Privacy Policy
Effective: [LAUNCH DATE] · Last updated: 18 April 2026
Rank My Builder Ltd (“we”, “us”, “our”) runs the Rank My Builder platform at rankmybuilder.co.uk and any subdomains (the “Service”). This policy explains what personal data we collect, why, and what you can do about it. We are the data controller for the personal data we hold about you.
1. Who we are
Rank My Builder Ltd
[REGISTERED OFFICE ADDRESS]
Company number: [COMPANY NUMBER]
ICO registration: [ICO NUMBER]
Contact: privacy@rankmybuilder.co.uk
2. What we collect and why
2.1 If you post a job (customer)
- Name, email, phone (if provided), job postcode, job description, budget range, photos you attach.
- Account credentials (email + magic link, or OAuth token from Google/Apple).
- Messages you send to fitters through the platform.
- Reviews you post.
Lawful basis: performance of our contract with you; legitimate interests in preventing fraud and improving the Service.
2.2 If you're a fitter (tradesperson)
- Business name, trading name, business address, service postcodes and radius, trade categories, bio, photos, insurance documents, trade credential references (Gas Safe, NICEIC, NAPIT, FMB, TrustMark).
- Billing details via Stripe (we do not store full card numbers — Stripe does).
- Bid ledger: every bid debited and credited, with reason.
- Engagement events: photos uploaded, diaries posted, referrals made, credentials verified.
- Messages you send to customers through the platform.
- Reviews received about you.
Lawful basis:performance of our contract with you; legitimate interests in verifying trade credentials and preventing fraud; consent where you've opted in to marketing.
2.3 If your business appears on an unclaimed profile
Some fitter profiles are created by us from publicly-available business data (business name, trading postcode, public trade body listing) before you've joined. We label these profiles clearly as “unclaimed”. They contain no personal data beyond publicly listed business information. If it's your business and you want to claim or remove the profile, email privacy@rankmybuilder.co.uk.
2.4 If you visit our website without signing up
- IP address (used and discarded — not stored beyond session).
- Device type, browser, referring URL.
- Pages visited and interactions (analytics — PostHog).
- Cookies (see Cookie Policy).
3. How we use your data
- To run the platform (matching jobs to fitters, delivering messages, taking payment, serving reviews).
- To verify trade credentials against public trade body records.
- To detect and prevent fraud, abuse, and misuse (sockpuppet accounts, fake reviews, off-platform fee dodging).
- To send transactional emails (account activity, billing receipts, job alerts, review requests).
- To send marketing emails — only if you've opted in.
- To improve the Service (product analytics, error tracking, feature experiments).
- To meet our legal obligations.
4. Who we share it with
| Service | What they process | Where |
|---|---|---|
| Stripe | Payment and subscription data | US / EU / UK |
| Clerk | Authentication | US / EU |
| Neon | Application database | EU (London) |
| Resend | Transactional and marketing emails | US / EU |
| PostHog | Product analytics | EU |
| Sentry | Error tracking | US / EU |
| Vercel | Hosting | US / EU |
Where data leaves the UK to a country without an adequacy decision, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
We never sell your personal data.
5. How long we keep it
| Data | Retention |
|---|---|
| Active account data | For as long as your account is open |
| Closed account data | 6 years after closure (financial records) |
| Job posts and bids | 6 years after the job completes |
| Reviews | Permanent |
| Messages | 2 years after the thread closes |
| Web analytics (PostHog) | 12 months |
| Error logs (Sentry) | 90 days |
6. Cookies
We use cookies for authentication, preferences, and analytics. Full detail in our Cookie Policy.
7. Your rights
Under UK GDPR, you have the right to:
- Access a copy of the personal data we hold about you.
- Rectify data that is inaccurate or incomplete.
- Erase your data (“right to be forgotten”) — subject to our legal obligation to keep financial records for 6 years.
- Restrict how we process your data.
- Object to processing based on legitimate interests or direct marketing.
- Portability — receive your data in a machine-readable format.
- Withdraw consent where consent is the lawful basis.
- Complain to the Information Commissioner's Office at ico.org.uk.
Email privacy@rankmybuilder.co.uk to exercise any of these. We'll respond within one calendar month.
8. Children
The Service is for users aged 18 and over. If you believe a child has given us data, email privacy@rankmybuilder.co.uk and we'll delete it.
9. Security
HTTPS everywhere, encrypted-at-rest databases, access controls, audit logs, regular security reviews. No system is perfectly secure; we'll notify you and the ICO as required if there's a breach affecting your data.
10. Changes
We'll update this policy when our practices or the law change. Material changes trigger an email to registered users at least 14 days before they take effect.
11. Contact
Questions, requests, or complaints:
privacy@rankmybuilder.co.uk