Privacy policy
Draft of 9 August 2026.
This is a draft. It has not yet been reviewed by a lawyer, and it will change before we open contractor accounts. We are publishing it now because you should be able to read what we intend to hold ourselves to. If something here looks wrong or unfair, tell us — that is genuinely useful while it is still a draft.
The part that matters most
Your contact details are what a contractor pays to receive. When you post a job, contractors browsing can read what you wrote, see your photographs, and see your ZIP code. They cannot see your name, address, phone number or email. When one contractor accepts your job and pays the fee for it, we give them those details and give you theirs.
That happens once, to one contractor, and only after they have paid. We do not sell your details, we do not pass them to contractors who did not accept your job, and we do not share them with advertisers or data brokers.
What we collect
- From a customer — A phone number or email address so somebody can reach you, the address where the work is, what you wrote about the job, and any photographs you attached. A name if you give us one.
- From a contractor — Contact details, business details, the areas and categories you work in, anything you state about licenses or certifications, and card details held by our payment processor — we never see or store a card number.
- From everybody — What you agreed to and when, the messages we sent you and whether they arrived, and ordinary technical records needed to keep the service running and secure.
What the website measures
We record which step of a form you reached, how long a page took to load, and any error the page hit. It is sent to our own server and on to our monitoring, and it is how we find out that a form is broken rather than waiting for somebody to tell us.
There is no third-party tracking script on this site, no session recording, and no advertising or analytics network. What is sent is a fixed list of step names — "started", "chose a category", "posted" — with no identifier, no web address and nothing you typed. We cannot tell from it who you are or what you were posting about.
Photographs
Every photograph is stripped of its metadata before we store it — including the GPS coordinates a phone records. We keep the cleaned version and never the original.
What we cannot remove is what is in the picture. A wide shot of a house front showing a number on the door tells a contractor where you live, and they can see it before paying. Photograph the work rather than the property where you can.
Text messages
If you give us a mobile number we keep a record of when you agreed to be texted and the exact words you agreed to, so we can show it if anybody asks. The three places you can opt in, and what each of them says, are set out in section 7 of the Terms. If you reply STOP we keep that record too — losing a record that somebody opted out is the one thing here that would let us text somebody who had told us not to.
We keep those records against the number rather than against you, because numbers get reassigned and consent should not follow you onto a number somebody else now owns, or follow a stranger onto yours.
We do not sell your number, and we do not send marketing texts.
Who else sees it
Only the companies that make the service work, and only for that purpose: a payment processor to take the contractor's fee, a messaging provider to send texts and emails, and hosting and storage providers. They act on our instructions and may not use your data for their own purposes.
We will disclose data where the law requires it, and we will tell you when we are allowed to.
How long we keep it
A job and its history stay while your account exists, because they are the record of what you asked for and what happened. Records of money and of what you agreed to are kept as long as the law requires, which is longer.
A post that nobody accepts closes after fourteen days. It stays in your own history and comes off the board.
What you can ask for
A copy of everything. There is a button on your account page. We assemble it and email you a link that works once and expires after a day — we do not attach the file, because it is the most detailed record of you we hold and an inbox is not where it should live permanently.
Deletion. Ask and we will remove your personal data. Some records have to survive in a form that is no longer about you — a charge that was made, a message that was sent — and where that is the case we strip the identifying parts rather than keep the row intact.
Correction, and to stop hearing from us. Every text we send explains how to stop, and stopping is honoured immediately. Messages about a job you are actually in are part of the service rather than marketing.
Children
Handigram is not for anyone under 18 and we do not knowingly collect data about children.
Asking us about any of this
Contact us and a person will answer. If you think we have got something wrong, say so — while this is a draft, that feedback changes the document.