Privacy Policy

Effective date: 7 May 2026

This Privacy Policy explains how Timetied Ltd ("Timetied", "we", "us") collects, uses, shares, and protects personal data of users of the Timetied marketplace platform ("Service"). It applies to anyone who creates an account, posts a job, accepts a job, visits our website, or otherwise interacts with the Service.

Timetied is the data controller. We are committed to protecting your personal data in accordance with the UK Data Protection Act 2018, the UK GDPR, and (where applicable) the EU GDPR.

1. Who We Are

Timetied Ltd is a private limited company registered in Northern Ireland, company number NI740404, with registered office at 26 Colinward Street, Belfast BT12 7EP, United Kingdom. Questions about your personal data can be sent to info@timetied.com.

2. What Data We Collect

2.1 Information you provide directly

• Account details — name, email address, password (managed and encrypted by our authentication provider Clerk).
• Profile information — bio, profile photo (optional), self-described skills.
• Job content — job titles, descriptions, deadlines, budgets, submitted deliverables, file uploads, and dispute statements.
• Communications — emails you send to us.

2.2 Information collected automatically

• Usage data — pages visited, actions taken, timestamps, browser type, device type, approximate location (city level).
• Cookies and similar technologies — limited to authentication, security, and remembering your preferences. We do not use advertising or third-party tracking cookies at this time.

2.3 Information collected by third parties on our behalf

• Stripe — collects payment card or bank details, identity verification documents (for Workers), and tax information. Timetied never sees full card or bank account numbers; Stripe handles all payment data under its own privacy practices.
• Clerk — handles authentication and may collect email, password hash, sign-in history, and IP address.

3. Why We Collect It (Lawful Basis)

We process your personal data on the following lawful bases under the UK GDPR:

• Performance of a contract — to provide the Service to you (delivering jobs, processing payments, allowing communication between Workers and Hirers).
• Legitimate interests — to operate the Service, prevent fraud, improve our product, and communicate with you about your account.
• Legal obligation — to comply with tax, accounting, anti-money-laundering, and dispute-resolution laws.
• Consent — for any marketing communications, which you can withdraw at any time.

4. Who We Share It With

We share data only with service providers ("processors") who help us operate the Service, and only to the extent necessary. Each processor is contractually required to protect your data.

We will share data with law enforcement, regulators, or courts where legally compelled to do so. We will not sell your data to third parties.

5. International Transfers

Some of our processors are based outside the UK and EEA. Where data is transferred internationally, we rely on the UK's "adequacy" determinations or, where these do not apply, on the Standard Contractual Clauses approved by the UK Information Commissioner's Office and EU European Commission.

6. How Long We Keep Data

• Account data — for as long as you have an active account, plus up to 6 years thereafter for tax and accounting purposes.
• Job and payment records — 7 years, to comply with HMRC requirements.
• Submitted files — for the duration of the job, plus 90 days, after which they are deleted unless required for an unresolved dispute.
• Communications — 2 years.
• Marketing consent — until you withdraw consent.

7. Your Rights

Under UK and EU data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure ("the right to be forgotten") in certain circumstances
• Restrict or object to certain processing
• Data portability — receive your data in a structured, commonly-used format
• Withdraw consent for any processing based on consent
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority

To exercise any of these rights, email info@timetied.com. We respond within one calendar month.

8. Security

We implement technical and organisational measures appropriate to the risk, including encryption in transit (TLS), encryption at rest for sensitive data, role-based access control, and regular security review. We require all processors to provide equivalent protection. No system is perfectly secure, however, and we cannot guarantee absolute security; users are encouraged to use strong, unique passwords and enable two-factor authentication where available.

9. Cookies

We use a small number of strictly-necessary cookies for authentication and session management. We do not currently use advertising or analytics cookies. If we add analytics in future we will update this Policy and seek consent where required.

10. Children

The Service is not intended for individuals under 18. We do not knowingly collect personal data from children under 18. If we become aware that a user is under 18, we will delete their account and any associated data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated to active users by email or in-app notice at least 14 days before they take effect.

12. Contact

Questions, requests, or concerns about your personal data can be sent to:

Timetied Ltd
Attn: Data Privacy
26 Colinward Street
Belfast BT12 7EP
United Kingdom
Email: info@timetied.com