Skip to main content
FleckUP home
Legal

Privacy
policy.

Last updated: 10 September 2026

1. Who we are

Fleck AI Ltd ("FleckUP", "we", "us") is the data controller for the personal data we process about customers, professionals and visitors of the FleckUP platform. We are based in London, United Kingdom.

For any privacy question, contact us at info@fleckup.com.

2. Data we collect

Account data: name, email, phone number, password (hashed), date of birth, and profile photo. We verify phone ownership by sending a one-time code by SMS.

Booking data: your address, service details, notes to the professional, dates and times.

Payment data: payments are processed by Stripe — we never store full card numbers. For professionals we hold a membership subscription and, where applicable, a £5 activation deposit record, plus payout details (bank account holder name, sort code and account number) collected by our payment provider.

Verification data (professionals): identity checks are performed by our verification partner Didit, which may process your government-issued ID, a selfie and liveness checks. We also collect right-to-work evidence, certificates, insurance documents and references.

Document processing: when you upload a certificate or other professional document, we may use automated (AI-assisted) tools to read the document's details — such as its type, holder name and expiry date — purely to pre-fill your submission and speed up review. Every document is ultimately reviewed by a person before approval.

Professional data: service coverage, availability, pricing, tax information (for example a UTR number, which is self-declared and not verified by us against HMRC), and your history on the platform.

Technical data: device information, IP address, and interactions with the platform collected via cookies and similar technologies.

3. How we use your data

To operate the platform, process your bookings and connect you with the right professional.

To take payment, manage professional memberships and deposits, pay out professionals, and handle refunds or disputes.

To verify the identity, right-to-work and qualifications of professionals — each service a professional offers is evaluated separately — and to keep our community safe.

To send transactional messages (booking confirmations, reminders, verification and payment updates) by email and, where you have provided it, by SMS or in-platform notifications. Marketing updates are sent only with your consent and you can opt out at any time.

To remind you of unfinished steps that need your action — for example an unpaid booking or an incomplete professional application — so the service you asked for can go ahead.

To improve the service, prevent fraud, and comply with our legal obligations.

4. Legal basis

We process personal data on the basis of performance of a contract (when you book or accept a job), our legitimate interests (to run and improve the platform, and to keep it safe), your consent (for marketing communications and non-essential cookies), and legal obligations (for example tax and anti-fraud rules).

5. Who we share data with

With the professional and customer involved in a booking, to make the service happen.

With trusted processors that host our infrastructure and operate the platform: Stripe (payments, subscriptions and professional payouts), Didit (identity verification for professionals), SMS and email providers (verification codes and messages), and analytics services — always under a written data-processing agreement.

With authorities when we are legally required to do so, and with our advisors as needed to protect our rights.

We never sell your personal data.

6. How long we keep it

We keep personal data for as long as your account is active and for a limited period afterwards to meet legal, accounting or dispute-resolution requirements. Verification documents for professionals are retained for the period required by UK right-to-work rules, and identity-verification results are retained in line with Didit's data-processing terms and our legitimate interest in platform safety.

7. Your rights

Under UK data-protection law you have the right to access your data, correct it, ask for its deletion, restrict or object to certain processing, and to receive a portable copy. You can also withdraw consent at any time.

To exercise any of these rights, email info@fleckup.com. You have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

8. Cookies

We use essential cookies to run the platform and, with your consent, analytics cookies to understand how it is used. You can manage cookie preferences from your browser at any time.

9. Security

We use industry-standard measures — encryption in transit, access controls, and regular reviews — to protect your data. No system is perfectly secure, so please help us by keeping your password confidential.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified to you by email or through the platform. The "Last updated" date at the top of this page shows the current version.

See also our Terms and conditions.