Privacy Policy
Last updated: 1 January 2025
1. Who We Are
OwtSourced Ltd ("OwtSourced", "we", "us") is the data controller for personal data processed through our Platform at owtsourced.co.uk. We are registered in England and Wales and process personal data in accordance with UK GDPR and the Data Protection Act 2018.
You can contact our data controller at: privacy@owtsourced.co.uk
2. Data We Collect
Account Data
Name, email address, phone number, and encrypted password when you register.
Booking Data
Service details, address, scheduled date and time, notes, and booking history.
Payment Data
Payment transactions are processed by Stripe. We receive confirmation of payment status and a tokenised reference. We never store your full card number, CVV, or bank details.
Provider Data
For Providers: business details, insurance certificates, DBS check status, bank account details (held by Stripe Connect), and service descriptions.
Usage Data
IP address, browser type, pages visited, and interaction data collected via cookies and analytics tools (only with your consent — see our Cookie Policy).
Communications
Messages sent via our support channels, review content, and claim documentation (photos and written explanations).
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Providing the booking and payment service | Contract performance |
| Matching Customers with Providers | Contract performance |
| Processing refunds and resolving disputes | Contract performance / Legal obligation |
| Sending booking confirmations and reminders | Contract performance |
| Fraud prevention and platform security | Legitimate interests |
| Analytics and platform improvement | Consent |
| Marketing communications | Consent |
| Compliance with legal obligations | Legal obligation |
4. Data Sharing
We share your data only where necessary:
- Stripe — for secure payment processing. Stripe is a data processor acting under our instruction.
- Providers — we share your name, address, and booking details with the Provider assigned to your job.
- Resend / Twilio — for transactional emails and SMS notifications.
- Analytics providers — only with your cookie consent.
- Legal authorities — where required by law or court order.
We do not sell your personal data to third parties.
5. Data Retention
- Account data: retained for 3 years after your last activity, then deleted on request.
- Booking and transaction data: retained for 7 years for financial and legal compliance.
- Support and claim correspondence: retained for 3 years.
- Marketing consent records: retained until you withdraw consent.
6. Transfers Outside the UK
Some of our service providers (including Stripe and Twilio) may process data in the United States or other countries. Where transfers occur outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).
7. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
- Withdraw consent at any time
To exercise your rights, visit our GDPR Rights page or email privacy@owtsourced.co.uk. You also have the right to lodge a complaint with the ICO at ico.org.uk.
8. Cookies
We use cookies to operate the Platform and (with consent) for analytics and marketing. See our full Cookie Policy for details and to manage your preferences.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or a prominent notice on the Platform. The "last updated" date at the top of this page reflects the most recent revision.