Privacy Policy

Who is responsible for your information?

Fixza is a trading name, not a limited company. It is operated by Joseph Shenouda, trading as Fixza, who is the data controller responsible for deciding how and why personal information is used.

Privacy contact: hummingbird3105@gmail.com
Postal address: [LEGAL OPERATOR POSTAL ADDRESS]

Information we collect

Depending on how you use Fixza, we may collect:

• Enquiry information: your description of the problem or work, service category, urgency, relevant answers and other job details.
• Location information: the area or postcode you provide so we can identify businesses covering that location.
• Contact details: your name, email address and optional telephone number.
• Conversation information: messages exchanged with the Fixza intake assistant and corrections you make to the summary.
• Technical and security information: information needed to deliver and protect the service, such as request, device, browser, network and security-verification information. Fixza uses a server-side rate limiter and Cloudflare Turnstile to reduce abuse.
• Business information: business names, websites, publicly listed contact details, services, coverage areas and company information from public sources, including business websites and Companies House where relevant.

Please do not include information about other people, or sensitive information that is not needed for the enquiry.

How and why we use information

We use information to:

• understand, classify and summarise your request;
• find businesses whose recorded services and coverage match the request;
• send relevant job information to selected businesses and manage their response;
• provide contact details after a business accepts;
• send service messages, such as confirming that a business accepted;
• operate, troubleshoot and secure Fixza, including preventing spam, fraud and misuse;
• maintain and review business listings and evidence; and
• meet legal obligations and establish, exercise or defend legal claims.

Our lawful bases

UK data protection law requires a lawful basis for each use of personal information. Depending on the purpose, Fixza expects to rely on:

• Contract and steps at your request before a contract: to process the connection service you ask us to provide.
• Legitimate interests: to operate and improve a useful local-services connection service; match requests to relevant businesses; maintain business information; communicate about the requested service; and prevent fraud, abuse and security incidents. We must balance these interests against the rights and interests of the people concerned.
• Legal obligation: where information must be used or retained to comply with law.

We do not treat your acknowledgement of this policy as consent for marketing. If we introduce a use that legally requires consent, we will ask separately.

AI-assisted enquiry understanding

Fixza uses OpenAI to help interpret, classify and summarise the job information supplied through the intake conversation. Fixza does not train its own AI model for this purpose. AI output is checked against structured rules and you are shown a summary that you can correct before submitting.

The name, email and phone entered in the dedicated contact fields are not included in the OpenAI intake-classification request. The free-text conversation is sent for AI processing, so please do not type contact details or unnecessary personal information into those messages.

AI does not choose which business receives the opportunity. Business matching uses recorded service and location information through deterministic rules.

When information is shared

To seek a suitable provider, Fixza may share the service type, area, problem summary and urgency with one or more selected businesses. This initial lead information does not include the customer’s direct name, email or phone.

Direct customer contact details are revealed to a matched business only after that business accepts the lead. The accepting business can then use those details to contact the customer and handle the enquiry. That business is independent from Fixza and may act as a separate data controller for its own use of the information. Its own privacy information should explain that use.

We may also disclose information where reasonably necessary to comply with law, protect people or the service, investigate misuse, or establish and defend legal rights. Fixza does not sell personal information.

Service providers and storage

Fixza uses suppliers that process information to provide the service, including:

• Supabase for database services;
• Vercel for application hosting;
• OpenAI for AI-assisted intake understanding;
• Resend for transactional and service email; and
• Cloudflare Turnstile for abuse and bot protection;
• Google Fonts for the typefaces loaded by the website; and
• Brave Search and Companies House as sources when researching publicly available business websites and identity information.

These suppliers may process information in countries outside the UK, depending on the service and configuration used. The relevant supplier processing locations and applicable international transfer safeguards are still being confirmed. Where UK rules on restricted transfers apply, the operator must ensure an appropriate lawful transfer mechanism is in place. Contact us for available information about relevant safeguards.

How long information is kept

Fixza does not currently apply one fixed deletion period to every record. Information should be kept only for as long as reasonably needed for the enquiry and connection service, security and fraud prevention, resolving disputes, maintaining necessary business records, and meeting legal obligations. The appropriate period depends on the type of information, why it is held, its sensitivity, associated risks and any legal requirements.

The operator must periodically review these criteria and delete or anonymise information that is no longer needed. A request to delete information may be subject to lawful reasons for retaining it.

Your data protection rights

Depending on the circumstances and lawful basis, you may have rights to:

• ask for access to your personal information;
• ask for inaccurate or incomplete information to be corrected;
• ask for information to be deleted;
• ask us to restrict how information is used;
• receive certain information in a portable format; and
• withdraw consent where a particular use relies on consent.

To exercise a right, contact hummingbird3105@gmail.com. We may need enough information to identify you and protect information from unauthorised disclosure. Some rights are subject to legal limitations.

Complaints

Please contact us first if you have a privacy concern so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint for current contact options.

Changes to this policy

We may update this policy as Fixza or the law changes. The latest version will appear on this page with its updated date. If a change materially affects how existing personal information is used, we will take reasonable steps to bring it to the attention of affected people where required.