TGD Pilot

TGD Pilot Compliance Search Engine

Effective Date: 19 April 2026 | Version 1.2

This document contains two parts:

Part A - Privacy Policy

Part B - Terms of Use & Platform Policy

PART A - PRIVACY POLICY

A.1 Who We Are

TGD Pilot is a building-regulations search and compliance platform made available through https://tgdpilot.ie. In this document, references to "TGD Pilot", "we", "us" and "our" mean the operator of the TGD Pilot service and website.

TGD Pilot provides natural-language search, document indexing, checklist export and compliance-support tooling across Irish Technical Guidance Documents (TGDs) for architects, engineers, surveyors, contractors and related professionals.

A.2 Irish GDPR Framework

We aim to process personal data in line with Regulation (EU) 2016/679 (the GDPR), the Irish Data Protection Act 2018, and where relevant the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011.

The Irish supervisory authority for data protection is the Data Protection Commission (DPC). If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the DPC.

A.3 Scope of This Policy

This Privacy Policy explains how we collect, use, store, share and protect personal data when you:

•visit or use the TGD Pilot website or application;

•create an account or log in to the platform;

•upload TGDs or other files for indexing, reference or search;

•create projects, notes, annotations, saved searches, bookmarks or exports;

•join an organisation workspace or collaborate with other users; or

•contact us about support, legal, privacy or service issues.

A.4 Categories of Personal Data We Process

A.4.1 Account and Identity Data

•name, display name and professional role;

•email address and login credentials;

•organisation membership, invitations and role assignments; and

•account preferences and onboarding responses.

A.4.2 Platform Usage Data

•IP address, browser type, device information and timestamps;

•audit logs relating to sign-in, account security and workspace activity;

•search queries, saved answers, bookmarks, comments and collaboration activity; and

•feature usage and technical diagnostics used to keep the service secure and reliable.

A.4.3 User Content and Uploaded Files

•uploaded PDFs and related indexing metadata;

•project titles, descriptions, annotations, notes and exported checklists; and

•support messages or other content you submit to us.

The document upload feature is intended for public or non-personal technical documents, such as Irish Technical Guidance Documents and related public guidance. You must not upload documents containing client, resident, employee, special-category, confidential, or third-party personal data unless we have expressly agreed a separate lawful processing arrangement for that use.

A.5 Why We Use Personal Data

We use personal data to:

•create and administer accounts and organisation workspaces;

•authenticate users and protect account security;

•store uploaded documents and generate searchable indexes;

•provide search, compliance-support, PDF viewing and export features;

•respond to technical support, legal and privacy requests;

•monitor uptime, investigate misuse and improve performance;

•send essential service communications such as verification, security or password-reset emails; and

•comply with applicable legal and regulatory obligations.

A.6 Lawful Bases Under GDPR

Depending on the context, we process personal data on one or more of the following lawful bases:

•contract performance, where processing is necessary to provide the TGD Pilot service you requested;

•legitimate interests, including platform security, fraud prevention, service administration and product improvement, where those interests are not overridden by your rights;

•legal obligation, where processing is required by Irish or EU law; and

•consent, where we ask for it specifically, such as for optional analytics, non-essential cookies or marketing communications if ever enabled.

A.7 How We Share Personal Data

We do not sell personal data. We may share it only where necessary with:

•hosting, infrastructure, authentication, database, storage or email providers acting on our instructions;

•your organisation owner, admin or authorised collaborators where the product is being used in a shared workspace;

•professional advisers, auditors or insurers where reasonably necessary for legal, compliance or risk-management purposes;

•law enforcement, regulators, courts or public authorities where disclosure is legally required; and

•a successor entity if the business or service is reorganised, sold or transferred, subject to continued protection of personal data.

The service may use the following processor categories where configured for the deployed environment:

•hosting, container, database, object-storage, cache and backup providers;

•Stripe for payment, billing and subscription processing;

•Google Identity Services where Google sign-in is enabled;

•transactional email providers for verification, password reset and service emails;

•observability, security logging and abuse-prevention providers; and

•optional AI providers where an AI feature is explicitly enabled and disclosed in the product.

We require processors to act only on documented instructions, protect personal data, assist with data-subject and breach obligations where relevant, and use approved subprocessors under appropriate contractual controls.

A.8 International Transfers

Some service providers or optional AI integrations may process data outside Ireland or the EEA. Where that happens, we will use a lawful transfer mechanism such as an adequacy decision or European Commission standard contractual clauses. Where standard contractual clauses are used, we will assess whether supplementary technical, contractual or organisational measures are needed for the transfer.

If optional AI features are enabled by the operator, prompts or limited query content may be sent to the configured provider to generate responses. Uploaded TGD PDFs are not intended to be sent to third-party AI providers unless a specific feature clearly requires it and says so.

A.9 Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including account administration, security, support, legal compliance and dispute resolution.

•account data is generally kept while your account remains active and is anonymised when the account deletion control is completed;

•workspace content is kept until deleted by you, your organisation, or us in line with policy;

•search history is normally retained for up to 365 days;

•activity logs are normally retained for up to 365 days;

•resolved or closed feedback is normally retained for up to 730 days;

•Stripe webhook event records are normally retained for up to 180 days;

•verification and password-reset token records are normally retained for up to 30 days or until expiry cleanup; and

•some records may be retained longer where Irish or EU law requires it, or for establishment, exercise or defence of legal claims.

A.10 Your GDPR Rights

Subject to applicable law, you may have the right to:

•be informed about how your personal data is used;

•access a copy of your personal data;

•have inaccurate or incomplete data corrected;

•request erasure of personal data in certain circumstances;

•restrict or object to certain processing;

•receive portable personal data where the right applies; and

•withdraw consent at any time where processing is based on consent.

We may ask for reasonable proof of identity before fulfilling a rights request. We aim to respond within one month, subject to any lawful extension or restriction permitted by the GDPR or the Data Protection Act 2018.

Logged-in users can export account data and request account deletion from the application settings. Organisation owners must transfer or delete owned workspaces before deleting their personal account.

A.11 Cookies, Analytics and Irish ePrivacy Rules

TGD Pilot may use cookies and similar technologies for authentication, session management, security, user preferences and product analytics.

•strictly necessary cookies may be used without consent where legally permitted;

•non-essential cookies, optional local storage or analytics should only be used on a valid consent basis where required; and

•you can change or withdraw your optional-cookie choice in the application settings.

•if direct electronic marketing is ever enabled, we intend to do so only in compliance with Irish ePrivacy rules and applicable consent requirements.

A.12 Security and Breach Response

We use technical and organisational measures intended to protect personal data, including authentication controls, hashed passwords, access restrictions, logging and infrastructure safeguards appropriate to the service.

If a personal data breach occurs and the GDPR requires notification, we will notify the DPC without undue delay and, where feasible, within 72 hours of becoming aware of it. If the breach is likely to result in a high risk to affected individuals, we will also notify those individuals without undue delay where required by law.

A.13 Complaints and Contact

Please send privacy requests or complaints to info@tgdpilot.ie first so we can try to resolve the issue directly.

You also have the right to raise a concern with the Irish Data Protection Commission:

•Website: dataprotection.ie

•Postal address: Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland

•Telephone: +353 (1) 765 0100 or 1800 437 737

A.14 Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we may notify users through the platform, by email, or both. The latest version will remain available within the product.

PART B - TERMS OF USE & PLATFORM POLICY

B.1 Agreement to These Terms

These Terms of Use govern your access to and use of TGD Pilot through the website and application available at https://tgdpilot.ie.

By creating an account, joining a workspace, or otherwise using TGD Pilot, you agree to be bound by these Terms and by the Privacy Policy in Part A. If you do not agree, you must not use the service.

B.2 Professional Nature of the Service

TGD Pilot is designed as a professional reference and compliance-support tool for the Irish construction and built-environment sector. It is not a substitute for professional judgment, statutory certification, legal advice or independent technical review.

B.3 Account and Workspace Responsibilities

•you must provide accurate registration information and keep it up to date;

•you are responsible for maintaining the confidentiality of your login credentials;

•you must ensure you are authorised to upload and process any documents or data you submit;

•you must upload only public or non-personal technical PDFs unless we have expressly agreed a separate lawful processing arrangement; and

•organisation admins are responsible for access permissions within shared workspaces.

B.4 Permitted Use

You may use TGD Pilot only for lawful and legitimate professional or internal business purposes, including:

•searching Irish Technical Guidance Documents and related reference material;

•reviewing uploaded documents and generating internal notes or checklists;

•using compliance-support calculators and comparison tools; and

•collaborating with authorised team members within the platform.

B.5 Prohibited Use

You must not:

•misrepresent platform output as a formal certificate, approval or legal opinion;

•upload content you do not have the right to use or process;

•upload PDFs or other content containing client, resident, employee, special-category, confidential, or third-party personal data without an agreed lawful processing arrangement;

•attempt to reverse engineer, disrupt, scrape or abuse the service or its APIs;

•introduce malware, perform denial-of-service activity or bypass security controls;

•use the platform to infringe privacy, confidentiality, intellectual-property or data-protection law; or

•use TGD Pilot in a way that breaches Irish law, EU law or any applicable professional duty.

B.6 TGD Content and Regulatory Currency

The official Technical Guidance Documents referenced by TGD Pilot are published by the Irish Government and remain subject to change. You are responsible for checking that the version you rely on is the current operative edition and for confirming any project-specific statutory or technical requirement independently.

B.7 Guidance-Only Disclaimer

Search results, summaries, checklists, comparisons, comments and compliance-support outputs generated by TGD Pilot are provided for guidance only. They may simplify or summarise source material and may not be complete, current or correct in every case.

You must not rely on TGD Pilot as your sole basis for regulatory compliance, certification, design sign-off, fire-safety strategy, accessibility sign-off, planning determination or legal interpretation.

B.8 Intellectual Property

TGD Pilot and its software, interface, branding, platform logic and non-user-generated content remain the property of the operator or its licensors. These Terms do not transfer any ownership rights to you.

You retain ownership of documents and content you upload, but you grant us a limited licence to host, process, index and display that content only as necessary to provide the service.

B.9 Availability, Changes and Suspension

We may update, improve, suspend or discontinue features from time to time. We do not guarantee uninterrupted availability, absolute accuracy, or that the service will always be free from defects.

We may suspend or terminate access where reasonably necessary for maintenance, security, legal compliance, non-payment, misuse, breach of these Terms or protection of other users.

B.10 Liability

To the fullest extent permitted by Irish law, TGD Pilot is provided on an "as is" and "as available" basis. We exclude liability for indirect, incidental or consequential loss arising from use of the platform, including loss caused by reliance on guidance outputs without independent verification.

Nothing in these Terms excludes liability that cannot lawfully be excluded, including liability for fraud, fraudulent misrepresentation, or death or personal injury caused by negligence where applicable.

B.11 Governing Law and Complaints

These Terms are governed by the laws of Ireland. Any dispute arising out of or in connection with these Terms or the use of TGD Pilot will be subject to the jurisdiction of the Irish courts, unless mandatory consumer law requires otherwise.

If you have a service complaint, legal concern or privacy request, contact us at info@tgdpilot.ie first.

B.12 Contact Information

TGD Pilot

Email: info@tgdpilot.ie

Website: https://tgdpilot.ie

Regulatory contact for data protection complaints in Ireland: Data Protection Commission