In short
We collect the information we need to match you with a trusted local professional, take payment safely, and keep everyone on the platform secure. We never sell your personal data. You can access, correct, export or delete your data at any time — see Your rights or go straight to our account deletion page.
1.Who we are
Abx Technologies Ltd(“we”, “us”, “our”) operates the Abx-Handymanplatform, which connects customers (“Clients”) with self-employed trades and service professionals (“Experts”).
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Abx Technologies Ltd is the data controller of the personal data described in this policy.
- Registered name: Abx Technologies Ltd
- Registered office: 77 Renfrew St. Glasgow, Scotland
Where an Expert uses your data for their own purposes — for example, keeping their own job records or invoices for tax purposes — that Expert is a separate, independent data controller and is responsible for their own compliance.
2.Scope of this policy
This policy applies to our website, our mobile applications, and any related services (together, the “Platform”). It covers Clients, Experts, and visitors who browse without an account.
It does not cover third-party websites or services we link to. Those organisations have their own privacy policies, which we encourage you to read.
3.Personal data we collect
Information you give us
- Account details — name, email address, telephone number, password, profile photo, and your account type (Client or Expert).
- Job information — the service address, access instructions, descriptions of the work, photos or videos you upload, preferred dates and times.
- Payment information — billing address and, for Experts, bank account and tax details for payouts. Card details are entered directly with our payment provider and are never stored on our systems.
- Expert verification records — proof of identity and right to work, trade qualifications and registrations (for example Gas Safe or a competent person scheme for electrical work), public liability insurance certificates, and the outcome of background checks.
- Communications and content — in-app messages, ratings and reviews, support tickets, and correspondence with us.
Information we collect automatically
- Device and technical data — IP address, device identifiers, operating system, browser type, app version, crash logs and diagnostic data.
- Location data — with your permission, approximate or precise device location, so we can show nearby jobs to Experts and provide live tracking to Clients. You can withdraw this permission in your device settings at any time, though some features will stop working.
- Usage data — pages and screens viewed, searches, features used, and timestamps.
Information from third parties
- Identity, background-check and right-to-work verification providers.
- Payment and fraud-prevention providers.
- Mapping and address-lookup providers when you enter a service address.
- Social or single sign-on providers, if you choose to register using one.
4.How and why we use your data
UK data protection law requires us to have a “lawful basis” for every use of your personal data. The table below sets out what we do, and why we are permitted to do it.
| What we do | Data used | Lawful basis |
|---|---|---|
| Create and administer your account | Account details, verification records | Performance of a contract with you |
| Match jobs to Experts and Experts to jobs | Job information, location, profile and rating data | Performance of a contract with you |
| Take payment, pay out to Experts and handle refunds | Payment and billing information, transaction history | Performance of a contract; compliance with a legal obligation |
| Verify Experts and run background checks | Identity documents, qualifications, insurance, criminal record data | Legitimate interests (platform safety); substantial public interest under the Data Protection Act 2018 |
| Provide customer support and resolve disputes | Communications, job and payment records | Performance of a contract; legitimate interests (resolving complaints fairly) |
| Prevent fraud, abuse and misuse of the Platform | Device data, usage data, transaction patterns | Legitimate interests (protecting users and our business) |
| Improve and develop the Platform | Usage and diagnostic data, aggregated statistics | Legitimate interests (improving our service) |
| Send service messages (booking confirmations, receipts, security alerts) | Account and job details | Performance of a contract |
| Send marketing about our services | Account details, preferences | Consent, or legitimate interests where the soft opt-in under PECR applies |
| Set non-essential cookies and analytics | Device and usage data | Consent |
| Meet legal, tax, accounting and regulatory obligations | Transaction, identity and correspondence records | Compliance with a legal obligation |
| Establish, exercise or defend legal claims | Any relevant records | Legitimate interests (protecting our legal position) |
Where we rely on legitimate interests, we have carried out a balancing assessment to confirm our interests do not override your rights and freedoms. You may ask us for a summary of that assessment, and you have the right to object — see Your rights.
5.Background and criminal record checks
Experts who apply to offer services through the Platform are asked to complete identity and background checks, which may include a basic Disclosure and Barring Service (DBS) check (or Disclosure Scotland / AccessNI equivalent), carried out through an approved third-party provider.
Information about criminal convictions and offences is given special protection under Article 10 of the UK GDPR. We process it only where a condition in Schedule 1 to the Data Protection Act 2018 applies — in our case, for the prevention or detection of unlawful acts and the protection of the public — and we maintain an appropriate policy document as required by that Act.
- We record the outcomeof a check (for example “cleared” or “not cleared”) and the date, not the full certificate content, unless a disclosure requires individual assessment.
- Access is restricted to the small number of staff responsible for onboarding and safeguarding decisions.
- Criminal record data is not shared with Clients. Clients see only that an Expert has passed our verification process.
6.Automated decision-making
We use automated systems to rank and route job requests to Experts based on distance, skills, availability, rating and past performance, and to flag suspicious activity for review.
Ranking and matching do not produce legal or similarly significant effects on you and are therefore not “solely automated decisions” within the meaning of Article 22 of the UK GDPR. Where an automated system flags an account for suspension or removal, a member of our team reviews the case before any final decision is taken. You may ask for human intervention, express your point of view, and contest any such decision by contacting info@abxhandyman.co.uk.
8.International transfers
We aim to keep personal data within the UK and the European Economic Area. Some of our service providers operate outside the UK. Where personal data is transferred internationally, we make sure one of the following safeguards is in place:
- the destination country is covered by UK adequacy regulations; or
- the transfer is made under the UK International Data Transfer Agreement, or the UK Addendum to the European Commission’s Standard Contractual Clauses, together with a transfer risk assessment; or
- another safeguard or exception permitted by Chapter V of the UK GDPR applies.
You can request a copy of the safeguards we rely on by emailing info@abxhandyman.co.uk.
9.How long we keep your data
We keep personal data only for as long as we need it for the purposes set out in this policy, and to meet our legal obligations. Our standard periods are:
| Category | Retention period | Reason |
|---|---|---|
| Account and profile data | Life of the account, then 30 days | Allows account recovery if deletion was a mistake |
| Job records and messages | 6 years after the job is completed | Limitation Act 1980 — the period during which a contract claim may be brought |
| Payment and transaction records | 6 years after the end of the relevant accounting period | Companies Act 2006 and HMRC record-keeping requirements |
| Expert verification and background-check outcomes | Life of the account, then 12 months | Safeguarding and dispute defence; underlying certificates are not retained long-term |
| Ratings and reviews | Retained after account closure, anonymised | Preserves the integrity of Platform ratings for other users |
| Support correspondence | 3 years after the ticket is closed | Handling repeat complaints and quality assurance |
| Marketing preferences and suppression lists | Indefinitely, in minimal form | So we can honour your opt-out and not contact you again |
| Cookie and analytics data | Up to 26 months | Statistical analysis of Platform usage |
Where we no longer need to identify you, we may anonymise your data instead of deleting it and continue to use it for statistical purposes. Anonymised data is no longer personal data.
11.Marketing communications
We will only send you marketing by email or SMS where you have opted in, or where you have previously used a similar service from us and did not opt out at the time (the “soft opt-in” permitted by PECR). Every marketing message includes an unsubscribe link, and you can update your preferences in your account settings at any time.
Opting out of marketing does not stop service messages such as booking confirmations, receipts, safety notices and security alerts, which we need to send to operate your account.
12.How we keep your data secure
We maintain technical and organisational measures appropriate to the risk, including encryption of data in transit and at rest, role-based access controls, multi-factor authentication for staff, logging and monitoring, secure development practices, supplier due diligence, and staff data protection training.
No system can be guaranteed completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it, and we will tell you directly if the risk is high.
13.Your rights
Under UK data protection law you have the following rights, free of charge:
- Access — to be told whether we hold data about you and to receive a copy of it.
- Rectification — to have inaccurate data corrected and incomplete data completed.
- Erasure (‘right to be forgotten’) — to have your data deleted where we no longer have a good reason to keep it.
- Restriction — to ask us to pause processing while a concern is investigated.
- Portability — to receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another provider.
- Objection — to object to processing based on legitimate interests, and an absolute right to object to direct marketing.
- Withdraw consent — where we rely on consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out beforehand.
- Rights relating to automated decisions — see Automated decision-making.
To exercise any right, email info@abxhandyman.co.uk, or use the account deletion page for erasure requests. We may ask you to verify your identity before we act. We will respond within one month (30 days). If your request is complex or you have made several, we may extend this by up to two further months and will tell you why within the first month.
Some rights are qualified. For example, we may not be able to erase transaction records we are legally required to keep, and reviews you left about an Expert may remain on the Platform in anonymised form so other users are not misled.
14.Children
The Platform is not intended for children. You must be at least 18 years old to hold an account. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact info@abxhandyman.co.uk and we will delete it.
15.Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last revised. If we make a change that significantly affects how we use your personal data, we will tell you directly — by email or an in-app notice — before it takes effect.
16.Contact us and complaints
If you have any question about this policy or how we handle your data, please contact us first — we would like the chance to put things right.
- Email: info@abxhandyman.co.uk
- Post: Abx Technologies Ltd, 77 Renfrew St. Glasgow, Scotland
- Telephone: +44 7448 788659
Complaining to the regulator
You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at any time.
- Website: https://ico.org.uk
- Helpline: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom