Pluggerzz Supplier Privacy Notice

1) Who we are

Pluggerzz is a marketplace platform. For most processing described in this notice, Pluggerzz is the data controller under UK GDPR and the Data Protection Act 2018.

2) Data we collect from Suppliers

A) Account & profile

• Name, email, phone number, password (stored securely).
• Profile photo, bio, services/categories, skills, availability, service area, experience.
• Business name and business details (if applicable).

B) Verification, trust & safety

• Identity verification information (e.g., ID documents/proof of address), where used.
• Qualifications/certifications/licences (where relevant).
• Insurance documents (where relevant).
• Verification outcomes or status from verification partners.

C) Bookings, performance & communications

• Offers/quotes, booking details, completion status, cancellations/no-shows, dispute history.
• Ratings, reviews, feedback and rework requests.
• Messages sent through the Platform and support communications.

D) Payments & payouts

• Transaction records, payout records, refunds/chargebacks, invoices/receipts (where applicable).
• Payout destination details (e.g., bank account details) where payouts are enabled.
• We do not store full card details for customer payments; card processing is handled by third-party payment providers.

E) Technical & usage data

• Device identifiers, IP address, browser/app version, operating system, logs and diagnostics.
• Usage data (screens visited, actions taken, timestamps) and security logs.

3) How we use Supplier data (purposes + lawful bases)

• Provide the Platform (create accounts, publish profiles, enable booking and messaging). Basis: Contract + Legitimate Interests.
• Verification and trust (confirm identity/credentials, reduce fraud). Basis: Legitimate Interests + sometimes Legal Obligation.
• Payouts and accounting (process payouts and maintain records). Basis: Contract + Legal Obligation.
• Support and dispute handling. Basis: Contract + Legitimate Interests.
• Platform safety (monitor abuse, investigate incidents, enforce rules). Basis: Legitimate Interests.
• Product improvement (analytics and performance). Basis: Legitimate Interests.
• Marketing (provider updates, optional promotions). Basis: Consent where required.

4) Public profile vs private data

Public/visible to Customers may include:

• Profile name (or business name), photo, bio, services, service area, availability indicators.
• Ratings, reviews, badges, completed job counts (where shown).

Private (not public) typically includes:

• Identity verification documents, payout details, internal risk/fraud signals.
• Security logs, internal support notes, and certain dispute materials.

5) How we share Supplier data

We do not sell your personal data. We share data only as necessary:

• With Customers: your profile details and booking-related information required to deliver the service.
• With service providers: hosting, payment processing, verification, analytics, communications tools (processors under contract).
• For legal and safety reasons: where required by law or to prevent harm, fraud, or security incidents.
• Business transfers: merger/acquisition/restructure, with safeguards and notices where required.

6) Verification & compliance checks

Where enabled, we may use third-party partners to verify your identity, qualifications, or insurance. We typically receive verification outcomes/status and only the necessary supporting data.

7) Security

We use appropriate technical and organisational measures (e.g., encryption in transit, access controls, monitoring, and secure development practices). No system is 100% secure—use strong passwords and keep credentials confidential.

8) Retention

We retain Supplier data only as long as necessary for Platform operations and legal obligations, including:

• Account/profile: while active; deleted/anonymised where appropriate after closure or deletion request.
• Transactions/accounting: typically 6 years (UK tax/accounting).
• Trust & safety logs: retained for limited periods to prevent fraud and protect users.
• Disputes: retained as needed to resolve claims and protect marketplace integrity.

9) Your rights

You may have rights to access, correct, delete, restrict processing, object, and data portability under UK GDPR. To request deletion, email info@pluggerzz.co.uk with subject Data Deletion Request.

10) Supplier responsibilities (data protection)

As a Supplier, you may receive Customer personal data to fulfil a booking (e.g., name, address, contact details, job requirements). You must:

• Use Customer data only to deliver the booked service and related communications.
• Keep Customer data confidential and secure (do not share it unnecessarily).
• Not retain Customer data longer than needed (unless you have a lawful reason).
• Not market to Customers outside the Platform unless you have their clear permission and it is lawful.

11) Contact

Questions about Supplier privacy? Email info@pluggerzz.co.uk.