Privacy Policy

Workopoly (Archema Labs Ltd, trading as Workopoly), company number SC879076, registered office in Glasgow, Scotland, United Kingdom, is the data controller for the personal data described in this policy. Workopoly is registered with the Information Commissioner's Office under registration reference ZC161034. Our Data Protection Officer is Shujahat Munir, who may be contacted at dpo@archemalabs.com.

If you have any question about this policy or about how we handle your data, please contact us at legal@workopoly.com.

This policy applies to everyone who uses workopoly.co.uk and workopoly.contractors, whether you are a homeowner or a contractor. Where something applies to only one of you, this is stated clearly.

2.1 Account and profile data

• Name, email address, phone number, and password (stored as a hash, never in plain text)
• For contractors: business name, biography, trades offered, service areas, business address, business phone number, profile photograph, and portfolio photographs
• For homeowners: postal address (used on completion records for jobs you complete)

2.2 Verification data (contractors only)

• Company registration number, and the result of checking it against the public Companies House register
• Business registration and public liability insurance documents you choose to upload
• Insurance expiry date (self-reported by you — this is not independently verified)

Your registration number is checked against the Companies House public register automatically the first time a homeowner pays you for an agreement, and on demand if you hold an active Contractor Plan subscription. This check is repeated periodically, so that a badge can be revoked if a company is later dissolved. This is not a real-time check: a badge reflects the status as of the most recent check, not necessarily the current moment.

2.3 Job, quote, and agreement data

• Job descriptions, photographs, and videos that you upload
• Quotes, line items, and structured pricing documents
• Agreements, their signed status, and the fee paid to create one
• Payment schedules and milestones agreed between the parties, and each side's confirmation that a payment has been made or received

2.4 Messages

Messages sent through Workopoly between a homeowner and a contractor, whether tied to a specific job or sent directly from a contractor's profile.

2.5 Reviews

Workopoly operates two independent review systems, described in full in Section 4, as visibility genuinely differs between the two: a homeowner's review of a contractor's work, and a contractor's review of a homeowner.

2.6 Payment data

We do not store your card details. Payments are handled entirely by Stripe, our payment processor. We retain a record of what was paid, when, and for what purpose, but never the card number itself.

2.7 Technical data

Standard web request data (IP address, browser type, device type), collected automatically as part of operating the site securely.

UK GDPR requires that each purpose be linked to a specific lawful basis, rather than listed separately, so these are paired below:

4.1 Before you have connected with anyone

• A contractor's public profile is visible to anyone, including visitors who are not logged in.
• A marketplace job listing shows the description, trade required, general location, budget, and photographs — never your exact address or name at this stage.
• A homeowner's own rating is visible only to contractors holding an active Contractor Plan subscription, and only when deciding whether to accept a job from that homeowner. It is never public, and there is no public homeowner profile page.

4.2 Once a contractor is invited, quotes, or is accepted

• Where a contractor is invited by email, their business name and credentials become visible to the homeowner, and the homeowner's name and the job's details become visible to that contractor.
• Once a quote is accepted or an invitation is claimed, each side receives the other's contact details as needed to carry out the job — name, telephone number where provided, and the property address.
• Messages between you and your counterpart are visible to both of you and to Workopoly, for moderation and support purposes, and never to any other user.

4.3 Reviews — two separate systems with different visibility

A homeowner's review of a contractor's work is public, and is shown on that contractor's profile page to anyone.

A contractor's review of a homeowner works differently, and deliberately so: it is never public, and there is no public homeowner profile at all. It is visible only to other contractors holding an active, paid Contractor Plan subscription, and only when they are deciding whether to take on a job from that homeowner. A homeowner may view their own reviews and respond to them, in the same way that a contractor may respond to a review of their work.

4.4 Staff access

A small number of authorised Workopoly staff may access account data to provide support, investigate a reported problem, or moderate disputed content. This access is logged and restricted to what is required for the specific task.

4.5 We never sell your personal data

Workopoly does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

Stripe, Resend, and our AI language model provider involve the transfer of data to the United States, for which we rely on standard contractual clauses, the UK International Data Transfer Agreement, or an equivalent recognised safeguard. Supabase, Vercel, and Companies House are all UK-based, so no international transfer safeguard is required for any of them.

Where you use the optional writing-assistance feature, the text you type into that field is sent to our AI provider to generate a suggestion. This does not include your name, email address, or any account identifier — only the job-scope text itself, together with the trade type. If you choose to include personal details directly within that text (for example, your own phone number), those details would be included, as the feature has no way to distinguish this from any other content you write. This content is not used by our AI provider to train its models. Our current provider is Anthropic. We will update this line if the provider changes.

• Your account, while active: for as long as the account remains open.
• After you request deletion: a thirty-day grace period applies, after which your name, email address, and phone number are permanently anonymised. Shared records, such as a job, message, or review, remain intact for the other party, with your identifying details removed.
• Payment and financial records: six years from the date of the transaction, in line with UK tax and contract-limitation rules.
• Reviews: retained for as long as the platform operates, as they constitute shared content. If the person who wrote a review deletes their account, their own identifying details are removed from it. If the person a review is about deletes their account, the review itself remains visible, with that person's own identity anonymised in the same way as any other deleted account, since the review is core to the reputation system this policy describes in Section 4.
• Support and dispute correspondence: up to six years after the matter is closed.

You have the right to access, correct, erase, port, object to, and restrict our processing of your data, and to withdraw consent at any time where consent is the basis for processing.

Most of these may be exercised directly, without needing to wait on a response from us:

• To download your data: Settings, then Your data, then Download my data.
• To delete your account: Settings, then Danger zone, then Delete my account.

For anything else, please contact legal@workopoly.com.

If you believe a review about you is unfair or inaccurate, you or the other party may respond to it publicly through the review itself, or contact us to have it flagged for moderation. A review is not removed simply because it is disputed, but we do investigate reports of reviews that appear retaliatory or unrelated to the job in question.

If you are unhappy with how we have handled your personal data, please tell us first at ico@archemalabs.com. In accordance with the UK's data protection complaints rules, we will acknowledge receipt of your complaint within thirty days, investigate it without undue delay, and inform you of the outcome, including your right to escalate the matter to the ICO if you remain unsatisfied.

Information Commissioner's Office (ICO)

Website: ico.org.uk · Telephone: 0303 123 1113

Workopoly is not intended for use by anyone under the age of eighteen. Both homeowner and contractor accounts require the account holder to be an adult capable of entering into agreements.

We employ industry-standard measures to protect your data, including encryption of data in transit, database-level access controls that restrict each user to only the data they are entitled to see, and restricted, logged staff access. We will inform you and the ICO promptly if a breach is likely to affect your rights and freedoms, as required by UK GDPR.

Workopoly does not use any analytics, advertising, or tracking cookies or scripts. We use a small number of strictly necessary cookies, set by Supabase, to keep you signed in. Under UK PECR rules, strictly necessary cookies of this kind do not require a consent banner.

We do not track you across other websites, and we do not sell your data to advertisers.

This policy will be updated as Workopoly changes, and the new version will be posted here with an updated date at the top. Where a change is significant, you will be told directly.

Archema Labs Ltd, trading as Workopoly
Company number: SC879076
Registered office: Glasgow, Scotland, United Kingdom
Email: legal@workopoly.com