Privacy Notice

1. Controller and scope

The operator identified below is the controller for the I’ll do it platform. Buyers and sellers may be separate controllers for information they independently use to deliver work, invoice or meet legal duties. This notice covers account, marketplace, moderation, signature and audit processing. The service is for adults only. Suspected child accounts are restricted and unnecessary information is removed or retained only where a lawful safeguarding or legal need exists.

2. Information processed

We process names, account emails and phone numbers, password hashes, profile photos, descriptions, services and coverage areas, trader declarations, listings, public area/category data, private work addresses and access notes, uploaded job photos, proposals, reviews and job status. Contract records include the agreed scope and price, party identities, terms version, explicit confirmations, UTC timestamps, signature references, agreement fingerprints and PDF records. Passwords entered for confirmation are verified against account hashes and are not included in saved agreements. Hosting security logs may contain technical request information. Do not put sensitive information in public descriptions or upload unnecessary identification documents.

3. Purposes and legal bases

Account operation, negotiation, contract confirmation and necessary contact sharing use the contractual basis under Article 6(1)(b) GDPR where applicable. Proportionate security, fraud prevention, moderation, service administration and defending claims rely on legitimate interests under Article 6(1)(f), balanced against users’ rights. Applicable tax, reporting, court and regulatory duties rely on Article 6(1)(c). Optional processing that genuinely requires consent must have a separate, specific choice and a way to withdraw it. Acknowledging this notice is not blanket consent and does not waive GDPR rights. Essential contract data cannot be withheld while still requiring the same service to be provided.

4. Visibility and contact sharing

Public visitors can see public listings, approximate town/county, displayed names/photos, public job history and ratings. Private offer text and prices are restricted to the relevant participants, the offer owner and authorised admin. Account owners can see their own history. Before both parties sign, the selected seller’s agreement view masks the buyer’s private work address, phone, email and access notes; the buyer’s version can show their own information. After both parties sign, the selected buyer and seller receive the information needed to arrange and perform the work. The confirmation explains this disclosure. Admin can access information for review, support, safety and audit. Other sellers and public visitors do not receive private contact information. Users must not reuse it for unrelated marketing.

5. Processors and disclosures

Hosting and support providers process information under appropriate contractual and security arrangements. We disclose information to professional advisers, tax bodies, regulators, law enforcement or courts only with an applicable lawful basis and appropriate scope. We do not sell personal information. Current hosting/processor details: the operator must complete this information before activating contract signing. International transfers and safeguards: the operator must complete this information before activation. Where GDPR Chapter V applies, a valid transfer mechanism and any required supplementary safeguards must be in place.

6. Security and signatures

Access controls separate public content, participant data and admin records. Signing requires account authentication, an explicit confirmation and password re-entry, with limited failed attempts. PDFs are delivered through authenticated access and archived outside the public web folder. Agreement fingerprints help detect changes against the stored reference; this is not a qualified electronic signature, independent notarisation or a guarantee against an administrator changing a database. Keep your password safe and report compromise immediately. No security measure eliminates every risk.

7. Retention

Active account and listing data is kept while needed to provide the service. Following closure, unnecessary public profile and content data should be removed or anonymised after any necessary dispute/security review. Contract and related audit records are reviewed for deletion six years after completion or termination, unless a documented legal duty, live dispute or legal hold justifies longer retention. Unfinished drafts and failed signing security records should be reviewed when no longer needed, normally within 12 months. Hosting logs and backup copies follow the operator’s documented provider schedules. These are retention rules the operator must administer, not a promise that every account record is erased immediately or that a backup can be selectively changed.

8. Your rights

Subject to GDPR conditions, you can request access, correction, erasure, restriction, portability and information about relevant recipients. You can object to processing based on legitimate interests and withdraw any optional consent without affecting earlier lawful processing. Some records may need to be retained for legal duties or claims; we will explain any restriction. Contact the operator below with enough information to identify your account. Identity checks must be proportionate. Requests are normally answered within one month; any lawful extension will be explained. You may complain to Ireland’s Data Protection Commission at dataprotection.ie or another competent supervisory authority.

9. Cookies, decisions and updates

We use session and security cookies needed for accounts and site features. If enabled by the operator, Google AdSense Auto ads run on public job listing pages. Google and its selected partners may process device identifiers, IP addresses and browsing/ad interaction data under the choices shown in the consent message. Optional advertising storage and personalised advertising require consent where applicable. Use Google’s Privacy and cookie settings link to change or withdraw your choices. Declining optional advertising consent does not prevent use of the marketplace. Account, profile, offer and contract pages do not include the advertising script. See Google’s privacy information at policies.google.com/privacy for its processing and controls. Admin reviews decide listing and provider approvals; no solely automated decision with legal or similarly significant effect is introduced by this contract workflow. The version below identifies this notice. Material changes must be communicated appropriately.

Operator and contact

I’ll do it
Legal operator details pending
Postal address pending
Support and privacy contact pending