Privacy Policy

1. Introduction

My Task Master Ltd ("we", "us", "our") operates the MyTaskMaster platform at mytaskmaster.io. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform to connect with tradespeople and service providers.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Contact Information: Name, email address, phone number, postal address
• Service Request Details: Description of work needed, property information, preferred timings, budget
• Account Information: Username, password (encrypted), profile preferences
• Payment Information: Payment card details processed securely through Stripe (we do not store full card details)
• Communications: Messages sent through our platform, WhatsApp conversations, emails, support tickets
• Trade Professional Information: Business details, qualifications, insurance documents, trade licenses, portfolio photos

2.2 Information We Collect Automatically

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages viewed, time spent on pages, click patterns, search queries
• Location Data: Postcode, approximate location based on IP address, GPS location (with your permission)
• Cookies and Tracking: We use cookies, web beacons, and similar technologies (see Section 8)
• Analytics Data: User behavior, conversion metrics, platform performance data

2.3 Information from Third Parties

• Payment Processors: Transaction confirmations from Stripe
• Identity Verification: Background check results, credit checks for trade professionals
• Social Media: Public profile information if you connect via Google or other OAuth providers
• Marketing Partners: Google Ads conversion data, advertising identifiers

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Service Provision

• Matching customers with appropriate trade professionals based on service requirements and location
• Processing and managing service requests and quotes
• Facilitating communication between customers and tradespeople via platform messaging, SMS, WhatsApp
• Processing payments for lead purchases and subscription fees
• Managing user accounts and authentication

3.2 Platform Improvement

• Analyzing usage patterns to improve user experience
• Developing new features and services
• Testing and troubleshooting technical issues
• Training AI models to improve matching algorithms and service recommendations

3.3 Safety and Security

• Verifying identity of trade professionals
• Preventing fraud, abuse, and illegal activities
• Enforcing our Terms and Conditions
• Protecting the rights and safety of our users

3.4 Communications

• Sending service-related notifications (new quotes, messages, appointment reminders)
• Providing customer support
• Sending marketing communications about our services (with your consent)
• Conducting surveys and collecting feedback

3.5 Legal Compliance

• Complying with legal obligations and regulatory requirements
• Responding to lawful requests from authorities
• Establishing, exercising, or defending legal claims

4. Legal Basis for Processing (UK GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services and fulfill our contractual obligations
• Consent: Where you have given explicit consent (e.g., marketing communications, cookies)
• Legitimate Interests: For platform improvement, fraud prevention, and business operations
• Legal Obligation: To comply with laws, regulations, and legal processes

5. How We Share Your Information

5.1 With Trade Professionals

When you submit a service request, we share relevant information (name, contact details, location, job description) with matched trade professionals so they can provide quotes and complete the work.

5.2 Service Providers

We share data with trusted third-party service providers who help us operate our platform:

• Payment Processing: Stripe (for secure payment processing)
• Cloud Infrastructure: Amazon Web Services (AWS), Vercel (for hosting and data storage)
• Communication Services: Twilio (SMS), WhatsApp Business API (messaging)
• Email Services: Amazon SES (transactional emails)
• Analytics: Google Analytics, Sentry (error monitoring)
• AI Services: AWS Bedrock, Anthropic Claude (for AI-powered features)
• Customer Support: Third-party helpdesk tools

5.3 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change.

5.4 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our users or the public.

5.5 With Your Consent

We may share information for any other purpose with your explicit consent.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Data retained while your account is active
• Service History: Transaction records and communications retained for 7 years (tax and legal compliance)
• Marketing Data: Retained until you withdraw consent or for 2 years of inactivity
• Closed Accounts: Most data deleted within 90 days, except where legal retention is required
• Legal Holds: Data retained longer if required for legal proceedings or investigations

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access, multi-factor authentication for staff
• Regular Audits: Security assessments and penetration testing
• Monitoring: 24/7 system monitoring and intrusion detection
• Staff Training: Regular security and data protection training for employees
• Vendor Management: All third-party processors contractually bound to data protection standards

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

8.1 Types of Cookies

• Essential Cookies: Required for platform functionality (authentication, security)
• Performance Cookies: Analytics to understand how users interact with our platform
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track advertising effectiveness and deliver relevant ads

8.2 Managing Cookies

You can control cookies through your browser settings. However, disabling cookies may limit platform functionality. Visit www.allaboutcookies.org for instructions on managing cookies in different browsers.

9. Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data (subject to legal retention requirements)
• Right to Restriction: Limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on consent
• Right to Lodge a Complaint: File a complaint with the Information Commissioner's Office (ICO)

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately so we can delete it.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the UK, including the United States (AWS infrastructure, Anthropic AI services). We ensure appropriate safeguards are in place:

• EU/UK Standard Contractual Clauses with data processors
• Adequacy decisions recognized by UK authorities
• Data Processing Agreements with all third-party providers

12. Marketing Communications

We may send you marketing emails about our services, special offers, and updates. You can opt out at any time:

• Click "unsubscribe" in any marketing email
• Update preferences in your account settings
• Contact us at support@mytaskmaster.io

Note: You will still receive essential service-related communications (booking confirmations, security alerts).

13. Third-Party Websites

Our platform may contain links to third-party websites (e.g., tradesperson websites, social media). We are not responsible for their privacy practices. Please review their privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:

• Email notification to registered users
• Prominent notice on our website
• Updating the "Last Updated" date at the top of this policy

Your continued use of our platform after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: