Last updated: 3 September 2026
Operator: People Building Ltd Company number: 06969239 Address: 15 Queensway, Hemel Hempstead, Hertfordshire, HP1 1LS, United Kingdom Email: info@peoplebuilding.co.uk ICO registration: Z2203181
1. Purpose
This notice explains how users may access/export available Tupolis information and how formal data-protection access requests are handled.
2. Ordinary account/export access
Members can request a copy of their available Tupolis information by emailing info@peoplebuilding.co.uk with the subject Tupolis Data Request. Where functionality exists, administrators may also export user/account information, course progress, completed modules, quiz/assessment information and scores, comments and relevant user-generated content.
3. Subject access requests
A person does not need to use the phrase “subject access request” for a valid request. If the substance of the message is a request for their personal information, it should be recognised and handled accordingly.
4. Contact
Requests can be sent to info@peoplebuilding.co.uk. Tupolis Data Request is a helpful subject line but is not mandatory.
5. Identity verification
We may request reasonable, proportionate identity verification where needed. Do not request formal ID unnecessarily.
6. Parents and children
A parent/guardian may help with a request concerning a child, but account control does not necessarily give unrestricted access to every item about a child in every circumstance. Consider the child's rights, age, understanding, parental responsibility, confidentiality and safeguarding.
7. Representatives
A third party may act for an individual where appropriate authority is demonstrated.
8. Other people's information
Responses may need redaction or other handling where information also concerns another person.
9. Practitioner/safeguarding information
Professional forum, confidential third-party and safeguarding material requires careful review before disclosure. Applicable exemptions/restrictions may apply.
10. Requests extending beyond Tupolis
If a person asks for all personal information People Building holds, do not artificially limit the search to the Tupolis database. Relevant information may exist in other systems, including support, professional or safeguarding systems.
11. Format and delivery
Information may be supplied in PDF, CSV, spreadsheet or another accessible/structured format as appropriate, and should be delivered securely.
12. Timescale and fees
Data-protection requests should be handled without undue delay and within the applicable statutory period, normally one month for a standard SAR, subject to lawful extensions/pauses. Requests are normally free, with limited exceptions provided by law.
13. Limits
We cannot provide information that was never collected, has already been lawfully deleted, has been genuinely anonymised, or is held independently by another controller solely because a related link/service appears in Tupolis.
14. AI
No significant solely automated decisions are currently made by Tupolis. Future AI-related data access and explanatory information must be reviewed before launch.
15. Other rights and complaints
Other rights may include correction, deletion, restriction, objection and portability. Data-protection complaints may also be made to the Information Commissioner's Office where applicable.