Privacy Notice

Who we are

[DECISION D7 - not yet decided] The organisation responsible for your personal data is expected to be HMD Building & Maintenance Ltd, company number 08870199, registered office Unit 12 King Alfred Way, Cheltenham, England, GL52 6QP. The ICO registration number and a data protection contact email have not been recorded and will be added here. DRAFT: not reviewed by a solicitor.

What we collect about customers

From your account and profile:

• name, email address (verified), phone number, home address and postcode;
• date of birth, used only to work out whether you have reached State Pension age for the senior discount; it is not shown to tradespeople;
• booking details, photos you add, access information, messages about your booking, payment status and amounts (card details go directly to Stripe; we do not store them);
• the terms you accepted and when, and any marketing choice you make;
• reviews you write or receive.

What we collect about contractors

From your application and use of the app:

• name, date of birth, address, phone, email, business and company details, VAT status, trades and agreed hourly rate;
• proof of identity, insurance, qualification and DBS documents and details, and the office's review notes and decisions (visible only to authorised office staff);
• payout details are held by Stripe, not by us;
• location of your base address and availability, visit times and work records;
• reviews you write or receive and incident records.

Why we use it

We use details to run bookings (contract), to take payments and pay tradespeople (contract), to vet tradespeople and keep customers safe (legitimate interests and legal obligations), to prevent fraud and abuse (legitimate interests), and to keep records the law requires. Marketing is only sent if you opt in, separately. [DECISION D7 - not yet decided] The legal basis for each purpose is to be confirmed in legal review.

Who sees it

Contractors assigned to your job see what they need to do it. [DECISION D15 - not yet decided] The exact fields and timing are to be confirmed. Contractors never see your date of birth or booking access tokens. Customers never see a contractor's identity documents, date of birth, DBS documents or the office's private notes. Reviews show a display name only, never an address or contact details.

Service providers

We use these providers to run the service:

• Clerk (sign-in and account security), including Cloudflare Turnstile for human verification;
• Google Firebase / Cloud (database and file storage);
• Stripe (customer payments, refunds and contractor payouts);
• LocationIQ (turns postcodes into locations);
• our hosting provider [to be confirmed].

Cookies and similar technologies

See the Cookie Information page. At present we use only storage that is strictly necessary to sign you in, keep the service secure and take payments.

How long we keep it

[DECISION D6 - not yet decided] No retention periods have been set. They will be listed here per category (profile, bookings and receipts, photos, contractor documents and vetting notes, reviews, security logs, consent records). We will not keep personal data longer than needed.

Your rights

You have rights to be informed, to access your data, to have it corrected or deleted in some cases, to restrict or object to some processing, to data portability in some cases, and to withdraw consent where we rely on it. To use them, contact us using the details above. You can complain to the Information Commissioner's Office (ico.org.uk). [DECISION D7 - not yet decided] The request process and contact are to be confirmed.

Deleting your account

You can ask us to delete your account. Some records, such as payment and accounting records, safety incidents and moderation history, may have to be kept for legal reasons. [DECISION D6 - not yet decided] Details to be confirmed.

Changes

If this notice changes we publish a new version and tell you. Previous versions remain available.