Privacy Policy
How we protect your personal information
Last updated: 15/04/2026
Your Privacy Matters
At Renofy, we take your privacy seriously. This policy explains what information we collect, how we use it, how long we keep it, and how we protect it.
Renofy Ltd ("Renofy", "we", "us", or "our") is the data controller for the personal data processed through this Platform. We are registered in England and Wales (Company No. 16288740).
Renofy is a digital agreement platform and marketplace for the trades and home improvement market. We provide tools for creating shared digital job agreements and connecting Customers with Tradespeople. Renofy operates as a neutral facilitator and does not supervise or guarantee any work or transactions between users. All agreements and payments are handled directly by Customers and Tradespeople.
What's Public, What's Private
Public Information
Your user profile is publicly visible to anyone, including:
- Your name and bio
- Your profile picture (if uploaded)
- Your skills (for Tradespeople)
- Your work history (completed jobs, descriptions, and photos)
When you post a job, the following information is also publicly visible and may be indexed by search engines:
- Job title and description
- Approximate location (obfuscated within a 250m radius)
- Project photos you upload
- Required skills for the job
Shared with the Other Party
When you enter into a digital job agreement on the Platform, the other party to that agreement can see:
- Your name and profile information
- All agreement content (scope, pricing, milestones, invoices)
- All variations, messages, and photos within that agreement
- The timestamped audit trail of agreement events
Private Information
The following information remains strictly private unless you choose to share it:
- Your full street address
- Your phone number
- Your email address
- Your private messages (visible only to participants)
When Information is Shared
| Information Type | When It's Shared | Who Can See It |
|---|---|---|
| Full Address | Never automatically shared | Only if you choose to share manually |
| Phone/Email | Never automatically shared | Only if you choose to share manually |
| Messages | When you send them | The specific user you're messaging |
| Profile Information | When you create your account | Anyone (profiles are public) |
| Agreement Content | When you create or accept an agreement | Both parties to the agreement |
| Work History | When a job is completed | Anyone (work history is public) |
| Posted Jobs | When you post a job | Anyone (job pages are public and indexed by search engines) |
In-App Messaging
All communication between Customers and Tradespeople happens through the secure messaging system. This ensures:
- Your contact details remain private until you choose to share them
- Messages are stored securely and only visible to participants
- You have a permanent record of all communications
- You can report inappropriate messages to Renofy
Location Privacy
We show your general area only (town and approximate location) in job listings. Your exact street address is only shared if you choose to share it manually. This protects your privacy while allowing Tradespeople to determine if the job is in their service area.
Information We Collect
Information You Provide
- Account details (name, email, phone number, password)
- Profile information (location, bio, profile picture, skills)
- Job details (descriptions, photos, location)
- Agreement content (scope, pricing, milestones, invoices, variations)
- Messages and communications
- Insurance and qualification information (Tradespeople)
Information We Collect Automatically
- Device and browser information
- IP address and general location
- Usage patterns and interactions
- Cookies and similar technologies
- Agreement event data (acceptance timestamps, variation history, milestone completions)
Information We Receive from Third Parties
- Social sign-in providers (Google, Facebook, Apple): your name, email address, and profile picture
- Identity verification provider (OneID Limited): confirmation that an identity check has been completed, and/or limited results of the check
How We Use Your Information
We use your information for the following purposes:
- Provide and operate the Platform, including the marketplace and digital job agreements
- Maintain Agreement records and audit trails as evidence of what was agreed and delivered
- Send important account, service, and job-related notifications (including by SMS)
- Display your profile, work history, and public job pages
- Connect you with Tradespeople or Customers
- Prevent fraud and ensure platform security
- Improve the Platform and develop new features
- Comply with legal obligations
Lawful Basis for Processing (UK GDPR)
Under the UK General Data Protection Regulation, we process your data on the following bases:
| Purpose | Lawful Basis |
|---|---|
| Providing the Platform and your account | Contractual necessity (Art 6(1)(b)) |
| Maintaining Agreement records and audit trails | Contractual necessity and legitimate interest (Art 6(1)(b) and (f)) |
| Sharing Agreement data with the other party | Contractual necessity (Art 6(1)(b)) |
| Retaining Agreement records after account deletion (up to 6 years) | Legitimate interest and legal obligation (Art 6(1)(f) and (c)) |
| Displaying public profiles, job pages, and work history | Legitimate interest (Art 6(1)(f)) |
| Sending service notifications (email and SMS) | Contractual necessity (Art 6(1)(b)) |
| Fraud prevention and platform security | Legitimate interest (Art 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art 6(1)(c)) |
Where we rely on legitimate interest, we have assessed that the processing is necessary for the purpose, is proportionate, and does not override your rights and freedoms. Our primary legitimate interest is maintaining the integrity and evidential value of Agreement records for the benefit of both parties.
Cookies
We use cookies to improve your experience on Renofy. Cookies help us remember your preferences, keep you logged in, and understand how you use the Platform.
Cookies We Use
- Essential cookies: Required for the Platform to function (authentication, session management, security). These cannot be disabled.
- Functional cookies: Remember your preferences and settings to improve your experience.
We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Platform.
Third-Party Services
We share limited information with trusted third-party services to operate the Platform:
- Cloud Hosting & Database: To store and protect your data securely. All data is hosted within the UK/EU.
- Email Service: To send you important notifications and service updates.
- SMS Service (Twilio): To deliver transactional SMS notifications. Your phone number is transmitted to Twilio for delivery purposes only.
- Error Monitoring (Sentry): To detect and resolve technical issues. Sentry may receive device information and technical context when errors occur. We take steps to minimise the personal data included in error reports.
- Identity Verification (OneID Limited): Tradespeople may be required to complete an identity check using a third-party provider. The provider may collect and process information directly from you and may act as an independent controller of that data under its own privacy notice. Renofy may receive confirmation and/or limited results of the check.
- Social Sign-In Providers (Google, Facebook, Apple): When you sign in using a social login provider, we may receive your name, email address, and profile picture from that provider. This data is stored as part of your Renofy account.
These partners are contractually obligated to protect your data and use it only for specified purposes. Where a third party acts as an independent controller (such as an identity verification provider), their processing is governed by their own privacy notice.
All data is stored within the UK and EU. We do not transfer your personal data outside of the UK/EU.
Data Retention
We retain different types of data for different periods, depending on the purpose:
| Data Type | Retention Period |
|---|---|
| Account and profile data | For as long as your account is active, then deleted or anonymised within 30 days of account deletion |
| Agreement records and audit trails | Minimum 6 years after the completion or termination of the relevant Agreement, regardless of account status — in line with the Limitation Act 1980 |
| Messages | For as long as your account is active, then deleted within 30 days of account deletion (unless they form part of an Agreement record) |
| Public work history and job pages | May be retained after account deletion where the law allows, to support transparency and informed decision-making |
| Data received from social login providers | For as long as your account is active, then deleted within 30 days of account deletion |
Identity verification providers may retain data in accordance with their own legal and regulatory obligations and privacy notices.
Your Rights and Control
Under the UK GDPR, you have the following rights over your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Update or correct your personal data at any time through your profile settings, or by contacting us.
- Erasure: Request deletion of your account and associated personal data by emailing [email protected] with the subject line "Data Deletion Request", or directly from your Account Settings. We will action your request within 30 days. Please note that Agreement records and audit trails are retained for a minimum of 6 years after completion, as described in the Data Retention section above.
- Restriction: Request that we restrict how we process your data in certain circumstances.
- Portability: Request a copy of your data in a structured, commonly used format.
- Objection: Object to processing based on legitimate interest. We will stop processing unless we can demonstrate compelling legitimate grounds.
If your request relates to personal data processed by a third-party identity provider during an identity check, you may need to contact that provider directly (see "Third-Party Services" above).
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of any significant changes by email or through a notice on the Platform. Your continued use of Renofy after changes indicates acceptance of the updated policy.
Questions About Privacy?
If you have questions about our privacy practices or want to exercise your rights, please contact us:
Email: [email protected]
Response Time: We aim to respond within 48 hours