Privacy policy

Who we are

My Local Pro Workbench is run by My Local Pro Ltd (company number 16375757, registered in England and Wales), 3rd Floor, 86-90 Paul Street, London EC2A 4NE. Questions about your data go to hello@mylocalpro.co.uk. We're registered with the Information Commissioner's Office as a data controller, reference ZC231743.

There are two kinds of people whose details are in My Local Pro Workbench, and we play a different part for each:

• Tradespeople who use it to run their business, and people who ask for early access: we decide what's collected and why, so we're the controller.
• Customers of those businesses: the business decides what it collects about its own customers, so the business is the controller and we process the details on its behalf. If you're a customer, contact the business you booked with first.

What we collect

• Early access: your name, business name, trade, email, and phone and area if you give them.
• Accounts: names and email addresses of the people in a business, the business's details, services and prices, areas and working hours.
• Bookings, on the business's behalf: customers' names, contact details, addresses, what they booked, answers to the business's questions, photos they upload, payments and messages.
• Plans and billing: which plan a business is on and its billing status. Card details are taken and held by Stripe, not by us.
• Referrals: which business referred an account and the credit it earned. A business that refers another sees that business's name, when it joined, whether it's on a trial or paying, and the credit earned.
• Booking page visits: how far each visit to a business's booking page got, the area and service chosen, the site the visit came from and whether it was on a phone. Anonymous: no name, email, full postcode or IP address, and nothing stored on the visitor's device. A postcode outside the business's areas keeps only its district (BH23).
• Technical: a sign-in cookie that keeps you signed in, a cookie that remembers a referral code from a link for 60 days, and records of emails we send. We don't use advertising or tracking cookies.

Why, and on what basis

• To provide the service you signed up for (contract).
• To reply to an early-access request and set up an account (legitimate interests; you asked us to).
• To keep the service secure, for example limiting repeated sign-in attempts (legitimate interests).
• To keep records the law requires, such as invoices and payments (legal obligation).

Who else handles it

We use these providers to run the service. Each only handles what it needs for its job:

• Vercel: hosts the app.
• Neon: hosts the database.
• Resend: sends emails, such as sign-in links and booking confirmations.
• Stripe: takes payment for our plans, and card payments for businesses that connect their own Stripe account. A customer pays the business directly; we never hold the business's money.
• Google: finds addresses as they're typed on booking and address forms, and works out drive times between jobs (from postcodes) for areas that use them.
• Anthropic: powers the assistant, only for businesses that turn it on. What someone types to it, the details it looks up to answer, and the business's own notes for it are sent to Anthropic to produce the reply. For businesses that turn on call answering, what a caller says is sent the same way, so the assistant can answer. An enquiry a business forwards or pastes in to be added as a request is sent the same way, so the assistant can read its details. Under its commercial terms, Anthropic doesn't use this to train its models.
• Twilio: sends texts, only for businesses that turn texts on (the phone number and the message). For businesses that turn on call answering, Twilio carries the call and turns what the caller says into words; the business keeps the transcript.
• GoCardless: collects a business's fees to us by Direct Debit, where it pays that way. The owner gives their bank details on GoCardless's own pages; they never pass through us.
• Intuit (QuickBooks): only for businesses that connect their own QuickBooks. Their customers' names and contact details, invoices, payments and expenses (with any receipt) are sent to that business's QuickBooks.
• Xero: only for businesses that connect their own Xero. Their customers' names and contact details, invoices, payments and expenses (with any receipt) are sent to that business's Xero.
• postcodes.io (open postcode data): finds where a postcode is, to match an address to a business's service area and to place the weather forecast. Only the postcode is sent.
• Open-Meteo: the weather forecast, only for businesses that turn weather on. Only an area's map position is sent, never anyone's details.
• Apple, Google and Mozilla's push services: deliver notifications to the phones and browsers of team members who turn them on. Each one is a title, a line and a link to the app, encrypted so the push service can't read it.

Outside the UK

Some of these providers may handle data outside the UK. Where they do, we rely on the safeguards UK law allows for such transfers, such as approved contract clauses.

How long we keep it

• Assistant conversations: deleted 90 days after they were last used.
• Customers' details: while the business uses the service. A business can download or erase any customer's details at any time; invoices and payment records are kept, without the person's details, as accounting rules require.
• Booking page visits: 13 months.
• Working offline: only when someone turns it on for their phone, their own jobs for today and tomorrow are kept on that phone, for up to 36 hours, or until they sign out or turn it off.
• Early-access requests: until we've set up your account, or for 12 months if we haven't.
• Accounts: while the business uses the service, then deleted on request, apart from records we must keep.

Your rights

You can ask for a copy of your details, ask us to correct or erase them, object to how we use them, or ask us to stop. Email hello@mylocalpro.co.uk. If you're a customer of a business using My Local Pro Workbench, the business can do this for you straight away from its customer page.

If you're unhappy with how we've handled your details, you can complain to the Information Commissioner's Office (ico.org.uk).

Changes

If we change this policy in a way that matters, we'll tell account holders by email before it takes effect.