Skip to main content

Privacy Policy

Last Updated 3 January 2026

Table of contents

    This Privacy Policy explains how Nifty ("we", "us", "our") collects, uses, shares, and protects personal data when you use our website, mobile applications, and services (the "Platform").

    We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable data protection laws.

    1. Who We Are (Data Controller)

    Nifty is the data controller for personal data processed through the Platform.

    Contact details:
    Email: info@niftypro.co.uk

    If you have questions about this policy or your rights, contact us using the details above.

    2. What Personal Data We Collect

    We may collect the following categories of personal data:

    2.1 Account & Contact Information

    • Name
    • Email address
    • Phone number
    • Account role (Customer or Pro)

    2.2 Booking & Service Data

    • Service requests and booking details
    • Addresses and location data
    • Notes, instructions, and uploaded photos
    • Booking history and status updates

    2.3 Communications

    • Messages between Customers and Pros
    • Customer support communications
    • Emails, SMS, and in-app notifications

    2.4 Pro Verification Data (Pros Only)

    • Business details
    • Licences or certifications
    • Verification status

    2.5 Payment Data (If Applicable)

    If payments are facilitated through the Platform:

    • Transaction IDs
    • Payment status
    • Limited payment metadata

    We do not store full card details. Payments are processed by third-party payment providers.

    2.6 Technical & Usage Data

    • IP address
    • Device type and browser
    • Log files
    • Usage analytics
    • Cookies and similar technologies

    3. How We Use Personal Data (Legal Bases)

    We process personal data only where permitted under GDPR, including:

    3.1 Contractual Necessity

    To:

    • Create and manage accounts
    • Facilitate bookings
    • Enable communication between users
    • Provide customer support

    3.2 Legitimate Interests

    To:

    • Improve and secure the Platform
    • Prevent fraud and misuse
    • Monitor performance and reliability
    • Enforce our terms and policies

    We balance our interests against your rights and freedoms.

    3.3 Legal Obligations

    To:

    • Comply with legal and regulatory requirements
    • Respond to lawful requests from authorities

    3.4 Consent

    Where required (e.g. marketing communications or non-essential cookies), we rely on your consent, which you may withdraw at any time.

    4. How We Share Personal Data

    We may share personal data with:

    4.1 Other Users

    • Booking details shared between Customers and Pros
    • Photos and notes necessary to perform services

    4.2 Service Providers (Processors)

    Including:

    • Hosting providers
    • Messaging and email services
    • Analytics providers
    • Payment processors (if applicable)

    These providers process data under strict contractual obligations.

    4.3 Legal & Regulatory Authorities

    Where required by law or to protect our rights and users.

    5. International Data Transfers

    Some service providers may process data outside the EU.

    Where this occurs, we ensure appropriate safeguards, such as:

    • EU Standard Contractual Clauses
    • Adequacy decisions where applicable

    6. Data Retention

    We retain personal data only for as long as necessary to:

    • Provide services
    • Meet legal obligations
    • Resolve disputes
    • Enforce agreements

    Retention periods vary depending on data type and legal requirements.

    7. Your GDPR Rights

    Under GDPR, you have the right to:

    • Access your personal data
    • Rectify inaccurate or incomplete data
    • Erase your data ("right to be forgotten")
    • Restrict processing
    • Object to processing
    • Data portability
    • Withdraw consent at any time

    You also have the right to lodge a complaint with your local data protection authority.

    8. How to Exercise Your Rights

    To exercise your rights, contact us at: info@niftypro.co.uk

    We may need to verify your identity before responding.

    We respond within one month, as required by law.

    9. Cookies & Tracking

    We use cookies and similar technologies to:

    • Operate the Platform
    • Analyse usage
    • Improve performance

    Details are provided in our Cookie Policy.

    10. Security Measures

    We implement appropriate technical and organisational measures to protect personal data, including:

    • Access controls
    • Encryption where appropriate
    • Secure hosting environments

    However, no system is 100% secure.

    11. Children's Data

    Nifty is not intended for individuals under 18.

    We do not knowingly collect data from children.

    12. Automated Decision-Making

    We do not carry out automated decision-making that produces legal or similarly significant effects.

    13. Changes to This Policy

    We may update this Privacy Policy from time to time.

    Material changes will be communicated via the Platform or email.

    14. Contact & Complaints

    If you have concerns about how we handle your data, contact us first.

    You also have the right to lodge a complaint with the Data Protection Commission (Ireland) or your local supervisory authority.