Privacy Notice

Version: 3 September 2026

Sandis Niedritis trading as Nimtask is the controller for personal information processed to operate Nimtask. Address: 4 St davids House, Nottingham Avenue. Maidstone ME15 7PR. Contact: support@nimtask.co.uk.

Information we use

We may process account and verified sign-in details; whether hiring and provider capabilities are enabled; an optional worker/provider profile; private phone and contact information; notification choices; postcodes and approximate coordinates; whether a job is local or remote; job descriptions and private media; a customer’s maximum all-in budget and the approximate guidance range derived from it; messages and timestamps; quotes and total-price confirmations; a provider’s declared business/paid-side-hustle or private-provider status; legal identity, contact, registration and VAT information where applicable; provider-classification review indicators; the provider snapshot attached to a quote and payment; payment-provider identifiers; Terms versions and acceptance timestamps; platform-start, trader early-start and private-provider warning choices; transaction-specific customer/provider roles; reviews and review reports; safety and illegal-content reports; disputes, refunds and payout history; marketplace risk flags; administrator decisions and audit trails; security logs; and support communications.

Purposes and legal bases

We process information where necessary to provide the marketplace and perform our contract with you, including authentication, local-or-remote UK-wide matching, approximate quote guidance, messaging, checkout, payment evidence, notifications and support. We also process information to comply with legal obligations, including consumer, payment, tax, safety and data-protection duties.

Where appropriate, we rely on legitimate interests in securing and improving the service, preventing fraud and fee circumvention, preserving transaction evidence, moderating genuine transaction-linked reviews, investigating safety reports and resolving disputes. We balance those interests against user rights. We rely on consent where the law requires it, such as for optional marketing or non-essential cookies if introduced, and you may withdraw that consent without affecting earlier lawful processing.

Marketplace identity and transaction evidence

One account may be used to hire help and to offer services, but those capabilities and identities remain separated by transaction. A provider declaration applies when that user offers services and is not used to decide whether the same person is a consumer when hiring for another job. Provider-profile contact and legal identity information is not exposed merely because the account posts a job.

Before a customer accepts and pays a quote, the customer receives the provider’s declared status and the identity information appropriate to that route. A trader’s business contact details are shown before payment. For a private provider, the legal name and broad postcode area are shown with the quote; the full address, email and phone are disclosed to the selected customer only after successful payment. Nimtask stores a full snapshot with the quote and payment so later capability or profile changes do not rewrite the transaction evidence. Relevant job details are made available to eligible providers and the accepted provider as needed to quote and perform the job.

Maximum budget and quote guidance

When a customer provides a maximum all-in budget, Nimtask keeps the exact amount from workers and may derive an approximate guidance range from it. Where guidance is made available, a worker receives only that range and not the customer’s exact maximum. The range is non-binding and is used to help a worker judge a possible quote; it does not guarantee acceptance, determine the value of the job or require a worker to quote within it.

Who receives information

Relevant customers and workers receive information necessary for the marketplace relationship and underlying job. Supabase processes database, authentication and private-storage data; Vercel hosts and delivers the application; Stripe processes payment and connected-account information; and a transactional email provider such as Resend may process recipient and delivery data when email is configured. These providers process information under their own applicable terms and data-protection arrangements. Information may also be disclosed to professional advisers, payment or fraud investigators, regulators, courts, law enforcement or other competent authorities where lawful and appropriate.

International processing

Some service providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we use or rely on an adequacy regulation, approved contractual protections or another lawful transfer mechanism.

Email notifications

Essential quote, payment, cancellation, completion, safety and dispute messages are service communications connected with use of Nimtask. Users with an enabled worker/provider profile can switch new matching-job alerts on or off. Marketing email is separate and requires an optional preference; switching marketing off does not stop essential marketplace communications.

Location, media and automated risk signals

Postcodes may be converted to approximate coordinates to calculate provider distance. Nimtask currently supports customers and providers with UK postcodes. Jobs marked remote may be matched to remote-capable providers regardless of distance within the supported marketplace, while local jobs use postcode and travel settings. Job photos and videos are stored privately and made available only to authorised job participants through time-limited links. Automated rules may surface unusual refund, dispute or marketplace patterns across either account capability. They may also pause new private-provider quotes when quote frequency or paid-job history appears more regular than occasional activity. Provider-classification signals ordinarily affect provider activity only; a wider account restriction may apply where a safety, fraud, payment or legal concern justifies it. These signals trigger classification or risk review; they are not by themselves a legal finding that someone is a trader, a final finding of fraud or a permanent ban.

Safety reports and moderation

A safety report can be submitted without signing in. Contact details are normally optional unless follow-up is needed. The expedited intimate-image reporting route requires contact details and declarations needed to identify and handle that report. We preserve the report, related content references, moderator notes and audit evidence to assess the concern, take proportionate action, protect users and meet legal obligations. Reporting content or a review does not automatically remove it.

Retention and account deletion

We keep information only for as long as reasonably necessary, taking account of active jobs, payment and tax records, limitation periods, disputes, fraud and safety risks, legal duties, account security and backup cycles. Provider snapshots, payment evidence, accepted Terms, start choices, dispute records and administrator audit trails may need to remain restricted and preserved after account deletion. Where full identifiers are no longer needed, records may be deleted, anonymised or access-limited.

Registered users can request account deletion from the dashboard after activity in both capacities is finished, including jobs posted, pending or accepted quotes, work being provided, customer payments, provider payouts and open disputes. An active marketplace-risk review may pause self-service deletion while necessary evidence is preserved, but you can still contact us about your data-protection rights.

Your rights and complaints

Depending on the circumstances, UK data-protection law may give you rights of access, correction, deletion, restriction, objection and portability, and rights relating to solely automated decisions. Contact support@nimtask.co.uk to exercise a right. We may need to verify identity and a right can be limited where the law permits or requires. You may also complain to the UK Information Commissioner's Office.

Security and changes

We use access controls, private media storage, server-side secrets, MFA-protected administration and restricted payment operations. No internet service can guarantee absolute security. For remote computer or software jobs, users should not place passwords, authentication codes, financial credentials or cryptocurrency recovery phrases in Nimtask listings or messages. We may update this notice as Nimtask develops; the current version will be published here.