Privacy Policy

1. Who we are

The data controller responsible for your personal data is:

2. The personal data we collect

From Consumers (homeowners)

• Job request details: service type, city, emirate, area, budget range, urgency, free-text description of the job.
• Contact details: name, email address, WhatsApp or mobile phone number.
• Your saved location, if you choose to give it. The app asks once, when you first open it, and "Not now" is a real answer — the app works without it. If you click Use my location and grant permission, your device produces your coordinates once and your phone's own map service turns them into a street address and an area name. We then save on your account the street address, the coordinates, the emirate, the short label the address is saved under (for example "Home") and the date and time it was captured. A copy is also kept in your device's encrypted storage. We keep the emirate so it is already selected the next time you post a job, and we keep the address, the coordinates and the label so the app can show you the location it holds and let you correct it — nothing else reads them today. You can change it in the app at any time, and it is removed when you delete your account (see section 9). We read your location only while you are using the app, we never ask for it in the background, and we do not send your saved address or your coordinates to any provider.
• Consent record: the date and time you submitted a job request, the IP address from which it was submitted, and whether you consented to sharing your details with additional providers.
• Communications: messages you send us via email or the Platform contact forms.

From Providers

• Business and identity: business name, trade name, trade licence number, copy of trade licence, Emirates ID of the owner, contact name, business address, business category.
• Profile content: services offered, service areas, pricing, photographs, credentials, insurance certificates, portfolio images.
• Account and billing: email address, phone number, login credentials, subscription status, billing records; payment method data is collected and stored by our payment processor Stripe and is not retained by TaskRight.
• Performance data: leads received, response rate, customer reviews, account activity.

Automatically collected

• IP address, device and browser type, operating system;
• pages viewed, time spent, referring URL, search terms used on the Platform;
• cookie and similar tracking identifiers (see Cookie Policy).

3. How we use your data

• To operate the Platform and match Consumers with verified Providers.
• To share a Consumer's contact details and job description with the Provider(s) that Consumer has selected and, if the Consumer has opted in, with additional verified Providers in the same service category.
• To verify a Provider's trade licence and credentials at onboarding and on a rolling basis.
• To process Provider subscription payments via Stripe.
• To communicate with you about your account, your requests, and changes to our service.
• To send service updates, onboarding messages and — only where you have opted in — marketing communications.
• To improve the Platform, analyse usage patterns and fight fraud.
• To comply with our legal obligations and respond to lawful requests by public authorities.

4. Our lawful basis

Under the PDPL we process personal data only where we have a lawful basis to do so. The lawful bases we rely on are:

• Consent — when you submit a job request and consent to your details being shared with Providers, when you allow the app to read your location, and when you opt in to marketing communications.
• Performance of a contract — to operate the Provider subscription, process billing, and deliver Platform features to registered users.
• Legal obligation — to comply with UAE tax, consumer protection, anti-money-laundering, and data protection laws.
• Legitimate interests — to run, secure and improve the Platform, prevent fraud, and verify Provider credentials, where our interests are not overridden by your rights.

5. Who we share your data with

We share your personal data only with the recipients below, and only to the extent necessary.

• Matched Providers. When a Consumer submits a job request, we share the job details and contact information with the Provider(s) the Consumer selects, and — only if the Consumer has ticked the relevant option — with additional verified Providers in the same service category. Each lead we share includes a timestamp of the Consumer's consent, to evidence that sharing is lawful.
• Payment processor. Provider subscription payments are processed by Stripe Payments Europe, Ltd. Stripe collects payment method data directly and is an independent controller for that data; TaskRight does not see or store full card numbers.
• Your device's own map service, and one lookup when the app opens. When you click the location button in the app, your coordinates go to your phone's own map service — Apple's on an iPhone, Google's on an Android phone — which turns them into a street address and an area name. Separately, when the app opens it asks a third-party service, ipapi.co, which country and emirate your internet connection is in, so the job form can pre-select your emirate. That request discloses your IP address to ipapi.co and nothing else.
• Service providers (processors) acting on our behalf. Cloud hosting, email delivery, analytics, customer support tooling and identity verification vendors process personal data on our instructions under written data processing agreements.
• Legal and regulatory. Authorities, courts or law enforcement where we are legally required to disclose, or to defend our legal rights.
• Corporate transactions. In the event of a merger, acquisition, financing or sale of all or part of our business, personal data may be transferred to the acquirer subject to equivalent protections.

We do not sell your personal data. We do not share Consumer contact details with Providers the Consumer has not consented to be matched with.

6. International transfers

Some of our service providers (including Stripe and certain cloud hosting and analytics providers) are located outside the UAE. When we transfer personal data outside the UAE, we do so only to jurisdictions that provide an adequate level of protection, or under appropriate safeguards consistent with the PDPL and any regulations issued by the UAE Data Office.

7. Cookies and tracking

We use cookies and similar technologies to operate the Platform, remember your preferences, measure usage, and deliver advertising. Full details — including how to refuse cookies — are in our Cookie Policy.

8. How long we keep your data

• Consumer job requests and leads: kept for as long as the account exists, and acted on when you ask us to delete it. We do not prune these rows on a timer, and we would rather say so than publish a schedule we do not run. On deletion your name, email address and phone number are taken off the record and the photographs you attached are destroyed; the job itself stays as a two-party record, because the Provider you dealt with needs their own copy of what was agreed. See section 9 for the full list.
• Consumer account or contact records (if no job submitted): kept until you ask us to delete the account.
• Provider account and profile data: for the duration of the subscription and for 6 years after the last billing event, to comply with UAE tax record-keeping requirements.
• Payment and billing records:retained by Stripe per Stripe's retention policy; summary records held by TaskRight for 6 years.
• Web analytics: aggregated and anonymised after 26 months.
• Legal / dispute files: for the duration of any limitation period applicable under UAE law.

9. Deleting your account

You can delete your account at any time, and you do not need the app installed to do it. Full instructions are on our Delete your account page.

How to delete it

• In the TaskRight app: open your account settings and choose Delete account. It happens straight away and signs you out on every device.
• Without the app: email partners@taskright.ae from the address on the account, or use the Delete your account page. We verify that the account is yours before deleting anything, and we confirm by email when it is done. We never act on a deletion request we cannot tie to the account holder, because doing so would let a third party close your account.

What is removed

Your name and contact name, email address, phone and WhatsApp numbers, your address and map location where we hold them, your profile text, profile photographs, website and social links, your password and one-time codes, every sign-in token and emailed sign-in link, every registered app device, and your saved providers. The photographs you attached to a job request are deleted outright — both the record of them and the image files themselves, so the links stop resolving. This cannot be undone.

What is retained, and on what basis

• Jobs, quotes and messages are a two-party record: the other side to the transaction keeps their own copy, so the record stays and your name, email address and phone number are removed from it.
• Reviews you wrote stay, attributed to Former customer, so a provider is not penalised for your decision. Reviews written about your businessstay because they are the authors' personal data and their words, not yours to erase.
• Invoices and payment records are retained for 6 years after the last billing event, as stated in section 8 above, to meet UAE tax record-keeping requirements. Deleting an account also cancels any paid subscription at the end of the period already paid for; no further payment is taken.
• Records required for a live dispute, for security or for fraud prevention, for as long as that purpose subsists.

Where a record must survive for one of the reasons above, it is anonymised rather than kept in your name: the identifiers are overwritten so the record can no longer be tied to you.

If work is booked

A booked job does not prevent you from deleting your account. If you are a provider who has been chosen for a job, deleting your account cancels that booking, reopens the customer's request so the other quotes are live again, and notifies that customer — so nobody is left expecting a provider who will not arrive.

10. Your rights under the PDPL

Subject to the PDPL and its implementing regulations, you have the right to:

• Access the personal data we hold about you and obtain information about how we process it;
• Correct inaccurate or incomplete personal data;
• Request deletion of your personal data where we no longer need it or where you withdraw consent;
• Restrict or object to our processing in certain circumstances;
• Receive a copy of the personal data you provided to us in a structured, commonly used format (data portability);
• Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal;
• Lodge a complaint with the UAE Data Office if you believe your rights have been breached.

To exercise any of these rights, contact us at partners@taskright.ae. We will respond within one month of receipt unless the request is complex, in which case we may extend the period and will notify you.

11. How we protect your data

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These measures include encryption in transit (HTTPS/TLS), hashed account passwords, access controls, logged admin actions, regular backups, and vetting of personnel and vendors.

No system is perfectly secure. In the event of a personal data breach that is likely to result in risk to your rights, we will notify the UAE Data Office and, where required, affected individuals, in line with PDPL obligations.

12. Children

TaskRight is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact partners@taskright.ae and we will delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The "Last updated" date at the top shows when this version took effect. Material changes will be notified via email or in-Platform notice.

14. Contact us

To exercise your rights, ask questions, or report concerns about your personal data, contact us at: