Privacy Policy

1. Who We Are

WrapConnect ("we", "us", "our") is a UK-based platform connecting vinyl wrap and surface film installation professionals with businesses. For the purposes of data protection law, we are the data controller of the personal data collected through our website and services.

Contact us regarding data protection matters at: hello@wrapconnect.app

2. What Data We Collect

2.1 Waitlist registration

When you join our waitlist, we collect:

• First name and last name
• Email address
• Your role type (installer, business, or both)
• The date and time you signed up

2.2 Platform accounts (when launched)

When you create a full account on the platform, we may additionally collect:

• Profile information (company name, bio, location, phone number)
• Professional credentials and certifications you choose to upload
• Insurance documents (stored securely, not shared publicly without your permission)
• Portfolio images you upload
• Payment and banking details (processed by our payment providers — we do not store full card numbers)
• Job history, bids, bookings and reviews
• Communications sent through the platform

2.3 Technical data

We automatically collect limited technical information when you use our website, including:

• IP address (anonymised where possible)
• Browser type and version
• Pages visited and time spent
• Device type

This is collected via cookies and analytics tools. See our Cookie Policy for details.

3. How We Use Your Data

We use your personal data for the following purposes:

• Waitlist management — to contact you about early access, platform updates and launch information
• Account creation and management — to create and maintain your account on the platform
• Matching and marketplace — to match installers with relevant jobs and businesses with relevant professionals
• Payments — to facilitate payments between businesses and installers through our payment providers
• Trust and safety — to verify credentials, manage disputes and prevent fraud
• Communications — to send you transactional emails, platform notifications and (with your consent) marketing communications
• Analytics and improvement — to understand how our platform is used and improve it
• Legal compliance — to comply with applicable laws and regulations

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance — processing necessary to provide our services to you
• Legitimate interests — analytics, fraud prevention, improving our platform
• Consent — marketing emails and non-essential cookies (you can withdraw consent at any time)
• Legal obligation — where we are required to process data by law

5. Who We Share Your Data With

We do not sell your personal data. We share data with third parties only where necessary:

• Brevo (Sendinblue) — email marketing and waitlist management
• Supabase — database and backend infrastructure
• Stripe / GoCardless — payment processing (subject to their own privacy policies)
• Intercom — customer support and in-app messaging
• Mixpanel — anonymised analytics
• Vercel — website hosting
• Clerk — authentication services

All third-party providers are required to handle your data in accordance with UK GDPR. We ensure appropriate data processing agreements are in place.

6. How Long We Keep Your Data

• Waitlist data — kept until you unsubscribe or request deletion, or until the waitlist is no longer active
• Account data — kept for the duration of your account and for up to 7 years after account closure (for legal and tax purposes)
• Transaction records — kept for 7 years in accordance with UK financial regulations
• Analytics data — kept in anonymised form for up to 3 years

7. Your Rights

Under UK GDPR, you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data (subject to legal retention requirements)
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent for marketing or non-essential cookies at any time

To exercise any of these rights, contact us at hello@wrapconnect.app. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data incorrectly.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls limiting who can access personal data
• Regular security reviews of our infrastructure providers
• Secure authentication via Clerk

While we take reasonable steps to protect your data, no system is completely secure. If you become aware of any security concern, please contact us immediately.

9. Cookies

We use cookies and similar technologies on our website. Please see our Cookie Policy for full details of the cookies we use and how to manage them.

10. International Transfers

Some of our third-party service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Children

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email. The "Last updated" date at the top of this page will always reflect the most recent version.

13. Contact Us

For any questions, requests or concerns regarding this policy or your personal data, please contact us:

Email: hello@wrapconnect.app
Subject line: Data Protection Enquiry