necessary to provide Sphike services requested by you or to take steps at your request before entering into a contract.
Legitimate Interests — where processing is necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and interests.
These interests may include operating Sphike, developing the marketplace, connecting marketplace participants, maintaining security, preventing fraud, supporting users, improving our services and protecting our business and users.
Consent — where we specifically request your consent, including where required for device permissions, optional marketing or other processing.
Where processing relies upon consent, you may withdraw your consent at any time.
Legal Obligation — where processing is necessary to comply with applicable legal or regulatory obligations.
11. Information Visible to Other Sphike Users
Sphike is a marketplace. Certain information is therefore intended to be shared with other marketplace participants.
Depending on how you use Sphike, other users may be able to see your name or business name, business profile information, company logo, business or service location, services offered, marketplace listings, available capacity, work opportunities and information you choose to include in a listing or profile.
You should not include unnecessary confidential, sensitive or personal information in public listings.
12. Sharing Your Information
We do not sell your personal information.
We may share information with other Sphike users where required to operate the marketplace, respond to enquiries, arrange jobs and enable transactions or communications.
We use Amazon Web Services (AWS) for cloud hosting and database infrastructure.
Certain location information, including GPS-derived location information, may be shared with Google APIs to provide mapping, geolocation, address, distance or related functionality.
Device notification tokens and related technical information may be processed through Firebase to enable push notifications.
We may also disclose relevant information to professional advisers, authorities where required by law, and in connection with a genuine business acquisition, merger, reorganisation or transfer.
13. International Data Transfers
Some of our technology providers, including AWS, Google and Firebase, operate internationally.
As a result, personal information may in some circumstances be processed outside the United Kingdom.
Where personal information is transferred internationally, we will use appropriate measures required by applicable UK data protection law to protect it. These may include applicable adequacy arrangements or approved contractual safeguards.
14. Data Retention
Sphike retains personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to the specific account deletion process described below.
While an account remains active, information associated with the account may be retained where it remains necessary to provide the Sphike Platform, maintain marketplace and transaction records, protect users, comply with legal obligations or pursue other lawful purposes described in this Privacy Policy.
Information may need to be retained for purposes including legal and regulatory compliance, tax and accounting obligations, fraud prevention, security, resolving disputes, establishing, exercising or defending legal claims and maintaining appropriate transaction and job records.
Where personal information is no longer required and there is no lawful reason for continued retention, it will be deleted or anonymised.
15. Account Deletion and Two-Year Retention Period
Users may request deletion of their Sphike account.
A user who has no active job orders may initiate account deletion using the account deletion functionality provided by Sphike.
Where an active job order exists, account deletion cannot be completed until the active order has been completed, cancelled or otherwise resolved.
Immediate Soft Deletion
Once an eligible account deletion request is confirmed, Sphike will immediately soft-delete the account.
Soft deletion means the user's account is disabled, the user can no longer access the account, the account is no longer available for normal use, the user's profile and associated information are removed from normal user-facing access, and personal information associated with the account is retained securely within Sphike's database during the retention period.
Soft-deleted personal information will not be used for ordinary marketplace activity, marketing or unrelated commercial purposes.
Two-Year Retention Period
Following soft deletion, personal information associated with the deleted account will normally be retained for a maximum period of two years from the date of account deletion.
This limited retention period allows Sphike to retain information where reasonably necessary for purposes including fraud prevention and investigation, Platform security, handling complaints, resolving disputes, establishing, exercising or defending legal claims, investigating transactions or marketplace activity, protecting Sphike and other marketplace users and meeting applicable legal or regulatory obligations.
Access to soft-deleted information will be appropriately restricted during this period.
Permanent Hard Deletion
At the end of the two-year retention period, personal information associated with the deleted account will be permanently deleted or irreversibly anonymised, unless Sphike is legally required or otherwise lawfully entitled to retain specific information for longer.
Where a longer legal retention period applies to a particular record, Sphike will retain only the information reasonably necessary for that purpose and restrict its use accordingly.
Once the applicable retention requirement ends, the information will be permanently deleted or irreversibly anonymised.
Users may contact [email protected] with questions concerning account or data deletion.
16. Your Data Protection Rights
Subject to applicable legal conditions and exemptions, you may have rights including the right to request access to your personal information, correction of inaccurate information, deletion, restriction of processing, object to certain processing, receive certain information in a portable format, withdraw consent where processing relies upon consent and complain about how your information is processed.
To exercise a privacy right, contact:
We may need to verify your identity before completing a request.
A request to exercise a data protection right will be considered separately from the standard two-year account deletion retention process where required by applicable law.
Where we rely upon legitimate interests to process your personal information, you may have the right to object to that processing.
You also have the right to object at any time to use of your personal information for direct marketing.
17. Security
We use appropriate technical and organisational measures designed to protect personal information from unauthorised access, alteration, disclosure, loss or destruction.
This includes taking appropriate measures to restrict access to information associated with soft-deleted accounts.
No internet-based platform or electronic storage system can guarantee absolute security.
You are responsible for keeping your account credentials secure and should notify us promptly if you believe your account has been compromised.
18. Automated Decision-Making
Sphike does not currently use solely automated decision-making that produces legal or similarly significant effects upon users.
Sphike may use automated systems to help display, sort or match marketplace information according to factors such as location, service requirements and availability.
Such functionality supports operation of the marketplace and does not currently constitute solely automated decision-making producing legal or similarly significant effects.
19. Third-Party Services
Sphike uses third-party technology services including AWS, Google APIs and Firebase.
Those providers may process information in accordance with their respective roles, contractual arrangements and privacy terms.
Sphike may also contain links to websites or services operated independently by third parties.
We are not responsible for the privacy practices of independent third-party services and encourage users to review their applicable privacy information.
20. Marketing Communications
Where permitted by law, we may contact users regarding Sphike features, services and relevant opportunities.
You can opt out of marketing communications at any time by using an unsubscribe option provided in a marketing communication, changing applicable communication preferences or contacting [email protected].
Necessary service communications, such as security alerts, account information and essential marketplace/job communications, are not marketing communications and may continue while your account remains active.
Once an account has been deleted, information retained as part of the two-year soft-deletion period will not be used for direct marketing.
21. Complaints
If you have concerns about how Sphike processes your personal information, please contact us first so that we have an opportunity to address your concerns.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.
22. Changes to This Privacy Policy
We may update this Privacy Policy as Sphike develops, when our data practices change or where necessary to reflect legal or regulatory requirements.
Where changes materially affect users, we will take reasonable steps to notify users where required.
The latest version will display the date on which it was last updated.
23. Contact Us
For questions, requests or concerns regarding this Privacy Policy or your personal information, contact:
SPHIKE Ltd.
Email: [email protected]
Registered office: Suite RA01, 195-197 Wood Street, London, E17 3NU
Company number: 16719704
Sphike — Construction Connected.