Firntec Building Compliance
Privacy noticeBSR Gateway System

BSR Gateway System

Who we are

This system is used by Firntec Limited (company number 13460282, registered office Aquilam House, 7 Darklake View, Plymouth, Devon, PL6 7TL) and Ventro Limited (company number 08765695, registered office Aquilam House, 7 Darklake View, Estover, Plymouth, PL6 7TL) to prepare and manage Building Safety Regulator (BSR) Gateway 2 and Gateway 3 applications. Whichever company is named on your project is the data controller for the information about it.

What we hold

  • Names, job titles, work email addresses and phone numbers of client, Principal Designer, Principal Contractor and design team contacts.
  • Project and building details, and the documents sent to us for the application.
  • For people with an account: name, job title, company, sign-in times, the internet address and browser used, and a log of changes made.
  • When you use an upload link: the files you upload, when, and the internet address used.

Why we hold it

  • To carry out the work we have been appointed to do (performance of a contract).
  • To meet legal duties under the Building Safety Act 2022 and the Building Regulations, including keeping the golden thread of information (legal obligation).
  • To keep the system secure and to show who did what (our legitimate interests).

Who can see it

Only our staff with an account, and the BSR when documents are submitted for your project. We do not sell your information or use it for marketing.

The system is hosted by Cloudflare (website, database and file storage). Some features use Anthropic's Claude to sort and check documents; documents are sent for this only when a member of our team asks, and under Anthropic's commercial terms they are not used to train its models. These providers may process information outside the UK; where they do, it is protected by the UK's international data transfer safeguards.

How long we keep it

  • Project records and documents: reviewed 15 years after the project closes, because building safety information can be needed long after completion.
  • Sign-in records: 12 months.
  • Backups: 30 days.

Your rights

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we no longer need it. You can also complain to the Information Commissioner's Office (ico.org.uk), though we would like the chance to put things right first.

Contact

Email info@firntec.com or contactus@ventrogroup.com, quoting your project reference.