Privacy Policy | Surrounders

1. Introduction

Surrounders ("we", "us", "our") operates the surrounders.com website and mobile application (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Platform.

Surrounders is a services marketplace connecting customers with service professionals. We act as a data controller for the personal data processed through the Platform. If you have questions about this policy, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

Account information: name, email address, phone number, and password
Profile information: photo, bio, and headline
Addresses you add for service delivery or bookings
Professional profile details: skills, portfolio, pricing, and service areas
Booking details: service requested, date/time, location, and notes
Messages and file attachments shared with other users
Reviews and ratings
Any communications you send to our support team

2.2 Information Collected Automatically

Device and browser information
IP address
Usage data such as pages visited and features used
Cookies and similar technologies (see Section 5)

2.3 Information from Third Parties

If you sign in using a third-party account (such as Google or Apple), we receive your name, email address, and profile picture from that provider. We do not receive or store your third-party password.

3. How We Use Your Information

We use your information to:

Provide and operate the Platform, including account management, bookings, and messaging
Send transactional communications such as booking confirmations and reminders
Display professional profiles and listings to help customers find services
Publish reviews and ratings
Enable social features such as friend connections and invitations
Protect the safety and security of our users and the Platform
Improve and develop new features
Comply with legal obligations

4. Legal Basis for Processing

Where applicable under data protection law (including the GDPR), we process your data based on:

Contract performance: processing necessary to provide the services you have requested
Consent: for optional features such as analytics cookies, marketing communications, and push notifications. You may withdraw consent at any time
Legitimate interests: for fraud prevention, security, and service improvement, balanced against your rights
Legal obligation: where required by law

5. Cookies

We use strictly necessary cookies to keep you logged in and to ensure the Platform functions properly. These cookies are essential and cannot be disabled.

With your consent, we may also use analytics cookies to understand how users interact with the Platform. You can manage your cookie preferences at any time via our cookie consent banner. We do not use advertising or tracking cookies.

6. Location Data

Addresses you add to your profile or bookings are stored to facilitate service delivery. When you use proximity-based search, your browser may request your current location - this is used only for the search and is not stored on our servers. You can deny or revoke location access through your browser settings at any time.

Professional profiles display an approximate service area to help customers find nearby services. Exact addresses are only shared with confirmed booking participants.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We share information only in the following circumstances:

Between booking participants, so the service can be provided
With service providers who help us operate the Platform, under contractual data processing agreements
When required by law, court order, or government request
In connection with a merger, acquisition, or sale of assets, with prior notice to you
With your explicit consent

8. Third-Party Services

We work with trusted third-party service providers to help operate the Platform. These providers may process certain personal data on our behalf for purposes such as authentication, email delivery, analytics, and infrastructure hosting. We only share the minimum data necessary for each provider to perform their function.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption of data in transit, secure password storage, and access controls. While we take reasonable precautions, no system is completely secure. If you believe your account has been compromised, please contact us immediately at [email protected].

10. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. When you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal or regulatory purposes. Anonymized and aggregated data that can no longer be associated with you may be retained indefinitely.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you
Rectification: correct inaccurate or incomplete data
Erasure: request deletion of your personal data
Portability: receive your data in a structured, machine-readable format
Restriction: request that we limit how we use your data
Objection: object to processing based on legitimate interests
Withdraw consent: where processing is based on consent, withdraw it at any time
Lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days and may ask you to verify your identity.

12. International Data Transfers

Some of our service providers may process data in countries other than the one in which you reside. Where this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with applicable law.

13. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe a child under 18 has provided us with personal data, please contact us and we will promptly delete the information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the Platform before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

15. Contact Us

If you have questions or requests regarding this Privacy Policy, contact us at [email protected].