Privacy Policy

Your name, email address, phone number and account type. Your password is held by Firebase Authentication and we never see it. We also record that you accepted these terms at sign-up, the date and time, and whether you ticked the optional marketing box.

When you post a job you give us the whole address, not just a postcode: address lines 1 to 4, town, county, full postcode, country, and the map coordinates of the property. Section 4 explains exactly who sees it and when.

The title, description, category, guidance price and urgency of the job, and any photographs you upload of the work needed.

Offers made and received, scope of work and checklists, completion reports and completion photographs, and — if something goes wrong — the dispute category and any evidence either side uploads.

The messages you send to the other party about a job, and who sent them to whom.

The star rating, written review and any review photographs, shown publicly with the name on your account. Customers also get an average reliability score worked out from the ratings providers have given them.

Business name and description, service areas, portfolio images, company registration number, Unique Taxpayer Reference, VAT registration number, and any insurance certificate and its expiry date.

Card details are typed straight into Stripe's own payment form — we never receive or store your card number. We keep the amount, the Stripe references for the payment and the payout, the fees deducted, and the country and brand of the card used.

Your push notification token if you allow notifications, your IP address, and error and diagnostic data from the app and website. Our error monitoring is configured to include identifying information.

Which cookie categories you allowed or refused, and when you chose.

Creating your account, posting your job, collecting offers, taking your payment, holding it until the job is done and paying the provider.

Passing the full address, your name and your contact details to the provider whose offer you accepted. They cannot turn up otherwise.

Emails and push notifications about things that are actually happening — an offer arrived, the job started, the payment was released.

Records of payments, fees and invoices, for tax and accounting purposes.

People have to be able to judge who they are letting into their home, or whose home they are going to. You can object — see section 7.

Preventing fraud and abuse, limiting how often anyone can hammer our systems, investigating reports, and looking at the evidence when a job is disputed.

Error monitoring and diagnostics so we can find and fix faults.

Only if you ticked the optional box at sign-up, and you can untick it at any time. We do not currently send any marketing email at all.

Only what you allow in the cookie banner, and only for as long as you allow it. See section 8.

Deleted 90 days after they were sent. That happens to every message, whether or not your account is still open and whether or not the job is finished — so keep your own copy of anything you may need later.

Deleted 30 days after they were created.

Kept until you delete your account, then removed (see section 7).

Kept after your account is deleted. They are also the other party's record of the job, and we have to keep records of payments for tax purposes. We keep them for as long as we may need them for those purposes, or to defend a legal claim, and no longer.

The export in your account settings gives you a JSON file with your profile, your business profile, the jobs you posted as a customer, the reviews you have written and received, and the completion reports for jobs you carried out. It does not include your messages, your notifications, the offers you made or received, or your payment records — email us and we will send those separately.

Change your name, phone number, email and business details in your profile at any time. If something you cannot edit is wrong, email us and we will fix it.

Deleting your account removes your profile, your business profile, your notifications, your sign-in account and the files stored under your account, and cancels any job of yours that is still open. It does not remove reviews you have written or received, jobs that are past the open stage, messages still inside the 90-day window, completion reports, or payment and transaction records — those stay, with your name on them. If you want your name taken off a review, email us and we will do it by hand.

The export is machine-readable JSON, so you can move it to another service.

Where we rely on legitimate interests — reviews and public profiles, safety and fraud work, error monitoring — you can object and we will stop unless we have compelling grounds to carry on.

You can ask us to restrict what we do with your data while a complaint or a correction is being sorted out.

Untick marketing in your settings, change your cookie choices with “Manage cookies” at the bottom of any page, or turn push notifications off in your device settings. Withdrawing consent does not undo what we did before you withdrew it.

You can complain to the Information Commissioner's Office at ico.org.uk. We would rather you came to us first so we can put it right, but you do not have to.

The sign-in tokens Firebase sets to keep you logged in, and the record of your cookie choice itself: the outvalue_consent_analytics and outvalue_consent_marketing cookies, which last a year, plus outvalue_cookie_consent_v2 in your browser's local storage. These cannot be turned off without breaking the site.

If you allow analytics, we load Datadog to measure how pages load and record errors. It sets a _dd_s_v2 cookie that expires after 15 minutes of inactivity and lasts up to 4 hours. If you don't, Datadog doesn't load. Change your choice any time from 'Manage cookies' in the footer.

We do not currently run advertising or load any marketing tag. Allowing this category records your choice and nothing else.