Privacy Policy (GDPR Compliant)
Neighbourhood Wash is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights under the UK General Data Protection Regulation (UK GDPR).
Table of Contents
Your Privacy Matters
We are committed to transparency about how we collect and use your data. This policy explains your rights and how we protect your privacy in compliance with UK GDPR.
1. Data Controller
The data controller is Neighbourhood Wash Technologies Ltd, registered at 115 Hampstead Road, London, NW1 3EE.
You can contact us at team@neighbourhoodwash.com.
2. What Data We Collect
We collect the following types of personal data:
Personal Identification Information (PII)
Name, email address, phone number, physical address.
Verification Data
For Washers, we collect ID documents and may process biometric data for verification, primarily through our partner Stripe Identity.
Location Data
Your address and postcode for the "nearby" search functionality and for facilitating bookings.
Financial Data
Transaction history. Payout and bank details for Washers are managed securely by Stripe Connect. We do not store your full payment card numbers on our servers.
User-Generated Content
Reviews, ratings, profile descriptions, special instructions for bookings, and messages sent via our in-app chat feature.
Usage Data
Your booking history, interactions with the Platform, device information (e.g., operating system, browser type), IP address, and access times.
3. How and Why We Use Your Data (Purpose & Legal Basis)
We process your personal data based on the following legal bases under UK GDPR:
| Purpose of Processing | Type of Data Used | Legal Basis under UK GDPR |
|---|---|---|
| To provide and manage our service (user registration, booking, connecting Users & Washers, PIN system) | PII, Location, User-Generated Content | Performance of a Contract |
| To process payments and payouts | PII, Financial Data | Performance of a Contract |
| To verify Washer identity for safety and fraud prevention | PII, Verification Data | Legitimate Interest |
| To facilitate communication between users | PII, User-Generated Content | Performance of a Contract |
| To provide customer support and mediate disputes | PII, Financial, User-Generated, Usage Data | Legitimate Interest |
| To improve and analyse our Platform's performance and user experience | Usage Data, Location Data (anonymised where possible) | Legitimate Interest |
| To send you marketing communications (if you opt-in) | PII (Email) | Consent |
| To comply with legal obligations (e.g., tax, financial reporting) | PII, Financial Data, Transaction History | Legal Obligation |
4. Data Sharing and Third Parties
We do not sell your personal data. We only share it in the following circumstances:
Between Users and Washers
To facilitate a confirmed booking, we share necessary information between the User and their selected Washer (e.g., first name, precise location for pick-up/drop-off, and specific instructions). Full addresses are only disclosed as detailed in our Terms of Service (Section 4.5).
With Third-Party Service Providers
We use trusted partners to operate and improve our Platform. They are contractually bound to protect your data and only process it according to our instructions and applicable data protection laws. These include:
- Stripe: For all payment processing, Washer payouts, and ID verification (Stripe Identity). Your financial data is handled directly by Stripe.
- Supabase (AWS): For secure database hosting and cloud infrastructure.
- Communication Tools: For in-app chat functionality and email notifications.
For Legal Reasons
We may disclose your data if required by law, court order, or to protect the rights, property, or safety of Neighbourhood Wash, our users, or others.
Business Transfers
In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction.
5. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
The right to be informed
About how we use your data (which is the purpose of this policy).
The right of access
To request a copy of the personal data we hold about you.
The right to rectification
To request that we correct any inaccurate or incomplete personal data we hold about you.
The right to erasure
To request that we delete your personal data under certain conditions.
The right to restrict processing
To request that we limit how we use your personal data in certain circumstances.
The right to data portability
To receive your personal data in a structured, commonly used, and machine-readable format.
The right to object
To our processing of your personal data, particularly for direct marketing purposes.
Rights in relation to automated decision making
The right not to be subject to a decision based solely on automated processing.
To exercise any of these rights, please contact us at team@neighbourhoodwash.com. We will respond to your request within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.
6. Data Security and Retention
Security Measures
We implement robust technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These measures include data encryption, access controls, secure servers, and regular security audits.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. For example:
- Transaction Data: Kept for up to 6 years after the transaction for legal and tax purposes.
- Account Information: Retained for as long as your account is active and for a reasonable period thereafter in case you wish to reactivate it, or as required by law.
- User-Generated Content: May be retained indefinitely for platform integrity, even after account deletion, but will be anonymised where possible.