Privacy Policy

1. Who we are

HYPEBOX LTD ("we", "us", "our") is the data controller for personal data processed through the Hyyryn platform. We are registered in England and Wales under company number 16355767 and trade as Hyyryn.

New · draft for review We are registered with the Information Commission (the ICO), the UK’s data protection regulator, as a data controller: registration ZC119954. Anyone can check it on the public register.

If you have any questions about how we handle your data, contact our data protection team at support@hyyryn.com.

2. What data we collect

We collect different categories of personal data depending on how you use the platform:

3. How we use your data

Changed · draft for review We use your personal data to: operate and maintain the marketplace platform; match Customers with Pros; process payments via Stripe Connect and manage payment protection; check a Pro’s right to work in the UK, as the law has required of platforms like ours since 1 October 2026; have Stripe verify the identity of Pros before they are paid; check the registrations and insurance a Pro adds, and show Customers the ones that were checked and are in date, and show an organisation that uses a Pro what we checked, including what has run out (section 13); send transactional communications (job updates, payment confirmations, security alerts); decide disputes, with the help of our dispute assistant (section 3A); report to HMRC what tradespeople were paid (section 15); keep a sealed record that shows job evidence was not changed; read the public register for companies that organisations and homeowners watch (section 13); look into reports about messages; comply with legal and regulatory obligations; and resolve disputes between users.

We will never sell your personal data to third parties for marketing purposes.

4. Legal basis for processing

Under UK GDPR, we process your data on the following legal bases:

• Contract: Processing necessary to provide you with the Hyyryn service (account management, job matching, payment protection).
• Legitimate interests: Platform security, fraud prevention, service improvements, and internal analytics, where these interests do not override your rights.
• Changed · draft for review Legal obligation: right to work checks on Pros; reporting to HMRC what Pros were paid through Hyyryn (section 15); keeping accounting and tax records; and answering a court order or a lawful request from the police or a regulator.
• Consent: Marketing communications (you can withdraw consent at any time).

5. Who we share data with

We share personal data only where necessary to operate the platform:

• Between users: When a Customer hires a Pro, relevant contact and job details are shared between the parties.
• New · draft for review The other side of a job: in a dispute, the other person sees what you filed, and the decision.
• Payment processors: Stripe processes card payments and holds funds in their regulated safeguarded accounts via Stripe Connect, releasing them on instruction from Hyyryn in accordance with our Terms of Service. They process data under their own privacy policies.
• Google, if you choose Sign in with Google: Google confirms who you are, and knows you used it to sign in to Hyyryn, under Google’s own privacy policy. To stop it, remove Hyyryn at myaccount.google.com, and write to us if you want Google taken off your Hyyryn account too. When your account is closed, or its password is reset by email, Google’s number is taken off it.
• Stripe, for paid plans: Stripe takes the payments for a paid plan, keeps the card and sends receipts and reminders (section 13).
• Stripe, for identity: Stripe verifies the identity of a Pro who sets up payouts, on its own pages and under its own privacy notice.
• Changed · draft for review For right to work checks: a right to work checking service on the government’s register of digital verification services, which reads a Pro’s passport, or their Home Office record through their share code, and compares a selfie with the photograph, under its own privacy notice; that service’s own team, when a Pro asks for another way; and the Home Office’s online service. A Customer sees only “Identity checked” on a Pro’s profile, never a document or anything about immigration status.
• New · draft for review HMRC: once a year, for each Pro paid through Hyyryn, the details in section 15.
• Hosting and infrastructure: Cloudflare (hosting, CDN, security). Data is processed in accordance with their data processing agreements.
• New · draft for review Our email service: ZeptoMail (Zoho) sends every email we send you, from its EU data centre, on our instructions.
• New · draft for review A time stamping service: each morning an independent time stamping service receives one fingerprint of our sealed record. A fingerprint cannot be turned back into what it was made from, and holds nothing about you.
• Legal and regulatory: We may disclose data to law enforcement, regulators, or courts where required by law.

Changed · draft for review The providers who work for us, such as Cloudflare and ZeptoMail, act only on our instructions, under a written contract. Stripe, Google, the Home Office, HMRC and Companies House decide for themselves how they use what they receive or hold, under their own notices.

6. Data retention

We keep your personal data while your account is open, and for the periods below. When you close your account it is hidden at once and you are signed out everywhere; 30 days later we take you out of it.

• Account and profile: your name, email, phone, postcode, pictures, profile, company link and certificates are removed 30 days after you close the account. Within those 30 days you can ask us to open it again.
• Payments and accounting records: six years after the end of the financial year they belong to, as HMRC and the Companies Act require. They stay attached to “Closed account”.
• A job that took payment, with its quotes, messages, photographs, any dispute and the review: six years after the job finished, because a claim about the work can be brought for six years.
• A job that never took payment: two years after the last activity.
• A paid plan’s invoices, payments and refunds, and a record of which plan notices we sent and when: six years after the end of the financial year they belong to (section 13).
• Changed · draft for review Right to work evidence (the check’s report, with the face match): while you work through Hyyryn, and two years after your account closes, as the Home Office’s guide asks. A share code and date of birth given to us before 14 October 2026: until the check was recorded, and never more than 90 days.
• Certificates you take back, or that we do not accept: one year.
• Messages to our Help desk, and notices on your account: two years.
• Security records: IP addresses are shortened after 90 days and the log is kept two years. Sign-in counters: two days.
• Records a tradesperson keeps of their own jobs (Plus): for the period the tradesperson chooses, 6 years after the work was finished or 15 for building work; 30 days in the bin if they delete one; and 30 days after their account closes (section 14).
• Evidence packs an organisation makes for a home: six years from the day each is made, unless the organisation deletes it sooner (section 13).
• An organisation’s requests to take on a price over an approval limit, and each decision with its reason: six years from the decision. What the contractor watch found on the register: two years (section 13).
• New · draft for review When the contractor watch told an organisation that a check we made about a Pro had run out: two years from the day it was found, and removed when the Pro’s account closes (section 13).
• New · draft for review Tax details for HMRC: while your account is open, and six years after the end of the last year we reported for (section 15).
• New · draft for review Reports made about a conversation, and our decision: two years after the decision. A message we took down stays with its job, for as long as the job is kept.
• New · draft for review Password reset links and camera links: 30 days.
• New · draft for review Our server logs: a copy with personal details taken out, for 13 months.

Phone numbers, and where a photograph was taken, are encrypted in our database. The record that proves job evidence was not changed holds fingerprints and times, not names or photographs, and is kept as long as the records it protects.

7. Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Ask us to delete your data, or to close your account (subject to the periods in section 6).
• Restriction: Ask us to restrict processing in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you can withdraw at any time.
• New · draft for review Direct marketing: tell us to stop at any time, and we will.
• New · draft for review A decision made by a computer: be told it was, give us your view, ask for a person to look at it again, and challenge it (section 3A).

Changed · draft for review To exercise any of these rights, email support@hyyryn.com. It is free. We may ask you to confirm it is you. We answer within one month, and usually within 30 days. If a request is complicated we may take up to two more months, and we will tell you why within the first month.

8. Cookies and your browser’s storage

Changed · draft for review We keep you signed in with a small item in your browser’s own storage, not a cookie. Without it you cannot use your account, so the law does not ask for your consent to it.

Changed · draft for review We also remember a few choices on your device: which part of Hyyryn you came in by, the companies you looked up on Records, and whether to show the organisation menu. They only change how the site looks and works for you. To refuse them, clear this site’s data in your browser; the site still works.

Changed · draft for review Cloudflare may set a cookie to tell people from automated traffic. Stripe sets cookies on its payment pages to prevent fraud, and Google sets its own if you use Sign in with Google. We do not use advertising cookies or analytics cookies, and we share no browsing data with advertisers.

9. Where your data is kept

Changed · draft for review Our database is kept in Cloudflare’s Western Europe region. Photographs, copies of documents and other files are kept in Cloudflare’s storage in Eastern North America, in the United States. A request to Hyyryn may be handled at the Cloudflare site nearest to you, in whatever country that is.

Changed · draft for review Where a country is not one the UK has approved, we rely on the safeguards the law allows, such as the UK’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Write to us for a copy. Stripe’s transfers for paid plans are described in section 13.

10. Children's data

Hyyryn is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

New · draft for review Please photograph the work, not people. If you, a child or anyone else can be seen in a photograph on Hyyryn, write to us and we will look at what we can do.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision.

New · draft for review If we want to use your information for something new, we will tell you before we start.

12. Contact and complaints

For any privacy-related questions or to exercise your rights, contact us at:

HYPEBOX LTD (trading as Hyyryn)
Email: support@hyyryn.com
General enquiries: Contact page

Changed · draft for review You can complain to us first, about anything in this notice, by email or with the form on the Help page (topic “My data and privacy”). We acknowledge a complaint within 30 days and tell you the outcome. You also have the right to complain to the Information Commission, the UK’s data protection regulator, which took over from the Information Commissioner on 30 September 2026 and is still at ico.org.uk.

13. Paid plans and billing

This section is about the optional paid plans (Plus for Pros, and Landlord and Agent for organisations) and the people in an organisation. No plan is on sale yet: the parts about buying a plan apply from the day one is, and the part about organisations from the day organisations open. How plans work is in section 15 of the Terms of Service.

What we keep when you buy a plan, and why

Changed · draft for review A card is needed to start a paid plan; without one, you stay on the free plan. No decision about your plan is made by a computer alone. How disputes about jobs are decided is in section 3A.

Your card

You give your card details to Stripe, on Stripe’s own page, and they never pass through Hyyryn. We never see or store your card number or security code.

Stripe

Changed · draft for review Stripe Payments UK Limited takes the payments, keeps the card and sends receipts and reminder emails for us, and for that it acts on our instructions. Our own plan emails are sent through ZeptoMail (Zoho), also on our instructions. Stripe also uses the same details for its own purposes, such as preventing fraud and meeting its legal duties, and for those it decides how they are used, under its own privacy policy. Stripe transfers data outside the UK, including to the United States and India, relying on the UK’s adequacy decisions, including the UK Extension to the EU-US Data Privacy Framework, and on the international data transfer addendum to the EU Standard Contractual Clauses. Write to us for a copy of the safeguards.

If you were added to an organisation

If an owner or admin added you to their organisation on Hyyryn, they gave us your email address and the role they chose for you, so that we could send you the invitation. You pay nothing for being in an organisation, and we keep no billing details about you. An invitation you do not accept runs out after the time it states. You can object to being added, or ask us to take your address off, at any time (section 7).

Evidence packs and spend reports

An organisation on the Landlord or Agent plan can make an evidence pack for one of its homes: a PDF, and the original files beside it, showing what Hyyryn held for that home at the moment it was made. It holds the home's details and certificates, the jobs done there through Hyyryn with the tradesperson's business name (or first name), the photographs of the work, what was paid, and the organisation's log about the home with the first names of the people who acted. It holds no messages, phone numbers or email addresses. New · draft for review The original files in a pack are exactly as they arrived, so a photograph keeps what its camera wrote into it, which can include where it was taken. The organisation decides who it gives a pack to, for example a council, a tribunal or a deposit scheme. Packs are kept six years from the day each is made, then deleted. A spend report lists the same payments, with each tradesperson's business name (or first name).

Approval limits and the contractor watch

On the Agent plan an organisation can give a manager an approval limit. When a manager asks to take on a price over it, we keep the request and what was decided: the job and the price, who asked, who decided and when, and the note or reason they gave. The organisation’s owners, admins and accounts staff see it, and the manager sees their own. It is kept six years from the decision, as the record of who agreed to spend what. If you are the tradesperson whose price is waiting, we tell you it is waiting for approval, and nothing more.

Changed · draft for review On the Landlord and Agent plans an organisation’s contractors are watched on the Companies House register. If you are a tradesperson and you confirmed your company number on Hyyryn, an organisation that has you on its list, or that you did a job for in the last two years, is told when the public register shows something new about your company: a proposal to strike it off, a change of status, a notice in The Gazette, an insolvency case, or filings due or overdue, in the register’s own words with the day we read them. Nothing else from the register is passed on, and a sole trader is not on it. We do this in our legitimate interests and the organisation’s: knowing whether the businesses that work on its homes are still trading, which the letting agents’ codes of practice ask agents to take care over. The facts are already public. What was found is kept two years, and deleted when your account closes.

New · draft for review The same organisation also sees what we checked about you, whether or not you have a company: each registration a person at Hyyryn checked, with its scheme, number and the date it runs to; each insurance, with its cover, insurer and the date it runs to; and whether your right to work is checked. It never sees a policy number, the documents, how your right to work was checked, any date or permission about it, or anything you added that we have not checked or did not accept. When one of these runs out and we have not checked a newer one, or your right to work is no longer checked as in date, the organisation’s owners and admins are told that morning, and so is a manager with a job under way with you. We do this in our legitimate interests and the organisation’s: The Property Ombudsman’s code of practice asks letting agents to check that the contractors they use hold the insurance and qualifications the work needs, and an organisation that hired you can only do that from what was checked. What it was told is kept two years, and deleted when your account closes.

In the same way, when a homeowner takes on your price, the company you confirmed is watched for them while the job runs and for a year after it ends, and they are told what the public register shows about it (once the job has ended, only a proposal to strike it off, a change of status, a notice in The Gazette or an insolvency case). We do this in our legitimate interests and the homeowner’s: a homeowner who paid for work, or relies on a guarantee, has a real interest in knowing whether the company behind it is still trading. Nothing else about you is passed on, the facts are already public, and the watch ends on its own.

14. Records tradespeople keep of their own jobs

A tradesperson on Plus can keep a record on Hyyryn of a job that did not come through Hyyryn: what the work was, the customer’s name, address and contact, notes, and photographs of the work.

If you are that customer

The tradesperson decides what is kept about you and why, and is responsible for it (the controller). Hyyryn keeps the record for them and uses it for nothing else: not to contact you, not for marketing, not for statistics and not to train any AI (we are the processor). The tradesperson should have told you before they kept it; to see what they hold, or to have it corrected or deleted, ask them first. If you cannot reach them, write to support@hyyryn.com and we will pass your request on and help them answer it.

Your name, address and contact, and the tradesperson’s notes, are stored encrypted. The record is kept for the period the tradesperson chose (6 years after the work, or 15 for building work), then deleted.

If you are the tradesperson

What we keep for you, and how, is in section 15.14 of the Terms. What we decide ourselves is small: that you keep records, how many and how much storage they use, and the security log of who signed in and changed what. We keep those for security, to stop misuse and for billing (legitimate interests, and our contract with you), for as long as the security log and the billing records in sections 6 and 13.

New · draft for review The records are kept where section 9 says. By keeping records on Hyyryn you instruct us to keep them there.

See also: Terms of Service · Help centre