Privacy Policy

Last updated: January 2026

OnSiteHand is operated by ONSITEHAND LIMITED. ONSITEHAND LIMITED is the data controller for personal data processed through the OnSiteHand platform, unless stated otherwise. We are registered in England and Wales under company number 17186065, with our registered office at Unit A449, 4-6 Greatorex Street, London, E1 5NF, United Kingdom.

This Privacy Policy explains how ONSITEHAND LIMITED ("we", "us", "our") collects, uses, and protects your personal data when you use our platform.

We keep certain fields strictly private and never display them to other users. These include your full home postcode, phone number, credential numbers, UTR (tradesperson tax reference), VAT number where stored, and uploaded verification documents.

1. Information We Collect

Information You Provide

• Account information: Name, email address, phone number, password
• Profile information: Trade/profession, skills, experience, qualifications, daily rate, work areas, availability, transport type
• Verification documents: ID documents, certificates, insurance documents, company registration documents
• Portfolio: Photos and descriptions of your work
• Communications: Messages sent through the platform, support enquiries
• Payment information: Billing details processed by our payment provider (Stripe)

Information Collected Automatically

• Device and browser information
• IP address and location data
• Usage data (pages visited, features used, time spent)
• Cookies and similar technologies (see our Cookie Policy)

2. How We Use Your Information

We use your information to:

• Provide our service: Connect employers with tradespeople, enable messaging, process subscriptions
• Improve our platform: Analyse usage, develop new features, fix bugs
• Communicate with you: Service notifications, support responses, important updates
• Verify identity: Review submitted documents for verification badges
• Ensure safety: Detect and prevent fraud, enforce our Terms of Service
• Legal compliance: Meet our legal obligations, respond to legal requests

3. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract: To provide the services you've signed up for
• Legitimate interests: To improve our services, prevent fraud, and market to existing users
• Legal obligation: To comply with laws and regulations
• Consent: Where you've opted in (e.g., marketing emails)

4. Information Sharing

We share information:

• With other users: Profile information (name, trade, bio, reviews, credentials, availability) becomes visible to an employer when they unlock the profile using credits. Phone numbers and email addresses are never shared between users — all hiring communication stays inside OnSiteHand.
• Service providers: We use third parties for hosting, email, payment processing, and analytics
• Legal requirements: When required by law, court order, or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties.

5. Data for Employers and Tradespeople

Tradesperson Profiles

Your profile information (name, trade, skills, portfolio, reviews, availability) is visible to employers using our platform. Your phone number and email address are never shared with employers — even after they unlock your profile. All hiring conversations happen securely inside OnSiteHand.

Employer Information

When you make an offer to a tradesperson, your business name and job details are shared with them.

Messages and Offers

Messages, offers, and booking records are stored to provide the service and for dispute resolution.

Verification Badges

Documents submitted for verification are reviewed by our team. Verification status is displayed on profiles but documents themselves are not shared with other users.

6. Payment Data

Payment processing is handled by Stripe. We do not store full credit card numbers. We retain transaction records for accounting and legal purposes.

7. Data Security

We implement appropriate security measures including:

• Encryption of data in transit and at rest
• Secure authentication systems
• Regular security assessments
• Access controls and logging

However, no internet transmission is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your data:

• Active accounts: For as long as your account is active
• Closed accounts: For a reasonable period to comply with legal obligations and resolve disputes
• Legal requirements: Some data must be retained for legal/tax purposes (typically 6-7 years)

You can request deletion of your data (see Your Rights below).

9. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restrict processing: Limit how we use your data
• Data portability: Receive your data in a machine-readable format
• Object: Object to certain processing (e.g., marketing)
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at privacy@onsitehand.co.uk.

10. Marketing Communications

We may send you:

• Service emails: Account updates, security alerts, subscription notifications (required for service)
• Marketing emails: Tips, new features, promotions (opt-in required, easy to unsubscribe)

You can manage your email preferences in your account settings or by clicking "unsubscribe" in any marketing email.

11. Children's Privacy

OnsiteHand is not intended for users under 18. We do not knowingly collect data from minors.

12. International Transfers

Your data may be processed outside the UK by our service providers. We ensure appropriate safeguards are in place for such transfers.

13. Changes to This Policy

We may update this Privacy Policy. We will notify you of significant changes via email or platform notification.

14. Contact Us

For privacy-related questions or to exercise your rights:

• Email: privacy@onsitehand.co.uk
• Data controller: ONSITEHAND LIMITED (company number 17186065)
• Registered office: Unit A449, 4-6 Greatorex Street, London, E1 5NF, United Kingdom (registered office only — please contact us online for support)

We will update this policy with any additional regulatory registration details where required.

15. Complaints

If you're not satisfied with our response, you can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.