Privacy Policy — Contractor Caddy (MVP) Last updated: 2 May 2026
Trading Name: Contractor Caddy Legal Entity: Concept 3 Ltd Contact: info@contractor-caddy.com
1. Overview
This Privacy Policy explains how Contractor Caddy (“we”, “us”, “our”) collects, uses, stores, and protects personal data. We comply with the UK GDPR and the Data Protection Act 2018. We only collect the minimum data required for the MVP to function.
2. Personal Data We Collect
Account Information
· Name
· Email address
· Password (encrypted)
Job & Placement Information
· Job titles and descriptions
· Placement confirmation details
Communication Data
· Messages sent through the platform
· Essential service emails
Device & Usage Data
· Authentication logs
· Security logs
· Basic usage information
Payment Metadata
· Payment status
· Invoice references
· PO numbers
· Monthly consolidated invoice metadata
· Subscription details
We do not store card or bank details — Stripe and GoCardless handle these.
3. How We Use Your Data
We process your data to:
· Create and manage your account
· Allow you to create and fill contractor roles
· Record legally binding placement confirmations
· Manage payments and monthly consolidated invoicing
· Maintain platform security
· Communicate essential service updates
· Meet legal, tax, and accounting obligations
We do not use your data for advertising or profiling.
4. Placement Confirmations (In-App)
When you confirm a placement, the platform records:
· Contractor name
· Role title
· Start date
· Client company
· Fee due
· Your name, position, and timestamp
· Your acceptance of the payment obligation
This confirmation:
· Creates a legally binding obligation to pay
· Is stored as a raw Firebase record
· Is retained for 6 years
· Is not generated as a PDF and does not use DocuSign
For PO clients, placement fees are included in a monthly consolidated invoice generated automatically at month-end.
5. Lawful Basis for Processing
We rely on:
· Contract — to provide the Service
· Legitimate Interests — to maintain security and accurate records
· Legal Obligation — to retain financial and placement records
6. Where Your Data Is Stored
Your data is stored securely using:
· Firebase (EU region)
· Microsoft 365
· Stripe / GoCardless
We do not store card or bank details.
7. Who We Share Your Data With
We only share data with essential service providers:
· Firebase
· Stripe / GoCardless
· Microsoft 365
· Email delivery provider
We do not sell or share your data with advertisers.
8. Data Retention
We keep your data only for as long as necessary.
· Account Data: retained while active
· Placement Confirmations: 6 years
· Financial Data: 6 years
· System Logs: 12–24 months
· Error Logs: 90 days
For full details, see our Data Retention Policy.
9. Payment Terms
To ensure transparency:
Invoices issued for placement fees or subscription charges must be paid within 28 calendar days of the invoice date, as defined in our Terms of Use.
10. Your Rights
Under the UK GDPR, you have the right to:
· Access your data
· Correct inaccurate data
· Request deletion
· Object to processing
· Request data portability Contact: info@contractor-caddy.com
11. Cookies
The MVP does not use cookies or tracking technologies.
12. Security
We use industry-standard security measures including:
· Encryption
· Access controls
· Secure hosting
· Multifactor authentication
· Monitoring and logging
For incident handling, see our Incident Response Plan.
Contractor Caddy