ServiceTasker Privacy Policy

1. Who We Are

ServiceTasker (registered in the UK) acts as the service marketplace where people can post their jobs to connect with local experts for the given work.

2. What Personal Data We Collect

• Account Information: Name, email, phone number, address/postcode.
• Business Data (for tradespeople): Company registration, qualifications, licences, insurance.
• Job Details: Task descriptions, location, and quotes.
• Device & Technical Data: IP address, browser details, device type, usage patterns via cookies.
• Payment Info: This is only applicable for businesses. You need to share some information to add credits to your wallet.
• Communications: Messages between users, support inquiries, reviews and associated content.

3. How We Collect Data

• Directly from you: Via account creation, job postings, messages, and profile uploads.
• Automatically: Through cookies, analytics, and website usage tracking.
• From third parties: Integration partners, payment processors, or public databases, with transparency.

4. Why We Collect Data & Our Legal Basis

• Service delivery: To match customers with tradespeople, facilitate messaging, and manage accounts.
• Platform improvement: Analytics and performance monitoring.
• Legal compliance: Verifying business credentials/licences, adhering to regulations.
• Marketing (if opted-in): Promotional emails or notifications (Consent needed).

5. How We Use Your Data

• Enabling platform functionality (job matching, messaging, notifications).
• Verifying user identities, trade qualifications, and business status.
• Offering personalised user experience and marketing (if consent granted).
• Improving services through aggregated analytics.
• Ensuring safety and compliance with laws.

6. Who We Share Your Data With

• Third-party service providers: Email platforms, analytics tools, cloud hosts, identity verification services.
• Tradespeople and customers: Job details are shared between parties as necessary.
• Regulatory or legal authorities: If required by law (e.g., for fraud or serious misconduct).
• Aggregated/anonymous data: For internal reporting or enhancement, without identifying individuals.

7. Data Transfers Outside the UK

• If we transfer data internationally—e.g., server providers outside the UK/EU—we ensure GDPR-level protections via Standard Contractual Clauses or equivalent safeguards.

8. How Long We Keep Your Data

• Account data: Retained until you close your account; archived securely thereafter.
• Job records & messaging: Stored for a specified duration for dispute resolution.
• Analytics & logs: Retained in anonymised or aggregated form per internal policies or legal requirements.

9. How We Secure Your Data

• Use encryption (e.g., TLS for data in transit, encrypted storage at rest).
• Implement security measures like access controls, secure infrastructure, and regular audits.
• Apply Privacy by Design—embedding data protection into platform architecture from the start.

10. Your Rights (Under UK GDPR)

• Access your data.
• Rectify inaccuracies.
• Erase (“right to be forgotten”) where applicable.
• Restrict processing.
• Withdraw consent at any time (especially for marketing).
• Data portability—request a copy of your data in a transferable format.
• Object to processing, especially for direct marketing or profiling.
• Complain with the Information Commissioner's Office (ICO) if needed.

11. Cookies & Tracking

• Clearly explain all cookie categories: essential, analytics, marketing—along with their purposes and how users can manage them.
• Offer granular consent and allow users to withdraw consent at any time.

12. Children’s Privacy

• Only people aged 18+ may register. If underage data is discovered, it will be removed promptly.

13. Data Breach Protocol

• In case of a breach, notify the ICO within 72 hours, and inform affected users if there's a high risk to their rights or freedoms.

14. Policy Updates

• We’ll update the policy as needed (e.g., regulatory changes or new features).

15. How to Contact Us

• Email or contact form for privacy-related queries.