Privacy Policy
Last updated: 3 April 2026
SecondFix ("we", "us", "our") is committed to protecting your personal data. This policy explains what data we collect, why, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
SecondFix is a trade business management platform operated in the United Kingdom. For data protection purposes, we are the data controller.
Contact: hello@secondfix.build
2. What data we collect
Marketing site (secondfix.build)
- Email address — when you join the waiting list
- Trade — the trade you select on the signup form
App (app.secondfix.build)
- Account data: email address (used for authentication via magic link)
- Business profile: business name, contact name, address, phone, VAT number, logo
- Job data: job titles, customer names, customer emails, addresses, job stages, notes
- Financial data: quotes, invoices, payment schedules, line items, amounts
- Media: photos and videos uploaded as job updates
- Communications: job update messages, customer portal replies
- Team data: team member names, emails, phone numbers, trades, roles
We do not collect or store payment card numbers. Card payments are processed entirely by Stripe, our payment processor.
3. Why we collect it (legal basis)
| Data | Legal basis | Why |
|---|---|---|
| Waiting list email & trade | Consent | To notify you when early access opens |
| Account email | Contract performance | To provide the service and authenticate you |
| Business profile, job data, financial data | Contract performance | To deliver the core service (job management, quoting, invoicing) |
| Photos and videos | Contract performance | To enable job update features and customer sharing |
| Team member data | Legitimate interests | To enable team management features |
4. How we use your data
- To provide, maintain, and improve the SecondFix service
- To send transactional emails (magic links, quote/invoice notifications, portal messages)
- To send waiting list communications (early access notifications)
- To display your business branding on quotes, invoices, and customer portals
- To generate invoice PDFs
We do not sell your data to third parties. We do not use your data for advertising.
5. Third-party processors
We use the following services to deliver SecondFix. Each processes data on our behalf under appropriate agreements:
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU / US |
| Vercel | App and website hosting | Global (edge network) |
| Resend | Transactional email delivery | US |
| Stripe (future) | Payment processing | US / EU |
6. International transfers
Some of our processors may process data outside the United Kingdom. Where this happens, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent protections recognised by UK data protection law.
7. How long we keep your data
- Waiting list: until you unsubscribe or we launch (whichever is first), then deleted within 30 days
- Account data: for as long as your account is active
- Job data, quotes, invoices: for as long as your account is active, plus 7 years after deletion (to meet UK tax record-keeping requirements)
- Media (photos/videos): for as long as your account is active, deleted within 30 days of account deletion
8. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to legal obligations)
- Portability — receive your data in a structured, machine-readable format
- Restriction — ask us to limit how we use your data
- Objection — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, email hello@secondfix.build. We will respond within 30 days.
9. Complaints
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
10. Changes to this policy
We may update this policy from time to time. If we make significant changes, we will notify you by email or by displaying a notice in the app. The "Last updated" date at the top of this page will always reflect the most recent version.