Privacy Policy

Taskwright is a business system used by tradespeople (such as handymen) to run their businesses. Because of how the service works, we handle personal data in two different roles:

If you are a client of a tradesperson who uses Taskwright and you have questions about how your data is used, please contact that tradesperson directly, as they control your data. We will assist them in responding to any request.

We use operators' personal data to:

• Provide, operate, and maintain the Taskwright service — legal basis: performance of a contract
• Process subscription payments and manage billing — legal basis: performance of a contract
• Communicate with you about your account, service updates, and support — legal basis: performance of a contract / legitimate interests
• Send important service and transactional messages — legal basis: performance of a contract
• Improve and secure the service — legal basis: legitimate interests
• Comply with our legal obligations (e.g. tax, accounting) — legal basis: legal obligation
• Send marketing about our own products, where you have not opted out — legal basis: legitimate interests / consent

We process operators' clients' data solely to provide the service to the operator, on their instructions, as their processor.

We use trusted third-party service providers ("sub-processors") to run Taskwright. Each processes personal data only as needed to provide their service to us, under contract and with appropriate safeguards:

We do not sell personal data to anyone. We only share data with these providers, or where required by law, or to protect our rights.

Your data is primarily hosted in the UK/EU (Supabase, eu-west-2). Some of our sub-processors (such as Stripe, Twilio, Google, Resend, Tawk.to, Lovable) may process data outside the UK/EU. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as the International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

• Operator account data: for as long as your account is active, and for a reasonable period after closure.
• Financial records (invoices, payments): retained for at least 6 years, as required by UK tax and accounting law.
• Clients' data (processed on behalf of operators): retained according to the operator's instructions; deleted or returned when the operator's account is closed, subject to legal retention requirements.

We delete or anonymise data we no longer need.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted (in certain circumstances)
• Restrict or object to processing
• Data portability (receive your data in a portable format)
• Withdraw consent where processing is based on consent

Operators can export their data at any time from within the service. To exercise any right, contact hello@taskwright.co.uk. We will respond within one month.

If you are a client of an operator, direct these requests to that operator (the controller of your data); we will support them in responding.

If you have a concern about how we handle personal data, please contact us first at hello@taskwright.co.uk. We have a formal process for handling data protection complaints: we will acknowledge your complaint within 30 days and work to resolve it.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

Our website uses cookies and Google Analytics to understand how visitors use the site and to improve it. Google Analytics sets cookies that collect information such as pages visited and time on site.

We will ask for your consent to non-essential cookies (including analytics) via a cookie banner when you first visit. You can manage or withdraw your cookie preferences at any time.

We take appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, and restricting data access to what is necessary. Our infrastructure providers maintain their own security standards. No system is completely secure, but we work to protect your data and will notify you and the ICO of any breach where required by law.

We may update this policy from time to time. We will post the updated version here with a revised "Last updated" date, and notify operators of significant changes.

TSH Digital Ltd (trading as Taskwright), Westwood, High Street, Codford, Warminster, BA12 0NB. Email: hello@taskwright.co.uk

Questions about this policy? Email hello@taskwright.co.uk.