Privacy Policy

1Information We Collect

1.1 Personal Information

• Account Information: Name, email address, phone number, company details
• Profile Information: Professional qualifications, experience, bio, profile photo
• Payment Information: Billing address, payment method details (processed securely via Stripe)
• Identity Verification: Government-issued ID, professional certifications (for consultants)

1.2 Usage Information

• Activity Data: Bookings, searches, messages, reviews, ratings
• Technical Data: IP address, browser type, device information, cookies
• Analytics Data: Page views, session duration, user interactions
• Communication Data: Chat messages, email correspondence, support tickets

1.3 Third-Party Analytics

We use third-party analytics services to understand user behavior and improve our platform:

• Google Analytics: Website traffic and user behavior analysis
• Hotjar: Heatmaps and session recordings (anonymized)
• Mixpanel: Product analytics and user engagement tracking

These services may collect data about your interactions with our platform. You can opt out of analytics tracking in your account settings.

2How We Use Your Information

• Service Delivery: Process bookings, facilitate payments, enable communication
• Account Management: Create and maintain your account, verify identity
• Communication: Send booking confirmations, reminders, updates, and notifications
• Platform Improvement: Analyze usage patterns, optimize features, enhance user experience
• Security: Detect fraud, prevent abuse, ensure platform safety
• Legal Compliance: Meet regulatory requirements, resolve disputes, enforce terms
• Marketing: Send promotional content (with your consent, opt-out available)
• Revenue Optimization: Track referrals, analyze conversion rates, optimize pricing

3Data Sharing & Third Parties

3.1 Service Providers

We share data with trusted third-party service providers who help us operate our platform:

• Stripe: Payment processing and escrow management
• Supabase: Database hosting and authentication
• SendGrid: Email delivery and notifications
• Twilio: SMS notifications and reminders
• Google Analytics: Website analytics and performance tracking
• Hotjar: User experience analysis and heatmaps
• Mixpanel: Product analytics and user engagement

3.2 Analytics & Advertising Partners

We work with analytics and advertising partners to:

• Understand user behavior and preferences
• Measure marketing campaign effectiveness
• Display relevant advertisements
• Optimize conversion rates and revenue

These partners may use cookies and similar technologies. You can manage your preferences in our cookie settings.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

4Data Retention

We retain your data for as long as necessary to provide services and comply with legal obligations:

After retention periods expire, data is securely archived or permanently deleted. You can request early deletion subject to legal requirements.

5Your Rights (GDPR)

Under GDPR and UK data protection laws, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal requirements)
• Right to Restriction: Limit how we process your data
• Right to Portability: Receive your data in a machine-readable format
• Right to Object: Opt out of marketing communications and analytics
• Right to Withdraw Consent: Revoke consent for data processing

To exercise these rights, contact us at privacy@constrat.com or through your account settings.

6Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data encrypted at rest and in transit (TLS/SSL)
• Access Controls: Role-based access and multi-factor authentication
• Regular Audits: Security assessments and penetration testing
• Secure Infrastructure: Cloud hosting with enterprise-grade security
• Data Backups: Regular encrypted backups with disaster recovery
• Employee Training: Staff trained on data protection and security

7Cookies & Tracking

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for platform functionality
• Analytics Cookies: Track usage patterns and performance
• Marketing Cookies: Deliver personalized advertisements
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences in your browser settings or through our cookie consent banner.

8International Data Transfers

Your data may be transferred to and processed in countries outside the UK/EU. We ensure adequate protection through standard contractual clauses and compliance with international data transfer regulations.

9Children's Privacy

CONSTRAT is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10Changes to Privacy Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

11Contact Us

For privacy-related questions or to exercise your rights: