Privacy Policy

1. Data Controller

FindAService is the data controller for personal data collected through this platform. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018 (Ireland).

FindAService is operated by [INSERT LEGAL ENTITY NAME], with a registered address at [INSERT REGISTERED ADDRESS]. For the purposes of applicable data protection law, this entity acts as the data controller.

2. Data We Collect

  • Account data: Name, email address, phone number, and password (hashed).
  • Profile data: Bio, avatar, languages spoken, verification status.
  • Provider data: Address/Eircode, GPS coordinates, service categories, pricing, reviews.
  • Usage data: Search queries, booking history, messages, and platform interactions.
  • Technical data: IP address, browser type, device information, and cookies.

We may also derive or infer certain data, such as approximate location from IP address, user preferences, and interaction patterns, to improve platform functionality and matching.

3. How We Use Your Data

  • To provide and improve our marketplace services (contractual necessity).
  • To verify user identities and build platform trust (legitimate interest).
  • To enable geo-based search and matching between clients and providers.
  • To process payments via our payment processor Stripe (contractual necessity).
  • To send service-related communications (contractual necessity).
  • To comply with legal obligations (legal obligation).

4. Lawful Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

  • Performance of contract: Providing platform services, processing bookings, facilitating communications.
  • Legitimate interests: Fraud prevention, platform security, service improvement, trust & safety.
  • Consent: Marketing communications, optional analytics cookies.
  • Legal obligation: Tax record keeping, responding to lawful requests.

5. Data Sharing

We share personal data only as necessary:

  • Between users: Provider profiles, names, and reviews are visible to other users as part of the marketplace service.
  • Payment processor: Stripe processes payment data under their own privacy policy.
  • Hosting & infrastructure: Our backend services process data within the EU.
  • Legal requirements: We may disclose data to comply with Irish or EU legal obligations.

We do not sell personal data to third parties.

Service providers (data processors): We use trusted third-party providers for hosting, infrastructure, analytics, and communications, who process data on our behalf under data processing agreements.

These providers are contractually bound to process personal data only in accordance with our instructions and applicable data protection laws.

6. Identity Verification (Optional)

Verification is optional. If you choose to verify your identity, we ask you to upload a photo of a government-issued identity document (passport, driving licence, national ID or residence permit) and a selfie.

  • Why we collect it: to confirm you are the person you say you are, and to reduce impersonation and fraudulent accounts on the platform.
  • Manual review: a member of our team reviews the document and selfie by eye. We do not run facial recognition, we do not create biometric templates or face embeddings, and we do not extract text, document numbers, date of birth or address from your document.
  • Restricted access: only authorised administrators can view your evidence, only from inside our review screen, only after completing multi-factor authentication, and every view is recorded in an access log.
  • Unfinished uploads: if you upload documents but do not submit them, they are automatically deleted 7 days after your last upload activity.
  • After the decision: your document image and selfie are automatically deleted once the review is completed, whether you are approved or rejected, and also if you delete your account. We do not keep your ID after approval.
  • What we keep: only the outcome — whether you are verified, the type of document reviewed, the decision dates, who reviewed it, and any rejection reason. The images themselves are gone.

You can ask us about your verification, or exercise any of the rights described below, at privacy@findaservice.ie.

7. Data Retention

  • Active accounts: Data retained while your account is active.
  • Deleted accounts: Personal data erased within 30 days, except where retention is required by law (e.g., tax records for 6 years under Irish Revenue requirements).
  • Audit logs: Retained for 2 years for platform safety.

8. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data ("right to be forgotten").
  • Restriction: Limit how we process your data.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw consent: Where processing is based on consent, withdraw at any time.

To exercise any of these rights, contact us at privacy@findaservice.ie. We will respond within 30 days as required by GDPR.

9. Cookies

We use cookies and similar technologies to operate and improve the platform.

Strictly necessary cookies are used for authentication, security, and core functionality and do not require consent.

Analytics and performance cookies are only used where you have provided consent via our cookie banner.

Users can manage or withdraw consent at any time through browser settings or cookie preferences.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), encryption at rest provided by our hosting infrastructure, strict access controls, private (non-public) storage for sensitive files such as identity documents, audit logging of administrator access, and regular security reviews. We do not claim any additional application-level encryption beyond the measures described here.

11. International Transfers

Your data is primarily processed within the EU. Where data is transferred outside the EEA, we ensure adequate safeguards are in place (e.g., Standard Contractual Clauses).

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Data Protection Commission (DPC) of Ireland at www.dataprotection.ie.

13. Contact

For any privacy-related queries:
Email: privacy@findaservice.ie
FindAService

This email address is managed as part of FindAService's official support and data protection communication channels. Messages may be handled by authorised personnel or service providers acting on behalf of FindAService under strict confidentiality obligations.

14. Data Breach Procedures

In the event of a personal data breach, FindAService will assess the risk and, where required, notify the Irish Data Protection Commission and affected users in accordance with GDPR obligations.

15. Children's Data

The platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that such data has been collected, we will take steps to delete it.

16. Automated Decision-Making

FindAService does not carry out automated decision-making or profiling that produces legal or similarly significant effects on users.

17. Platform Role & User Responsibility

FindAService acts as a data controller for the operation of the platform. However, service providers are independently responsible for any personal data they collect, process, or store in the course of providing their services.

FindAService is not responsible for how providers handle personal data outside the platform.