Privacy notice
Who controls your data
Lucas Handyman is the data controller for this pilot. Verified legal identity and privacy contact details must be added before public launch. Supabase provides account, database and private-file hosting; Stripe processes the booking-fee payment; Cloudflare hosts and protects the application.
Data used
We process account details, contact information, Irish service address, booking selections, answers, notes, preferred schedule, optional job photos, payment status and support/cancellation records. Full card details are handled by Stripe and are not stored by Fixora.
Purpose and lawful basis
Booking data is needed to take steps at your request and perform the service contract. Payment and accounting records are retained to meet legal obligations. Security logs and fraud controls support our legitimate interests in protecting customers and the service.
Retention
Accounting and order records are retained for six years. Job photos are scheduled for deletion 90 days after completion. Operational notes are retained for 12 months unless a dispute, safety issue or legal requirement requires longer.
Your rights
You may request access, correction, restriction, portability or deletion where applicable, and may object to certain processing. Some records cannot be deleted while legally required. Requests are handled manually during the pilot. You may complain to the Irish Data Protection Commission.
International processing and security
The primary Supabase database is in Ireland. Providers may process limited data under their own safeguards. Access is restricted using account authentication, row-level security, private storage and signed photo links.