Privacy Policy
Last updated: 27 September 2026
1. Who We Are
Rushly Technologies Limited (company number 17251039), trading as Rushly ("we", "us", "our"), operates the Rushly platform at rushly.co.uk. We are the data controller for personal data processed through the platform.
Registered address: Rushly Technologies Limited, United Kingdom. Company number: 17251039.
Contact: Email support@rushly.co.uk. We are registered with the Information Commissioner's Office (ICO).
2. Data We Collect
- Account data: name, email, password (hashed), account type (customer or provider), profile photo.
- Provider data: trade, service area, bio, ID verification documents, Stripe Connect account details.
- Booking data: job description, location, messages between you and the other party, photos you upload.
- Payment data: handled by Stripe. We store payment intent IDs and amounts, never full card numbers.
- Technical data: IP address, device type, browser, approximate location, usage logs.
- Communications: support tickets, reports, in-app chat content.
3. How We Use Your Data
- To provide the platform: matching customers with providers, processing payments, enabling chat.
- To verify provider identity and prevent fraud.
- To send service emails (booking updates, password resets, receipts).
- To investigate reports, disputes, and policy violations.
- To comply with legal obligations (tax, anti-money-laundering, court orders).
- To improve the platform through aggregated analytics.
4. Legal Bases (UK GDPR)
- Contract: to deliver the services you sign up for.
- Legitimate interests: fraud prevention, platform safety, service improvement.
- Legal obligation: tax, accounting, and regulatory compliance.
- Consent: optional marketing communications (withdrawable at any time).
5. Sharing Your Data
We share data only as needed to run the service:
- Other users: customers and providers see each other's name, profile, ratings, and booking details for jobs they're matched on.
- Stripe: payment card details, billing address and transaction data are processed by Stripe to handle payments and provider payouts. Stripe is a PCI-DSS Level 1 compliant service provider.
- Supabase: our database and hosting infrastructure. Data is stored in encrypted form on Supabase servers located in the EU.
- Google: if you sign in with Google OAuth, Google shares your name, email and profile photo. We also use Google Maps to display job locations; location data is sent to Google for map rendering.
- Analytics: aggregated, non-identifiable usage data may be shared with analytics providers to improve the platform.
- Authorities: when legally required, to comply with court orders or regulatory requests.
We never sell your personal data to third parties for marketing purposes.
6. Data Retention
We retain personal data only for as long as necessary:
- Active accounts: all data retained while your account is active.
- Closed accounts: account data retained for up to 6 years after closure to meet tax, accounting and legal obligations.
- Booking records: chat, photos and booking details retained for 6 years for dispute resolution and tax purposes.
- Payment records: transaction data retained for 6 years as required by HMRC.
- ID verification: verification documents retained for the lifetime of the account plus 6 years for fraud prevention and regulatory compliance.
- Support tickets: retained for 3 years after resolution.
You can request deletion of your data at any time, subject to our legal retention obligations. Once retention periods expire, data is securely deleted or anonymised.
7. Your Rights
- Access a copy of your data.
- Correct inaccurate data.
- Request deletion (where not legally required to retain).
- Restrict or object to processing.
- Data portability.
- Withdraw consent for marketing at any time.
- Lodge a complaint with the ICO (ico.org.uk).
To exercise any right, email support@rushly.co.uk.
8. Security
We use industry-standard encryption in transit (TLS) and at rest. Passwords are hashed. Payments are handled by PCI-DSS compliant providers. No system is perfectly secure — keep your password safe and report suspicious activity immediately.
9. Cookies
We use essential cookies to keep you signed in and analytics cookies to understand usage. You can control cookies in your browser settings; disabling essential cookies will break sign-in.
10. International Transfers
Your data is processed in the United Kingdom and may be transferred to service providers in the EU and USA under standard contractual clauses or equivalent safeguards.
11. Children
Rushly is not for users under 18. We do not knowingly collect data from children.
12. Changes to This Policy
We may update this policy. Material changes will be notified by email or in-app. Continued use after changes means you accept the updated policy.
13. Contact
Rushly Technologies Limited
Company number: 17251039
Email: support@rushly.co.uk
Website: rushly.co.uk
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.