Legal
Privacy Policy
Last updated:
1. Who we are
PostMySkill operates the peer-to-peer skillist marketplace at postmyskill.com. We are the data controller for personal data collected through this platform.
2. Data we collect
Account data: name, email address, password (hashed), and role when you register. Profile data: skills, bio, portfolio images, service packages, and location if you create a skillist profile. Project data: project enquiries, messages, and payment records processed via Stripe. Usage data: pages visited, search queries, and device/browser information collected via analytics. Communications: messages sent through our contact form.
3. How we use your data
To provide, operate, and improve the PostMySkill platform; process payments and send transactional emails; display skillist profiles to potential skill seekers; detect and prevent fraud, spam, and abuse; and comply with legal obligations.
4. Legal basis (UK GDPR)
We process your data on the following legal bases: contract (to deliver the services you signed up for), legitimate interests (platform security, fraud prevention, analytics), and consent (marketing communications, where applicable).
5. Cookies and analytics
We use cookies for session management and, with your consent, Google Analytics 4 to understand how visitors use the site. You can withdraw consent at any time via the cookie banner. We do not sell your data to third parties.
6. Data sharing
We share data only with trusted service providers necessary to operate the platform: Stripe (payments), Google Analytics (analytics), and our hosting infrastructure. All processors are contractually bound to protect your data.
7. Data retention
We retain your account data for as long as your account is active. You may request deletion at any time. Payment records are retained for 7 years to comply with UK financial regulations.
8. Your rights
Under UK GDPR you have the right to access the personal data we hold about you, correct inaccurate data, request erasure, object to or restrict processing, portability, and lodge a complaint with the ICO. To exercise any right, contact us at [email protected].
9. Security
We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls. No system is completely secure; please use a strong, unique password for your account.
10. Changes to this policy
We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance.
11. Contact
PostMySkill · [email protected]