Privacy Notice

1 Who we are

Hyper Property Services is a trading name of Modern Advantage Limited, a company registered in Northern Ireland (company number NI000000), with its registered office in Derry, Northern Ireland.

We introduce customers to independent tradespeople and we orchestrate the booking between them. We are never the employer of the tradesperson and never the principal contractor for the work itself. That distinction matters in this notice because it decides whose data we hold and why.

We are registered with the Information Commissioner's Office under registration number ZA000000.

2 Who this notice applies to

This notice applies to you if you are:

• a customer, or someone enquiring about a job, whether or not you go on to book
• a tradesperson registered with us, or applying to register
• a named contact at a business that uses us, such as a letting agent or a landlord
• someone who joins our waiting list for an area we do not cover yet

It does not cover what an independent tradesperson does with your details after we introduce you. Once a booking is accepted they are a separate data controller for their own records of the job, and their own privacy notice applies to that.

3 Our role in processing your data

For everything described in this notice we are the data controller. We decide what is collected and why.

For the period after an introduction, we and the tradesperson are independent controllers of our own records. We do not control their systems and they do not control ours.

4 The personal data we process

We collect only what a job actually needs. The list below is exhaustive for customers and tradespeople, and it matches the fields our system genuinely stores.

If you are a customer

• Identity and contact. Your name, email address and phone number.
• Location. Your postcode, the postcode district it falls in, and the full address of the job. The full address is withheld from a tradesperson until they have accepted the job.
• Job details. The service you asked for, your answers to the qualifying questions, your free text description, any photographs you attach, and how urgent it is.
• Booking records. Appointment times, the state of the job, the value you confirm at the end, and any review you leave.
• Consent records. The time you gave consent to be contacted and where that consent came from. We record this on every marketing contact because we have to be able to show it.

If you are a tradesperson

• Identity and business. Your name, business name, email address and phone number.
• Credentials. Your certification scheme and reference number, its expiry date, and your public liability insurance expiry. We record who at Hyper verified each one and when.
• Coverage. The zone, postcode areas and trade categories you work in.
• Performance. Jobs completed, your rating, response times, and the scoring used to decide which jobs you are offered.
• Payment. A Stripe customer reference and a payment mandate reference. We never see or store your card number.

Everyone

• Messages exchanged through the platform, and the delivery status of them.
• Sign in records, including a hashed password. A hash cannot be reversed to a password.
• Basic technical data your browser sends, such as your IP address.

5 Why we process it, and our lawful basis

Under the UK GDPR we need a lawful basis for each purpose. Ours are set out below.

Where we rely on legitimate interests we have considered whether our interest is overridden by your rights, and we have concluded that it is not. You can ask us for that assessment.

6 Automated decision making

Which tradesperson is offered a job is decided automatically. The score combines distance, availability, rating, past response time, tier and current workload, and the reasoning behind every offer is recorded.

This affects tradespeople rather than customers, and it does not produce a legal or similarly significant effect: it decides the order in which work is offered, not whether someone may trade. If you are a tradesperson and you think a decision was wrong, email us and a person will look at the record and explain it.

Certification and insurance checks are hard gates rather than scores. They are not weighted against anything else and no operator can override them.

7 Where we get it from

Almost all of it comes from you, when you fill in the booking flow, register as a tradesperson, or message us.

We also receive: confirmation from a certification scheme that a registration is valid; payment and mandate status from Stripe; and message delivery status from our messaging provider. If a letting agent books on behalf of a tenant, we receive the tenant's contact details from the agent, and the agent is responsible for telling the tenant that.

8 Who we share it with

We do not sell personal data, and we never will. We share it in four situations.

With the tradesperson doing your job

When a job is offered, they see the service, the job details, the postcode district and the response window. They do not see your name, phone number or full address until they accept. That order is deliberate.

With the suppliers that run the service

Where the law requires it

With a regulator, a certification scheme, an insurer, or a court, where we are obliged to or where it is necessary to establish or defend a legal claim. A gas or electrical safety concern may be reported to the relevant scheme.

If the business changes hands

If the business is sold or reorganised, records may transfer to the buyer. They would be bound by this notice until they told you otherwise.

9 Transfers outside the UK

Some suppliers process data outside the UK, as set out above. Where they do, the transfer is covered by the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or by UK adequacy regulations.

We assess each provider before using it. Where an assessment cannot be satisfied, we change provider: our system is built so that the text classification supplier can be swapped by changing one setting.

10 How long we keep it

When a period ends we delete the record or anonymise it so it can no longer be linked to you. Anonymised totals, such as how many jobs were completed in an area, are kept indefinitely because they are no longer personal data.

11 Your rights

Under the UK GDPR you have the following rights. All of them are free to use, and we will respond within one month.

• Access. A copy of the personal data we hold about you.
• Rectification. Correction of anything inaccurate.
• Erasure. Deletion, where we no longer need it and no legal obligation requires us to keep it.
• Restriction. A pause on processing while a dispute about accuracy or lawfulness is resolved.
• Portability. The data you gave us, in a machine readable file.
• Objection. To processing based on legitimate interests, and at any time to direct marketing.
• Withdraw consent. Where we relied on consent, at any time.

To use any of them, email privacy@hyperlocalservice.com. We may ask you to confirm who you are, because sending someone's records to the wrong person is itself a breach.

Objecting to marketing

If you object to direct marketing we stop, immediately and permanently, with no balancing test. Every marketing message carries an unsubscribe link, and an unsubscribe is honoured in our records within a minute of us receiving it.

Withdrawing consent

Withdrawing consent stops future processing that relied on it. It does not make what we did beforehand unlawful, and it does not remove records we keep for a different reason, such as an invoice.

12 How we protect it

• Customer records are stored outside the public area of the web server, so they cannot be requested by a browser.
• Passwords are stored as a one way hash, never as text.
• The full address of a job is withheld until a tradesperson accepts it.
• The history of every job is append only. It can be read but not altered, which is what makes it usable as evidence in a dispute.
• Access to records is limited to the people who need it, and every decision an operator makes is recorded against their name.
• The site is served over HTTPS.

If a breach is likely to result in a risk to your rights, we will tell the ICO within 72 hours and tell you without undue delay where the risk is high.

13 Complaints

If you are unhappy with how we have handled your data, please tell us first at privacy@hyperlocalservice.com. We would rather fix it than have you take it elsewhere.

You can also complain to the Information Commissioner's Office at any time. Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113. ico.org.uk.

Complaining to us first does not affect your right to complain to the ICO.

14 Changes to this notice

If we change how we use personal data we will update this notice and change the date at the top. Where a change is significant we will tell you directly rather than relying on you noticing.