Draft — pending solicitor review

Version 0.1. Written by the build team so that data already being collected is covered, not by a solicitor. It has not been reviewed by a qualified professional and should be before launch.

Privacy notice

This explains what personal data Valdera collects, why we collect it, how long we keep it and how you get it back or get rid of it. It covers the waiting list, and the messages you send about a booking once a detailer has accepted it.

Who is responsible

Valdera is the data controller for the information described here. You can reach us about anything on this page at westlanee31@gmail.com.

What we collect, and why

From the waiting list, three things, collected for two different reasons under two different lawful bases. Messages about a booking are covered separately below.

Your email address: So we can tell you once when Valdera opens in your area. Lawful basis: consent, UK GDPR Article 6(1)(a). We use consent rather than legitimate interests because you are not a customer, there is no existing relationship to rely on, and the message we intend to send is a marketing message — which the Privacy and Electronic Communications Regulations expect you to have opted into.
The outward part of your postcode, and the date: For example M1, not your full address. It tells us where demand is so we know where to recruit detailers next, and it is the thing your notification is keyed to. Same lawful basis: consent.
Your IP address: Recorded on signup purely to stop one machine flooding the list with fake addresses. Lawful basis: legitimate interests, Article 6(1)(f) — preventing abuse of a public form. It is not used to profile you, is never used for marketing, and is deleted well before the rest.

When you book a detail

Collected because we cannot arrange the work without it. Lawful basis for all of it: performance of a contract, UK GDPR Article 6(1)(b) — you asked us to arrange a service and these are the facts that make it possible.

Your name, email address and phone number: So the detailer knows who they are meeting and we can tell you what is happening with your booking. Your phone number is never shown to the detailer — messages go through us, which is the same protection working in both directions.
The address, and anything you tell us about reaching the car: The full address, plus notes like a gate code, where to park, or which vehicle is yours. Released to the detailer only once they have accepted the job — before that they see the outward part of the postcode and nothing else.
Your vehicle, including the registration: Make, model, size and — if you give it — the registration. The registration is optional on every booking. It exists so a ceramic coating can be recorded against the right car and looked up later by whoever owns it. A registration is personal data because it identifies a person through the DVLA record, so it is treated as such: never shown publicly, never sold.
Photographs of the work: The detailer takes before and after photographs to close a job. They are the evidence the work was done and what a complaint is decided on. They are taken where your car is, which is often your home, so they can show your property — a driveway, a door, another vehicle. They are visible to you, to the detailer who took them, and to an admin reviewing a dispute. They are not published, not used in marketing, and not shown to other customers.

If you work through Valdera as a detailer

A marketplace that sends people to other people’s homes has to know who it is sending. This is the part that makes the rest defensible, and it is the most sensitive information we hold.

Your identity document: A passport or driving licence, uploaded once and reviewed by hand before you can take work. Lawful basis: legitimate interests, Article 6(1)(f) — checking who we let into a customer’s home. The image is deleted 12 months after your account closes. What survives is the fact that a check was done and by whom, never the document itself.
Your public liability insurance: The certificate, the insurer, the policy number and the expiry date. We record the expiry so we can warn you before it lapses and stop offering you work if it does — a customer is told every detailer is insured, and that has to be true on the day. Same lawful basis and same retention as the identity document.
Roughly where you are, while a job is under way: Only if you choose to share it, only between accepting a job and finishing it, and only ever as a rough distance — the customer is told “about two miles away”, never where you are. Lawful basis: consent, Article 6(1)(a). Declining changes nothing about the work you are offered, which is what makes it consent rather than a condition of working.

If someone invited you

When you sign up with a referral code we record who introduced you and whether it turned into a completed job. Lawful basis: legitimate interests, Article 6(1)(f) — knowing which introductions are real. It carries no reward and no money today. It is visible to an admin and to nobody else; the person who introduced you is not told what you booked or what you paid.

Messages about a booking

Once a detailer accepts your booking, a message thread opens on that job so the two of you can sort out anything practical — where to park, gate codes, what time to expect each other. It is the only channel we provide, and it is deliberate: we do not show your phone number or email address to a detailer, or theirs to you.

What you write, and when you wrote it: The text of your messages, which booking they are about, and whether you or the detailer sent each one. Lawful basis: performance of a contract, UK GDPR Article 6(1)(b) — arranging the job you have booked is the job itself.
Whether a message looked like contact details: We check messages automatically for phone numbers, email addresses and links, and mark the ones that look like an attempt to move the conversation off Valdera. Nothing is blocked and nothing is stopped from reaching the person you sent it to — you are simply told it looked that way, and why staying here matters: the Guarantee, payment protection and dispute cover only apply to a job arranged on the platform. Lawful basis: legitimate interests, Article 6(1)(f) — protecting the service and the protections attached to it. It is not used to profile you and no decision about you is made automatically from it.

If a complaint is raised about a booking, a member of the Valdera team can read that booking’s messages while the complaint is open, so it can be resolved fairly. They cannot read the messages on a booking with no open complaint, and every time they do read a thread it is recorded against their name.

What we do not do

We do not sell your data. We do not share it with advertisers, data brokers or detailers. We do not use it to build a profile of you, and no decision about you is made automatically.

There is one automated check, and it is described above rather than hidden here: messages are scanned for phone numbers, email addresses and links so they can be marked. Nothing is blocked, nothing is decided about you, and the result is not used for anything except telling you why the conversation is worth keeping on Valdera.

Who processes it on our behalf

These suppliers handle the data because they run the infrastructure Valdera is built on. They act on our instructions and cannot use your data for their own purposes.

Supabase: Database and authentication hosting · United Kingdom / European Economic Area
Vercel: Application hosting and request logs · European Economic Area, with US parent — see transfers
Sentry: Error monitoring. Configured to capture diagnostics, not form contents. · European Economic Area

Where your data is held

Data is stored in the United Kingdom or the European Economic Area. Some of our suppliers are US-headquartered, so a transfer outside the UK can happen for support or administration. Where it does, it relies on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

Pending review: the exact transfer position for each supplier needs confirming against their current terms as part of the solicitor review noted at the top.

How long we keep it

Your email address and outcode: 24 months from the day you signed up, or until you withdraw consent — whichever comes first. Your IP address: 30 days, because it exists to stop a flood in progress and is useless for that after a month.

The words in your messages: 12 months after the booking they are about is finished or cancelled. After that we delete what was written and keep only the fact that a message was sent, by which side, on which booking, and whether it was marked as looking like contact details. If a complaint on that booking is still open we keep the words until it is settled, because they may be the evidence it turns on.

Your rights

Under UK GDPR you can ask us to do any of the following, free of charge, and we will respond within one month.

AccessGet a copy of everything we hold about you.
RectificationCorrect anything that is wrong.
ErasureHave it deleted. For the waiting list this is immediate.
PortabilityReceive it in a machine-readable format.
ObjectionObject to our use of it, including the abuse-prevention use.
RestrictionAsk us to hold it but stop using it while a dispute is resolved.
Withdraw consentAt any time, and as easily as you gave it. Withdrawing does not make our earlier use unlawful.

How to exercise them

To be removed from the waiting list immediately, use the removal page. It deletes the record there and then — it does not flag it for deletion later.

For anything else, email westlanee31@gmail.com.

Complaints

If you think we have handled your data badly, tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, and you do not have to come to us first.

Cookies

Valdera sets no advertising or analytics cookies. The only cookies in use are the ones needed to keep you signed in once accounts exist. If that changes, this notice changes with it and the version number at the top will move.

Changes

This notice is versioned. When you join the waiting list we record which version you agreed to, so that a later material change does not get treated as something you consented to.