Privacy notice

Last updated: 2 May 2026

Structivate is a Dublin-based company developing corrosion intelligence for end-of-life reinforced concrete infrastructure. This notice describes how Structivate handles personal data submitted via this website, in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) and the Irish Data Protection Act 2018.

What this notice covers

This notice applies to personal data submitted via the Structivate website, including the contact form and the SM:ART Trial application form. It does not cover data processing related to active SM:ART Trials governed by separate Evaluation Agreements between Structivate, asset owners, and engineering consultants, those arrangements have their own data handling provisions captured in the relevant agreement.

What Structivate collects

When you submit the contact form or the SM:ART Trial application form, Structivate collects the personal data you provide directly: name, work email address, organisation, role, and the content of your enquiry or application. The trial application form additionally collects structure context (geography, construction era, half-joint details, inspection history, corrosion status) and any optional notes you provide.

As with any website, the server hosting Structivate’s site receives standard request data including IP address, browser user-agent, request timestamp, and pages visited. This is processed automatically by the hosting infrastructure for operational purposes (security, abuse prevention, performance monitoring).

Structivate is currently in pre-launch state. Beyond the form submissions and server logs above, no other data collection is currently in place. Once the site is fully launched, this notice will be updated to reflect website analytics, transactional email infrastructure, and any other data processing introduced. Any such updates will be reflected in the date stamp at the top of this notice.

Why Structivate collects it

Personal data submitted via the contact form or the SM:ART Trial application form is processed on the lawful bases of legitimate interests (Article 6(1)(f) GDPR) and pre-contractual measures (Article 6(1)(b) GDPR). The legitimate interest is responding to a commercial enquiry initiated by you; the pre-contractual basis applies where the enquiry is directed at entering into a SM:ART Trial Evaluation Agreement.

Server log data is processed on the lawful basis of legitimate interests (Article 6(1)(f) GDPR) for the purpose of operating, securing, and maintaining the website infrastructure.

Structivate does not currently use personal data for marketing purposes or for website analytics. No automated decision-making or profiling is carried out on personal data submitted via this site.

Where it goes and how long Structivate keeps it

Structivate engages the following processors to operate the website and handle form submissions:

Resend, transactional email provider (sends triage emails to Structivate and confirmation emails to you). Data processed: form submission contents (name, email, organisation, message, and structure details for trial applications). Storage: minimal, emails are sent and not retained beyond delivery confirmation. Resend operates infrastructure in the US and EU; data may be transferred to the US under Standard Contractual Clauses.
Vercel, website hosting and content delivery. Data processed: standard server logs (IP address, user agent, request path, timestamps). Default retention: 30 days. Vercel operates US-based and EU edge regions; data may be transferred to the US under Standard Contractual Clauses.
Google Analytics(Google LLC), analytics provider, with your explicit consent only. Data processed: aggregated page views, click events, anonymised location data, browser and device information. Default retention: 2 years per Google’s GA4 defaults. Google Analytics is US-based; data is transferred to the US under Standard Contractual Clauses.
Google Workspace (Google LLC), triage inbox at info@structivate.ai. Data processed: copies of triage emails after Resend delivery. Google Workspace is US-based; data is transferred to the US under Standard Contractual Clauses.
Namecheap, domain registrar and DNS provider. Data processed: DNS lookup data (server resolution; no form contents). Namecheap operates US-based infrastructure.

Form submissions are otherwise stored on Structivate-controlled systems. Any additional processors introduced after the date of this notice will be added here, and the date stamp at the top updated.

Personal data submitted via the contact form or the SM:ART Trial application form is retained for six years from the date of submission. This retention period reflects the record-keeping requirements applicable to Structivate’s Enterprise Ireland Commercialisation Fund grant (project CF-2024-2427-I) and standard B2B record-keeping practice. After this period, personal data is deleted unless retention is required by law or for the establishment, exercise, or defence of legal claims.

Cookies and similar technologies

Structivate uses cookies on this website. Essential cookies enable basic site functionality (including remembering your consent decision); analytics cookies are set only with your explicit consent and support Google Analytics. The full disclosure, cookie names, purposes, retention periods, and the consent mechanism, is in the Cookie Notice.

Your rights and how to contact Structivate

Under the GDPR, you have the right to: access personal data Structivate holds about you; request rectification of inaccurate personal data; request erasure of your personal data; restrict processing; object to processing based on legitimate interests; data portability; and withdraw consent where consent was the lawful basis. To exercise any of these rights, contact Structivate at info@structivate.ai.

If you are not satisfied with how Structivate handles your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC). The DPC is contactable at info@dataprotection.ie or via dataprotection.ie.

This notice may be updated to reflect changes in Structivate’s data processing or legal requirements. The date at the top of this notice indicates when it was last revised.