title

1. Introduction

WhatOnSite ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, phone number
• Profile Information: Professional title, bio, skills, experience, location, photos
• Company Information: Company name, registration details, business address
• Payment Information: Billing address, payment card details (processed securely by third parties)
• Communications: Messages sent through the Platform, support inquiries

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on Platform
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: Approximate location based on IP address (with your consent)
• Cookies and Tracking: See our Cookie Policy for details

2.3 Information from Third Parties

• Social media profiles (if you connect your accounts)
• Payment processors (transaction confirmations)
• Analytics providers (aggregated usage statistics)

3. How We Use Your Information

3.1 Platform Services

• Creating and managing your account
• Facilitating building records and applications
• Enabling communication between users
• Processing payments and subscriptions
• Providing customer support

3.2 Improvement and Development

• Analysing Platform usage to improve services
• Developing new features and functionality
• Conducting research and analytics

3.3 Communication

• Sending service notifications and updates
• Responding to inquiries and support requests
• Sending marketing communications (with your consent)

3.4 Legal and Safety

• Complying with legal obligations
• Preventing fraud and abuse
• Protecting user safety and security
• Enforcing our Terms and Conditions

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract: To provide services you've requested
• Consent: For marketing communications and optional features
• Legitimate Interests: To improve our Platform and prevent fraud
• Legal Obligation: To comply with applicable laws

5. Sharing Your Information

5.1 With Other Users

Your profile information is visible to other users based on your account type and privacy settings. Homeowners can view tradesperson profiles, and users can view building records.

5.2 With Service Providers

We share data with trusted third parties who help us operate the Platform:

• Cloud hosting providers (e.g., Supabase, Vercel)
• Payment processors (e.g., Stripe)
• Email service providers
• Analytics providers

5.3 Legal Requirements

• Comply with legal processes
• Respond to government requests
• Protect our rights and property
• Prevent fraud or illegal activity

5.4 No Selling of Data

We do not sell your personal information to third parties for their marketing purposes.

6. Data Retention

• Active accounts: Data retained while account is active
• Deleted accounts: Most data deleted within 30 days; some data retained for legal compliance
• Transaction records: Retained for 7 years for tax and accounting purposes
• Support communications: Retained for 3 years

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing at any time

To exercise these rights, use our contact form.

8. Data Security

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your information.

9. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Certified frameworks (e.g., EU-U.S. Data Privacy Framework)

10. Children's Privacy

Our Platform is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover we have collected such information, we will promptly delete it.

11. Cookies and Tracking

We use cookies and similar tracking technologies. For detailed information, please see our Cookie Policy.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or Platform notification. The "Last Updated" date at the top of this policy indicates when it was last revised.

13. Contact Information

For privacy-related questions or to exercise your rights:

Data Protection Officer
Use our contact form.
Address: WhatOnSite, London, United Kingdom