Privacy Policy

1. Introduction

Period Home Services ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you consent to the data practices described in this policy.

2. Data Controller

Period Home Services is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at: periodhomeserviceslocator@gmail.com

3. Information We Collect

Personal Information You Provide

When you create an account or use our services, we may collect:

• Name and display name
• Email address
• Password (stored securely using encryption)
• Phone number (if you choose to provide it)

Business Listing Information

If you list a business, we collect:

• Business name and description
• Business address and location
• Contact details (phone, email, website)
• Services offered and accreditations
• Business images and logos

Contact Form Information

When you contact us, we collect:

• Your name and email address
• The subject and content of your message

Automatically Collected Information

When you visit our website, we may automatically collect:

• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website
• IP address (anonymised where possible)

4. How We Use Your Information

We use your personal data for the following purposes:

• To provide our services: Creating and managing your account, displaying business listings
• To communicate with you: Responding to enquiries, sending service-related notifications
• To improve our website: Analysing usage patterns to enhance user experience
• To ensure security: Protecting against fraud and unauthorised access
• To comply with legal obligations: Meeting regulatory requirements

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: Where you have given explicit consent (e.g., contact forms, marketing)
• Contract: Where processing is necessary to provide our services to you
• Legitimate interests: Where we have a legitimate business interest that doesn't override your rights
• Legal obligation: Where we are required by law to process your data

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your information with trusted third-party service providers who assist us in operating our website:

• Supabase: Our database and authentication provider, hosted in the EU. They process your account data under a Data Processing Agreement.
• Resend: Our email service provider, used to send contact form messages and notifications. They are GDPR compliant.

Business listing information (business name, address, services, contact details) is publicly displayed on our directory as this is the purpose of the service.

7. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

Account data is retained until you request deletion. Contact form messages are retained for up to 2 years. Business listings remain active until the owner requests removal or the listing is marked as closed.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at periodhomeserviceslocator@gmail.com. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies to enhance your experience. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

Essential cookies are required for the website to function. You can manage your cookie preferences at any time through our cookie consent banner.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit (HTTPS), secure password hashing, and access controls. However, no method of transmission over the internet is 100% secure.

11. International Transfers

Your data may be processed by third-party services located outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with UK GDPR.

12. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection: ico.org.uk/make-a-complaint