Privacy Policy

1. Who we are

This Privacy Policy explains how FIXPRO TECHNOLOGIES LTD, a company registered in England and Wales under company number 17287828, with its registered office at Office 12 Initial Business Centre, Wilson Business Park, Manchester, M40 8WN, United Kingdom ("FixPro", "we", "us"), collects, uses and protects personal data when you use the FixPro website at fixapp.pro and the FixPro mobile application (together, the "Platform").

For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018 (together, "UK GDPR"), and of the EU General Data Protection Regulation where it applies, we are the controller of the personal data described in this Policy. For privacy matters, contact contact@fixapp.pro.

2. Scope

This Policy applies to appliance repair professionals who use the Platform, to customers whose repair requests are processed through the Platform, and to visitors of our website. It does not cover third-party websites, app stores or services that we do not control.

3. Personal data we collect

Data you provide to us

• Account data — name, email address, phone number, login method (email, Google or Apple), country, city, service areas and the appliance categories you select.
• Business data — company or trading name and related details if you register as, or on behalf of, a repair business.
• Repair request data — for customers: the contact details, address or area, appliance category and problem description submitted with a repair request.
• Communications — messages you send to our support team and related correspondence.
• Identity verification data — for professionals: a photo of your identity document and a selfie, captured during the automated check of our verification provider Didit or uploaded in the app for manual review, and the result of the check. See section 5.

Data collected automatically

• Usage and device data — app and website interactions, device type, operating system, app version, language, IP address and approximate location derived from it, and crash or diagnostic logs.
• Cookies and similar technologies — as described in our Cookie Policy. Our website uses only strictly necessary cookies and local-storage preferences (for example, your selected country).

Data we receive from third parties

• Payment confirmations — our payment service providers confirm whether a payment succeeded. We do not receive or store full card numbers.
• Install attribution — when you install the app via our links, our mobile attribution partner (AppsFlyer) tells us which campaign the install came from.

4. How we use personal data and on what legal basis

5. Identity verification of professionals

Before a professional can accept repair requests, we verify their identity. Professionals visit customers' homes, and verification helps keep customers safe and prevents accounts from being opened in someone else's name, with forged documents or as duplicates of another account. Verification is done in one of two ways: an automated check by our verification provider Didit, or manual review of photos you upload in the app. If the automated check does not succeed, the app offers you to upload photos of your documents for manual review instead.

Automated check by Didit

We are the controller of this processing. The check is carried out by Didit Identity Spain, S.L. (CIF B22929327, Calle Nápoles 227, P. 1, 08013 Barcelona, Spain), which acts as our processor under a data processing agreement and processes the data in the European Union. To start a check, we give Didit only an internal identifier of your account and the language of the app, not your name or contact details. Didit may also use limited data as an independent controller for its own security and abuse-prevention purposes, as described in its Verification Privacy Notice and End User Terms for Identity Verification.

During the check, Didit collects and processes:

• photos of your identity document (passport, ID card, residence permit or driving licence) and the details printed on it, and, where our app supports it, data read from the document's chip;
• a selfie and a short video that confirm a real person is taking the check (liveness detection);
• biometric data: your face is compared with the photo on your document and with faces from other verifications carried out for FixPro, to detect forgeries and duplicate accounts;
• information about your device and connection, including your IP address and approximate location, to detect fraud;
• the result of each check.

FixPro does not store the images or the video, the name, document number, date of birth, address or other personal details read from your document, or the IP address and location recorded by Didit during the check. Our systems keep only the outcome of the check: its status and reason codes, the type and issuing country of the document, the scores and flags produced by the individual checks (for example, the face-match score or whether a VPN was detected), and a record of your consent (date, version of the consent text, how it was given, and your language and country).

Legal basis. Because the check uses biometric data to identify you, we ask for your explicit consent in the app before each check starts (UK/EU GDPR Article 9(2)(a)). Consent is voluntary: if you do not want an automated biometric check, email us at contact@fixapp.pro and we will arrange manual review of your documents instead. You can withdraw your consent at any time by emailing contact@fixapp.pro. Withdrawal does not affect checks completed before it; after it, a new automated check starts only if you give your consent again, and we will have the data of your checks deleted at Didit.

Automated result. The result of the check (approved or declined) is decided automatically and determines whether your account is approved to accept repair requests. Some checks are referred to a member of our team for review. You can always ask for a person to review the result: if your check is declined, you can try again, upload photos for manual review, or email us — see section 12.

How long the data is kept. Didit keeps the data of each check for up to 12 months and then deletes it automatically; the face data used for the comparison is deleted together with the check. You can ask us to delete it sooner by email. The outcome of the check and the record of your consent are kept by FixPro while your account exists and are deleted when your account is deleted, in the same way and within the same time limits as your other account data (see Account Deletion).

Manual review of uploaded photos

Instead of the automated check, you can upload a selfie and a photo of your identity document in the app. The files are kept in our cloud storage and are reviewed by a member of our team, who compares them visually; no biometric technology is used. We rely on our legitimate interests in keeping customers safe and preventing fraud. The photos are kept while your account exists and are deleted when your account is deleted, in the same way and within the same time limits as your other account data (see Account Deletion).

6. How we share personal data

We do not sell personal data. We share it only:

• Between users, as the service requires — when a professional accepts a repair request, we share the contact details needed to arrange the repair between that professional and the customer. Professionals may use customer data solely to respond to the request.
• With service providers acting on our instructions under data processing agreements, in categories such as: hosting and content delivery (Cloudflare), cloud infrastructure, mobile attribution (AppsFlyer), identity verification (Didit Identity Spain, S.L., Spain — see section 5), payment processing, email delivery, and customer support and internal communication tools.
• With app stores and payment providers where they act as independent controllers of the data they process for you under their own policies.
• For legal reasons — where required by law or to establish, exercise or defend legal claims, or to protect the rights, property or safety of FixPro, our users or others.
• In a business transfer — as part of a merger, acquisition or sale of assets, in which case this Policy will continue to apply to the transferred data unless you are informed otherwise.

7. International transfers

We operate from the United Kingdom and serve users in several countries, so personal data may be processed in the UK, the European Economic Area and other countries where our service providers operate. Where personal data is transferred outside the UK or EEA, we rely on adequacy decisions or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses.

8. How long we keep personal data

• Account data is kept while your account is active and for a reasonable period afterwards in case you return or a dispute arises.
• Transaction and billing records are kept for up to 6 years to meet UK accounting and tax requirements.
• Repair request data is kept as long as needed to provide the service and handle quality reviews and disputes.
• Identity verification data is kept as described in section 5: up to 12 months at Didit; the outcome of the check, the record of your consent and any photos you uploaded for manual review are kept while your account exists and are deleted when your account is deleted.
• When data is no longer needed, we delete or anonymise it.

9. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls and least-privilege access for our team. No online service can guarantee absolute security, but we review and improve our measures on an ongoing basis. If a personal data breach occurs that we are required to report, we will notify the relevant authority and affected users as required by law.

10. Your rights

Depending on where you live, you have some or all of the following rights in relation to your personal data:

• to access it and receive a copy;
• to have inaccurate or incomplete data corrected;
• to have it deleted, where the law provides for this;
• to restrict or object to its processing;
• to receive it in a portable format where processing is based on contract or consent;
• to withdraw consent at any time, where processing is based on consent, without affecting processing before withdrawal;
• to opt out of marketing communications at any time.

To exercise any of these rights, email contact@fixapp.pro with the subject "Privacy request". We respond within one month, extendable where the law allows for complex requests. We may need to verify your identity before acting on a request.

To delete your FixPro account and the data linked to it, follow the steps on our Account Deletion page — you can do it in the app or by email.

You also have the right to complain to a supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in Poland, the President of the Personal Data Protection Office (UODO); in Portugal, the CNPD; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights. Users in the United States may have additional rights under applicable state privacy laws.

11. Children

The Platform is intended for adults acting in a business capacity and is not directed at children. We do not knowingly collect personal data from anyone under 18; if you believe a child has provided us personal data, please contact us and we will delete it.

12. Automated decision-making

The result of the automated identity check described in section 5 is a decision based solely on automated processing that can significantly affect you: it decides whether a professional's account is approved to accept repair requests. We make it only with your explicit consent (UK/EU GDPR Article 22(2)(c) and 22(4)), which you give in the app before each check. You have the right to have the result reviewed by a person, to express your point of view and to contest it: upload photos for manual review in the app, or email contact@fixapp.pro. Other automated checks used for fraud prevention are subject to human review on request.

13. Changes to this Policy

We may update this Policy from time to time. The date above shows when it was last revised. If a change is material, we will notify you through the app, by email or by a prominent notice on the website before it takes effect.

14. Contact

FIXPRO TECHNOLOGIES LTD, Office 12 Initial Business Centre, Wilson Business Park, Manchester, M40 8WN, United Kingdom. Email: contact@fixapp.pro. See also our Contact & Support page and Cookie Policy.