This Privacy Policy explains how information is collected, used, disclosed, and safeguarded in connection with Handysuite websites, the client portal, and related services (collectively, the “Services”). By using the Services, you acknowledge the practices described here.
1. Operator and scope
The Services are operated for purposes of this Policy by the Handysuite team (“we,” “us,” “our”). This Policy does not apply to third-party websites or services that we do not control, including links your users may share outside the Services.
2. Categories of information we process
Depending on how you use the Services, we may process:
- Account and authentication data (for example, identifiers and profile information associated with Worker accounts through our authentication provider).
- Job and business data you enter (for example, job titles, status fields, scheduling information, and business display information you choose to show on client views).
- Files and media you upload (for example, quotes, PDFs, and photos).
- Technical and usage data (for example, IP address, device and browser type, timestamps, diagnostic logs, and security signals) needed to operate and protect the Services.
- Support communications you send us (for example, email content and attachments you voluntarily provide).
Client portal visitors who only open a link without creating an account may still generate technical data (for example, IP address and access logs) as part of normal web service operation.
3. Purposes of processing
We use information to:
- Provide, maintain, secure, and improve the Services;
- Authenticate Workers and enforce access controls;
- Detect, prevent, and respond to fraud, abuse, and security incidents;
- Communicate about the Services, including service and policy updates;
- Comply with law and respond to lawful requests; and
- Create aggregated or de-identified statistics that do not identify individuals.
4. Legal bases (EEA, UK, and Switzerland)
Where the GDPR or similar laws apply, we rely on one or more of the following legal bases: performance of a contract with you; our legitimate interests in operating and securing the Services (balanced against your rights); compliance with legal obligations; and consent where required (for example, for certain cookies or marketing, if we offer them and request consent).
5. How we share information
We do not sell your personal information as that term is commonly defined in U.S. state privacy laws. We share information only as described below:
- Service providers (processors) who assist us in hosting, infrastructure, database, storage, analytics, security, and communications. They are permitted to use information only on our instructions and under appropriate confidentiality and security obligations. Examples include cloud hosting and database providers used to operate the Services.
- Legal and safety if we reasonably believe disclosure is required to comply with law, regulation, legal process, or governmental request, or to protect the rights, safety, and property of users, the public, or us.
- Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and continuity commitments where required by law.
6. International transfers
We may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses approved by relevant regulators) for cross-border transfers.
7. Retention
We retain information for as long as needed to provide the Services, comply with law, resolve disputes, and enforce agreements. Retention periods can vary based on the nature of the data and legal requirements. When retention ends, we delete or de-identify information where feasible.
8. Security
We implement reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure. See our Security page for additional detail.
9. Your rights and choices
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, contact us using the email below. We may need to verify your request and may decline requests where permitted by law (for example, if retention is legally required).
California residents: California law may grant additional rights (including rights to know, delete, and opt out of certain “sales” or “sharing”). We do not sell personal information for monetary consideration. You may designate an authorized agent where permitted by law.
10. Children
The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.
11. Cookies and similar technologies
We and our providers may use cookies and similar technologies that are strictly necessary to operate the Services and for security. If we introduce optional analytics or marketing cookies, we will describe them and obtain consent where required.
12. Changes to this Policy
We may update this Policy from time to time. We will post the updated version and revise the “Last updated” date. Where required, we will provide additional notice or obtain consent.
13. Contact
For privacy inquiries or requests: info@handysuite.pro. You may also use our Contact Support page.