Ta-done! operates a booking marketplace connecting customers with local service providers (cleaning, gardening, handyman work, and similar). This policy explains what personal data we collect, why, and the choices and rights you have over it, in line with UK GDPR and the Data Protection Act 2018. What we collect: account details (name, email, phone, password stored as a salted hash); booking details (service address, postcode, appointment times, job notes); payment information (handled entirely by Stripe — we never see or store your full card number); provider business details (service categories, rates, bio, VAT and payout details via Stripe Connect); messages sent through the platform; and basic usage data (device/browser type, IP address, essential cookies). How we use it: to create and manage your account and fulfil bookings; to process payments and provider payouts via Stripe; to send booking confirmations, reminders and other service messages; to send marketing communications only if you have opted in; to investigate disputes or misuse; and to meet our legal and accounting obligations. Who we share it with: we do not sell your data. We share the minimum necessary with Stripe (payments and payouts), Resend (transactional email delivery), Supabase (our database and authentication infrastructure), and the other party to a booking (name, contact details and address needed for that job only). Cookies: we use essential cookies to keep you signed in and remember your cookie preference. We do not currently use analytics or advertising cookies. How long we keep it: for as long as your account is active, plus a period afterwards to meet legal, tax and accounting obligations (typically up to 6 years for financial records). You can request deletion sooner. Your rights under UK GDPR: access, correction, erasure, portability, and the right to object to or restrict certain processing including marketing. Most of these are self-service from your account settings. For anything else, email support@ta-done.co.uk. You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.