Privacy Policy

How Niftie collects, uses, and protects your data

Last updated: 7 April 2026

These policies apply to all users of the Niftie platform, website, mobile applications, and pre-launch programme. If you have applied for the Niftie pre-launch programme, please pay particular attention to the pre-launch data sharing provisions set out in the Terms & Conditions and Privacy Policy. For questions, contact us at: [email protected] | Union Park, Bircholt Rd, Maidstone ME15 9XT, United Kingdom

1. Who We Are

Niftie Ltd ("we", "us", "our") operates the Niftie platform. We are the data controller for personal data processed through the Service.

Registered address: Union Park, Bircholt Rd, Maidstone ME15 9XT, United Kingdom Email: [email protected]

We are committed to protecting your personal data and processing it in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Data We Collect

2.1 Account & Business Data

• Full name, company name, email address, and phone number provided during registration or pre-launch sign-up.

• Business details such as service type, team size, and operational preferences.

2.2 Operational Data

• Booking records, job schedules, staff assignments, and customer appointment data you enter into the platform.

• Staff and employee information you add to manage your team, including names, contact details, working hours, and availability.

• Property and customer information entered for service management purposes.

2.3 Pre-Launch Testing Data

If you have applied for or are participating in the Niftie pre-launch programme, we collect and process additional data as described below. By applying for the pre-launch, you have explicitly consented to this processing:

• Usage logs, click paths, feature interactions, session duration, and navigation data to understand how the platform is being used (shared by you).

• Error logs, crash reports, and diagnostic data generated by the platform, which may include data from your account at the time of the error.

• App performance data including load times, API response times, and device/browser information.

• Bug reports and feedback you submit, including any screenshots or descriptions you provide.

• Account data accessed by our development and testing teams when investigating reported or detected issues, as consented to in the Terms & Conditions.

2.4 Technical & Device Data

• IP address, browser type and version, operating system, device identifiers, and time zone.

• Cookies and similar tracking technologies as described in the Cookie Policy section of this document.

2.5 Communications

• Emails, messages, and other communications you send to us.

• Marketing email preferences and opt-in/opt-out records.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: To perform our contract with you and provide the Service.

• Consent: For pre-launch data sharing and testing (see Section 2.3), and for marketing communications. You may withdraw consent at any time.

• Legitimate interests: For platform security, fraud prevention, improving the Service, and bug fixing (where not overridden by your rights).

• Legal obligation: Where required to comply with applicable law.

4. How We Use Your Data

• To operate and deliver the Niftie Service.

• To manage your account and subscription.

• During the pre-launch period: to identify, investigate, and resolve bugs and issues, and to improve the platform.

• To send transactional communications about your account, bookings, and the Service.

• To send marketing emails about Niftie updates and features, where you have subscribed and not opted out.

• To comply with our legal and regulatory obligations.

• To respond to your enquiries and support requests.

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers and subprocessors who assist us in operating the platform (e.g., hosting providers, analytics tools, email delivery services), under appropriate data processing agreements.

• Xero, if you choose to enable the Xero integration, for the purpose of invoicing and financial administration.

• Authorised development and testing personnel during the pre-launch phase, as described above.

• Law enforcement or regulatory authorities where required by law.

6. Data Retention

We retain your personal data for as long as needed to provide the Service, even if your subscription expires, in case you decide to resume using our services. Pre-launch testing data (logs, diagnostics, error reports) will be retained for the duration of the pre-launch period and for a reasonable period thereafter for quality assurance purposes.

We will only delete or anonymize your personal data upon your request, within 90 days, subject to any legal retention obligations.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data.

• Rectify inaccurate data.

• Erasure ("right to be forgotten") in certain circumstances.

• Restrict or object to processing.

• Data portability.

• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no internet transmission or storage system is 100% secure.

9. International Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as using Standard Contractual Clauses or relying on adequacy decisions.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The current version will always be available on our website.

11. Contact

For privacy-related queries or to exercise your rights: [email protected]