Privacy policy

HEAVENLY operates an online marketplace in the United Kingdom that introduces customers to independent taskers and business accounts. For the personal data you give us when you create an account, list a task, send an offer or message another member, HEAVENLY is the data controller.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. When a customer and a tasker exchange information to carry out a task, each of them is a separate controller of the data they receive for that task.

We only collect what the platform genuinely needs to work safely.

Contract: creating and operating your account, publishing tasks, transmitting offers, enabling messaging, calculating payouts, processing memberships and releasing payments.

Legal obligation: identity and name-match checks, anti-fraud and anti-money-laundering duties, tax and accounting records, and responses to lawful requests.

Legitimate interests: keeping the marketplace safe (moderation, automatic removal of direct contact details before a tasker is assigned, abuse detection), preventing off-platform circumvention, improving the service and defending legal claims.

Consent: optional marketing messages and any non-essential analytics. You can withdraw consent at any time without affecting your account.

Your legal name and your identity documents are confidential. Other members only see your public display name, your city or working area, your verification badges, your ratings and the content you deliberately publish.

Earnings, payout details, private notes and documents are never visible to other members. Taskers cannot see what other taskers earn.

Messages are exchanged inside the platform so a written record exists. Conversations may be monitored and moderated by HEAVENLY for safety, fraud prevention and dispute handling, and phone numbers or other direct contact details are automatically removed until the customer assigns the tasker.

We never sell personal data. We share it only with the parties we need to run the platform: the other member involved in a task, our hosting and database provider, our payment provider, identity and company-registry checking services, mapping and address-lookup services, email and notification providers, and our professional advisers.

We may disclose data where the law requires it, to protect a person from harm, or to investigate fraud or a serious breach of our terms. Where data is processed outside the UK, we rely on adequacy regulations or the UK International Data Transfer Addendum.

Account, task, offer, payment and moderation records are kept for the life of the account and then for up to six years, which matches the limitation period for contract and tax records in the UK.

Identity documents are kept only as long as needed to evidence a completed verification, then deleted or minimised. Messages and attachments are retained while a dispute or investigation remains possible.

You can ask for access to your data, correction, erasure, restriction, portability, and object to processing based on legitimate interests. You can also withdraw marketing consent at any time. Some data must be kept where we have a legal obligation or a live dispute.

Contact us to exercise a right and we will respond within one month. If you are not satisfied you may complain to the Information Commissioner's Office (ICO), the UK supervisory authority.

Access to data is restricted by role-level database rules, encrypted in transit, and logged. No system is perfect, so tell us immediately if you suspect your account has been compromised.

The platform is for adults only: you must be at least 18 to hold an account and we do not knowingly collect children's data.

We may update this notice; material changes are notified in the account or by email before they take effect.