Privacy Policy

Better Home Hub Ltd is the data controller responsible for your personal data on this site. We are a company registered in England and Wales. Our registered address and company number will be added here before public launch.

We only collect what we need to match you with a local tradesperson.

• From you, when you describe a job:the free-text description of what you need (the "job description"), your postcode, and the urgency you indicate. The job description is processed by AI to classify the trade required.
• From you, when you sign in: your email address. We use a passwordless magic-link sign-in, so we do not store passwords.
• From you, when you contact us: anything you send us in an email, including your name and email address.
• Automatically: technical information including IP address, browser type and pages viewed. This is collected by our hosting provider (Vercel) for security and to keep the service running.
• Cookies: see our Cookie Policy.

• To deliver the service you asked for — matching your job to shortlisted trades, sharing the job with the trades you select, and letting you track progress. Lawful basis: contract (Article 6(1)(b) UK GDPR).
• To send you transactional emails — magic-link sign-in, lead status updates, receipts. Lawful basis: contract.
• To keep the site secure and prevent fraud — including rate limiting, abuse detection and audit logging. Lawful basis: legitimate interest (Article 6(1)(f)).
• To improve the service — analysing aggregated, non-identifying usage patterns to make the AI shortlist better. Lawful basis: legitimate interest.
• Marketing emails — only if you have explicitly opted in. You can opt out at any time via the unsubscribe link in any marketing email. Lawful basis: consent (Article 6(1)(a)).

We do not sell your personal data. We share the minimum needed to provide the service:

• Tradespeople you select. When you tick trades from the shortlist, the relevant company receives your job description, postcode area and contact details so they can call you back. They are independent businesses, not employees of Better Home Hub, and become an independent data controller for that data once received.
• Service providers (processors) who help us run the site:
  • Supabase — database and authentication (EU region)
  • Vercel — hosting, edge network and logging
  • Resend — sending emails on our behalf
  • Stripe — processing payments from tradespeople (not from customers)
  • Google Places — finding nearby trades by postcode
  • Vercel AI Gateway / underlying model providers — classifying your job description
  Each is bound by a written data-processing agreement and only processes data on our instructions.
• If required by law — we may disclose data to comply with a court order, lawful request from a regulator, or to defend legal claims.

Where any of our processors host data outside the UK or EEA, the transfer is protected by an adequacy decision or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. We host data in EU regions wherever the provider offers that option.

• Job descriptions and lead records: 24 months after the lead is closed.
• Account email and sign-in history: while your account is active, plus 12 months.
• Financial records (where we process payments): 6 years, as required by HMRC.
• Marketing-consent records: until you withdraw consent, plus 12 months.
• Security and abuse logs: 12 months.

When retention expires we delete or anonymise the data. You can ask us to delete your account at any time using the contact details below.

Under UK GDPR you have the right to:

• Be told what data we hold about you (access)
• Correct data that is wrong (rectification)
• Have your data deleted (erasure / "right to be forgotten")
• Restrict or object to processing
• Receive a copy of your data in a portable format
• Withdraw consent at any time, where we rely on consent
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email privacy@betterhomehub.co.uk. We will respond within one calendar month.

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to named staff using multi-factor authentication. We do not store payment card details — Stripe handles those directly.

The service is not aimed at people under 18. We do not knowingly collect data from children. If you believe we have, email us and we will delete it.

If we make material changes we will email registered users and update the "last updated" date at the top of this page. Minor wording changes will not be announced individually.