Privacy Policy
How Kinurture collects, uses, and protects your personal data
Data controller
The data controller responsible for your personal data is:
Registered in England & Wales
Company number: 16096044
Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
Email: hello@kinurture.com
Personal data we collect
We collect the following categories of personal data depending on how you interact with Kinurture:
Data you provide
- Account information — Name, email address, phone number, password
- Profile information — Profile photo, biography, qualifications, service specialisms (professionals)
- Contact information — Postal address, business address
- Payment information — Billing address; card details are processed by Stripe and never stored on our servers
- Communications — Messages sent through the platform, support enquiries, reviews
- Verification documents — Professional qualifications, insurance certificates, identity documents (professionals)
Data collected automatically
- Usage data — Pages visited, search queries, features used, timestamps
- Device data — Browser type, operating system, screen resolution, IP address
- Location data — Approximate location based on IP address or postcode (used for search results)
- Cookies — See our Cookie Policy for details
How and why we use your data
Under the UK GDPR, we must have a lawful basis for processing your personal data. The table below sets out our purposes and the legal basis we rely on for each.
| Purpose | Legal basis |
|---|---|
| Create and manage your account | Contract — necessary to provide the service |
| Process bookings and payments | Contract — necessary to fulfil your booking |
| Verify professional qualifications | Legitimate interest — ensuring platform safety and trust |
| Send booking confirmations and service updates | Contract — necessary to deliver the service |
| Send marketing communications | Consent — you can unsubscribe at any time |
| Analyse site usage and improve the platform | Consent — via cookie preferences for analytics tools |
| Prevent fraud and protect platform security | Legitimate interest — security of users and the platform |
| Comply with legal obligations (e.g. tax, anti-money laundering) | Legal obligation |
Third-party processors
We share personal data with the following third parties who process data on our behalf:
| Processor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing via Stripe Connect | USA (EU SCCs) |
| Railway | Application hosting and database | USA (EU SCCs) |
| Tigris (Fly.io) | File and image storage | USA (EU SCCs) |
| Microsoft Clarity | Session recordings and heatmaps (with consent) | USA (EU SCCs) |
| Umami | Privacy-focused analytics (no personal data collected) | EU |
Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) or adequacy decisions.
Data retention
We retain your personal data only for as long as necessary:
- Account data — Retained while your account is active. Deleted within 30 days of account closure, unless required for legal purposes.
- Booking records — Retained for 6 years after the booking date for tax and legal compliance.
- Payment records — Retained for 6 years per HMRC requirements.
- Verification documents — Retained while the professional account is active, deleted within 30 days of account closure.
- Analytics data — Anonymised and aggregated; individual session data retained for up to 12 months.
- Marketing preferences — Retained until you unsubscribe or close your account.
Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right of access — Request a copy of the personal data we hold about you
- Right to rectification — Ask us to correct inaccurate or incomplete data
- Right to erasure — Ask us to delete your personal data ("right to be forgotten")
- Right to restrict processing — Ask us to limit how we use your data
- Right to data portability — Request your data in a structured, machine-readable format
- Right to object — Object to processing based on legitimate interests or direct marketing
- Right to withdraw consent — Where we rely on consent, you can withdraw it at any time
To exercise any of these rights, email us at hello@kinurture.com with the subject line “Data Rights Request”. We will respond within 30 days.
Children's privacy
Kinurture is not intended for children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a child, please contact us and we will delete it promptly.
Changes to this policy
We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on the platform. We encourage you to review this page periodically.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk/make-a-complaint
Contact us
For any questions about this privacy policy or how we handle your data, contact us at hello@kinurture.com.