Privacy notice

Version 2026-11-07 · Last updated 7 November 2026

This notice explains how we process personal data when you use skrhyb as a customer, a household member, a business or a member of a business's team. It is written to meet the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

The controller of your personal data is the company below. For data protection questions contact support@skrhyb.com.

Businesses that provide services through skrhyb are separate organisations. When a business uses the details you share to deliver a service, it is responsible for that use as a controller in its own right.

2. What we collect

• Account data — name, email address, password (stored only as a one-way bcrypt hash), optional phone number, multi-factor authentication settings.
• Location — your postcode and approximate coordinates, to find businesses that cover your area. Your full service address is only shared with a business after you confirm and pay for a subscription.
• Preferences and household — service categories, preferred days and times, budgets, and household members you add. Children are profiles only and cannot make purchases or enter contracts.
• Transactions — requests, negotiations, subscriptions, appointments, payments, refunds and referral credits. Card details are handled by our payment provider; we keep only a reference, the card brand and last four digits.
• Visit records — when staff check in and out of a visit, the times, the customer's confirmation (including a printed name if confirmed on the staff member's device) or any problem reported. If the business has switched on its optional location check, we store only the staff device's distance from the property (rounded to 10 metres) and the GPS accuracy, never the coordinates themselves.
• Content you send — reviews, photos, messages, complaints, support tickets and evidence you upload.
• Business data — business profile, verification documents (e.g. insurance, qualifications, safeguarding evidence), staff details entered by the business, including DBS certificate details for staff working with children (recorded by the business with the staff member's consent and seen only by that business and skrhyb's verification team).
• Technical data — session identifiers, security logs, IP address used for rate limiting and fraud prevention, and — only if you consent — analytics and marketing cookies (see our cookie policy).
• AI records — when you use AI features (e.g. describing what you need, website scanning) we log the request and the structured result so recommendations can be audited.

3. Why we use it and our lawful bases

4. Automated recommendations

Recommendations, rankings, better-deal alerts and subscription-health scores are produced automatically. They never make decisions with legal or similarly significant effect: every subscription, cancellation, change or payment requires your explicit action, and each recommendation shows why it was made. You can switch off personalisation in account settings.

5. Who we share data with

We do not sell personal data. We share it only with:

• Businesses you engage — only what they need to quote for and deliver the service.
• Processors acting on our instructions under contract: cloud hosting and database providers; Stripe (payments, fraud checks and payouts to businesses); Anthropic (AI processing of text you submit to AI features); our email provider (e.g. Resend or our SMTP provider) and SMS provider (e.g. Twilio); postcode lookup (postcodes.io); and, only with your consent, analytics/advertising providers listed in the cookie policy.
• Authorities and advisers where the law requires it, or to establish, exercise or defend legal claims.

6. International transfers

Some processors (for example Stripe, Anthropic and Twilio) may process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Addendum / Agreement with appropriate supplementary measures.

7. How long we keep it

8. Your rights

You have the right to access, rectify, erase, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. You can:

• download a copy of your data and delete your account in account settings (active subscriptions must be ended first, because they are contracts with businesses);
• change marketing and notification choices in account settings and cookie choices via “Cookie settings” in the footer;
• contact us via the Support centre or at support@skrhyb.com. We respond within one month.

9. Security

We use encryption in transit, hashed passwords, multi-factor authentication for privileged accounts, role-based access controls with business separation, audit logging and regular reviews. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

10. Complaints

Please contact us first so we can help. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.

11. Changes

We will update the version date above when this notice changes and tell you about material changes before they take effect.