Privacy Policy

1. Who we are

JobTackl operates a local services marketplace connecting customers with independent providers across the United Kingdom. For the purposes of UK data protection law, JobTackl is the data controller for the personal data described in this policy.

For any privacy enquiry, or to exercise the rights described below, contact privacy@jobtackl.com. Formal legal correspondence should go to legal@jobtackl.com.

The controller is JOBTACKL LTD, company number 17372765, registered at John Eccles House, Robert Robinson Avenue, Oxford, England, OX4 4GP.

The ICO fee self-assessment completed on 2 August 2026 found that no fee or registration was required before trading. We will reassess this when marketplace trading begins and publish the registration number here if one is required.

We are not currently required to appoint a statutory Data Protection Officer. The founder is responsible internally for privacy, with enquiries handled through the address above. We will reassess this if our processing becomes large-scale.

2. Scope of this policy

This policy covers:

• Visitors to the JobTackl website
• People who join the JobTackl waitlist
• Customers and providers with JobTackl accounts, once accounts are available

Providers are independent of JobTackl. Where a provider uses your details for their own purposes beyond delivering a booking, they act as a separate controller and are responsible for their own compliance.

3. What we collect

Waitlist (current)

• Email address
• Whether you are a customer, a provider, or both
• Town or city, if you choose to give it
• Postcode area only — for example OX1. We do not ask for a full postcode or home address at this stage
• Whether you consented to marketing email
• The date and time you signed up
• Referral source and campaign parameters from the link you arrived on

Accounts and bookings (from launch)

• Name and contact details
• Account credentials
• Service address and job details, where you make or accept a booking
• Messages exchanged through the platform
• Booking history, reviews and ratings
• For providers: services offered, service area, availability, pricing, and verification documents
• For providers covered by digital-platform reporting rules: legal name, primary address, date of birth, tax residence, National Insurance or other tax identification number and, for a business, its legal name, address and registration details

Payments

Payments will be processed by Stripe. Card numbers are submitted directly to Stripe and are not stored by JobTackl. We receive confirmation of a payment, a transaction reference and the outcome, not your card details.

Technical data

• IP address, browser and device type
• Pages viewed and actions taken on the site
• Cookies and similar technologies

We use first-party, cookie-free analytics stored in our Supabase project. Events cover page views, calls to action, category interest and waitlist conversion outcomes. They do not contain names, email addresses, full postcodes, message content, precise location or a persistent visitor ID. We do not use advertising or cross-site tracking.

4. Why we use it, and our lawful bases

5. Who we share it with

We do not sell personal data. We share it only as follows:

• Between customers and providers, to the extent a booking requires it. A provider needs the service address to attend a job; a customer needs to know who is coming. Contact details are shared at the point a booking makes that necessary, not before.
• Stripe, to process payments and meet payment regulations.
• Supabase, for the waitlist database and first-party analytics, currently hosted in Frankfurt, Germany.
• Vercel, for website hosting, deployment and necessary server logs.
• Google Workspace, for JobTackl email and support correspondence.
• Cloudflare, for domain and DNS services. Our website DNS records are not currently proxied through Cloudflare.
• Apple and Google, for app distribution and store diagnostics once the apps launch.
• Other service providers acting on our instructions — including identity verification, customer support or marketing email — only after they are selected, assessed and added to this policy under written processing terms.
• Law enforcement or regulators, where we are legally required to, or where it is necessary to protect someone at risk.
• HM Revenue & Customs, where UK digital-platform reporting rules require us to report seller identity, payment, fee and transaction information. We also provide the affected provider with a copy of the annual information reported.
• A purchaser, if the business is sold or reorganised. You would be told.

Reviews and provider profiles are visible to other users of the platform by design. Do not put anything in a review or profile you would not want publicly visible.

6. Where your data is held

We prefer UK or EEA storage where practical, but some service providers are global companies and may process support, security or operational data elsewhere. We do not describe a service as UK-only unless its contract and configuration guarantee that.

Where personal data is transferred outside the UK, we rely on an applicable UK adequacy regulation, the UK–US Data Bridge where the recipient is certified, or contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum. We assess the provider and its data-processing terms before use. You may ask us which safeguard applies to a particular transfer.

7. How long we keep it

We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires. The periods below are our approved maximums unless a longer period is required for an active legal or safeguarding reason:

• Waitlist entries — until account creation, a deletion request, or six months after launch if no account is created.
• Account data — while open, then deleted or anonymised within 30 days, except for records listed below.
• Booking details and messages — two years after completion, or until an associated dispute or legal claim has ended.
• Payment, invoice and accounting records — six years after the relevant financial year.
• Digital-platform seller reporting records — for the period required by applicable tax law, and no longer unless another legal obligation or active claim applies.
• Support enquiries — two years after closure.
• Fraud, suspension and safety records — normally six years after account closure, reviewed for continued necessity.
• Provider verification documents — we keep the minimum outcome and avoid retaining raw documents where the verification provider can hold them. Any JobTackl-held copy is deleted within 90 days after verification unless the law requires otherwise.
• Security and technical logs — 90 days, extended only for an active investigation.
• Backups — removed through the normal backup cycle within 30 days.
• Anonymous analytics events — no more than 14 months.
• Marketing suppression record — six years after withdrawal, containing only what is needed to honour and prove the opt-out.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have data erased, in certain circumstances
• Restrict how we use your data, in certain circumstances
• Receive your data in a portable format, where processing is based on consent or contract
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting past processing

To exercise any of these, email privacy@jobtackl.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

Some rights have limits. We may need to keep a booking record for tax purposes, or retain a moderation record where erasing it would put someone at risk.

9. Deleting your account and your data

Accounts do not exist yet, so there is nothing to delete today. The in-app deletion feature described below has not been built and does not currently work.

Once accounts launch

You will be able to start deleting your account from inside the JobTackl app, without needing to email anyone. The route will be available from your account settings.

Before then, and at any time

Email privacy@jobtackl.com with any privacy question, or to ask us to delete data we hold about you — including a waitlist entry.

What deletion does and does not remove

Deleting an account removes your profile and stops us using your data to operate the service. Some records must be kept for a period even after deletion, where the law requires it or where we have a legal obligation:

• Tax and accounting records of payments made or received.
• Fraud prevention records, where deleting them would let a removed account simply return.
• Dispute resolution records, while a dispute is open or could still be raised.
• Safety and moderation records, where erasing them would put someone at risk.

We keep only what is necessary for those purposes, for as long as the relevant obligation lasts, and no longer. We will tell you what is being retained and why when you ask us to delete.

10. Marketing

Joining the waitlist means we will email you about the launch. Anything beyond that requires the separate consent offered on the waitlist form. Every marketing email will carry an unsubscribe link, and unsubscribing will not remove you from the launch announcement unless you ask.

11. Your analytics choice

12. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and keeping card data out of our systems entirely by using Stripe.

No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and tell you where required.

13. Children

JobTackl is not intended for under-18s, and accounts require you to be 18 or over. Where a service is delivered to a child — for example tutoring — the booking is made and held by an adult. If we learn we have collected data from a child, we will delete it.

14. Changes to this policy

We will update this policy as the platform develops, and materially before launch. Where changes are significant we will tell waitlist members and account holders directly rather than relying on a silent update.

15. Complaints

If you are unhappy with how we have handled your data, tell us first at privacy@jobtackl.com so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or by calling their helpline on 0303 123 1113.