Privacy Notice

Data controller

NIMTASK LTD, registered in England and Wales, is the controller for personal information processed to operate Nimtask. Contact: support@nimtask.co.uk.

Information we use

We may process the following information:

Purposes and legal bases

We process information where necessary to provide the marketplace and perform our contract with you, including authentication, local or remote matching across England, Scotland and Wales, approximate quote guidance, messaging, checkout, payment evidence, notifications and support. We also process information to comply with legal obligations, including consumer, payment, tax, safety and data-protection duties.

Where appropriate, we rely on legitimate interests in securing and improving the service, preventing fraud and fee circumvention, preserving transaction evidence, moderating genuine transaction-linked reviews, investigating safety reports and resolving disputes. We balance those interests against user rights. We rely on consent where the law requires it, such as for optional marketing or non-essential cookies if introduced, and you may withdraw that consent without affecting earlier lawful processing.

Contact support requests

You can contact us without an account. We send your name, reply email, enquiry type, subject, message and any optional job reference to our private support inbox through our transactional email provider so we can handle your enquiry and reply. Support enquiries are not published. We use short-lived salted, hashed request information to limit spam. Messages are kept only as long as reasonably needed to handle them and any related obligations.

Do not include passwords, payment-card details or tax numbers in your message. Sending a contact request does not open a job dispute or pause a worker payment; use the relevant job controls or safety reporting route when needed.

Suggestions for improvements

You can send a suggestion without an account. We send your category, message and any optional reply email to our private support inbox through our email provider to review ideas, improve Nimtask and reply where appropriate. Suggestions are not published. We use short-lived hashed request information to limit spam; do not include passwords, payment-card details or tax numbers in feedback. Support messages are kept only as long as reasonably needed to handle them and any related obligations.

Marketplace identity and transaction evidence

One account may be used to hire help and to offer services, but those capabilities and identities remain separated by transaction. A provider declaration applies when that user offers services and is not used to decide whether the same person is a consumer when hiring for another job. Provider-profile contact and legal identity information is not exposed merely because the account posts a job.

Before a customer accepts and pays a quote, the customer receives the provider’s declared status and the identity information appropriate to that route. A trader’s business contact details are shown before payment. For a private provider, the legal name and broad postcode area are shown with the quote; the full address, email and phone are disclosed to the selected customer only after successful payment. Nimtask stores a full snapshot with the quote and payment so later capability or profile changes do not rewrite the transaction evidence. Relevant job details are made available to eligible providers and the accepted provider as needed to quote and perform the job.

Price estimates and quote guidance

For new jobs, customers choose a broad price estimate or Open to Quotes. This selection is shown to workers who can view the job. It guides the worker’s price before Nimtask’s separate service fee and is not a fixed budget, price cap or commitment to accept a quote.

Some earlier jobs have a private maximum all-in budget. Those exact amounts remain private and are not converted into public estimates. Nimtask may show a derived approximate guidance range to a worker after their first quote is declined. All estimates and guidance are non-binding: they do not determine the value of the job or require workers to quote within them.

Public job previews

Visitors can browse limited summaries of open jobs without an account. These summaries show the job category, a broad postcode district for in-person work, whether work is remote, a general timing choice and any customer-selected public price estimate. They do not include the customer’s identity, exact postcode, address, job title or description, contact details, messages, photos, videos or historical private budget. Full job details remain subject to the marketplace’s account and worker-access checks.

Public nearby searches use a fixed approximate job location rather than the customer’s exact postcode coordinates. Distances are approximate. Search results do not disclose the coordinates used for matching.

Questions about a quote

A customer can ask questions privately about a pending quote before choosing a worker. Only that customer and quoting worker can read the conversation through their accounts; other quoting workers cannot see it. Nimtask may access records where needed for support, safety, disputes or legal obligations. Conversations remain as job records after a quote is selected or declined, and follow the retention rules below.

Who receives information

Relevant customers and workers receive information necessary for the marketplace relationship and underlying job. Supabase processes database, authentication and private-storage data; Vercel hosts and delivers the application; Stripe processes payment and connected-account information; and a transactional email provider such as Resend may process recipient and delivery data when email is configured. These providers process information under their own applicable terms and data-protection arrangements. Information may also be disclosed to HM Revenue & Customs where digital-platform reporting rules require it, and to professional advisers, payment or fraud investigators, regulators, courts, law enforcement or other competent authorities where lawful and appropriate.

Website visit analytics

When you allow optional measurement in Cookie Settings, we use Vercel Web Analytics to understand which pages people visit and how they find Nimtask, helping us improve the service. Vercel processes page-view and referral information and technical information such as browser, device type and approximate country. The service does not use analytics cookies or identify visits across different websites. Before sending page-view URLs, Nimtask removes query strings and fragments, replaces individual job references with a general page route, and excludes administrator pages. We do not send account details, job descriptions, messages or payment information as analytics events.

Optional measurement stays off until you allow it. You can change your choice at any time below or from the footer. Turning it off stops future optional website and registration measurement in this browser. We also respect browser Do Not Track and Global Privacy Control signals. Necessary sign-in, security, job and payment functions remain available.

Registration measurement

When optional measurement is allowed, we keep first-party daily aggregate counts of Find work page visits, registration-link clicks, signup-page openings and signup attempts, grouped by predefined referral source, campaign, advert or page variant, and worker or customer choice. These are activity counts, not unique visitor counts. This measurement uses no analytics cookie, browser storage, fingerprint or visitor identifier. Our separate request limiter uses short-lived salted, hashed request buckets to help prevent automated abuse.

When optional measurement is allowed and an account is registered, we also save predefined source, campaign and advert or page variant labels with that account. Advertising click identifiers, arbitrary URL values, search terms, postcodes and form contents are not included in these measurement labels or activity counts. Administrators can view aggregate registration groups showing accounts created, email confirmations, saved worker profiles and payout readiness. Confirmation, profile and payout figures reflect the account’s current status when the report is produced.

Changing your browser preference does not remove previously collected records or stop necessary account, job, payment and administrator records. You can contact us about your data-protection rights. The saved browser choice is described in our Cookie Notice.

Security checks on account forms

When enabled, Cloudflare Turnstile protects registration, sign-in and password-reset requests against automated abuse. Cloudflare processes technical signals such as your IP address, browser and connection information, and the website origin to assess whether a request comes from a person or a bot. Supabase validates the resulting security token before processing the request. Cloudflare also uses these signals to improve its bot detection. See the Cloudflare Turnstile Privacy Addendum for more information.

Digital-platform seller reporting

UK digital-platform reporting rules require reporting platforms to collect and check relevant provider details and report services arranged through the platform. We use this information to meet our legal obligations. Individuals and sole traders provide their legal name, home address, date of birth, tax residence and National Insurance number or applicable tax identifier. Companies and partnerships provide their legal business name, primary address, tax residence and applicable registration or tax identifier. We also use VAT information and financial account identifiers where available, and records of amounts paid or credited, fees, refunds and paid activities.

We request missing or outdated details when needed for annual reporting, using a secure account link and reminders where necessary. The private tax-information form is separate from initial registration and public worker profiles. Reliable saved details can be reused rather than entered again each year. Tax numbers and dates of birth are not shown to customers or other workers. Tax details are encrypted with a separate server-held key and access is restricted to the provider and authorised administrators. Administrator reviews and report preparation are audited. We disclose required report information to HM Revenue & Customs and make each provider's reported information available privately to that provider. Reporting an amount does not itself establish that tax is due and does not replace the provider's own tax return or business records.

Provide accurate information and update it when it changes. The online form currently supports a UK primary address and UK-only tax residence. For other circumstances, contact support to arrange an appropriate secure process; do not put tax numbers or identity documents in listings, messages or ordinary email.

We retain required digital-platform reporting and verification records for five years after the end of the relevant reporting period, and longer only where another legal obligation, dispute or lawful evidence hold requires it. Details from providers who never supply services or receive payments are reviewed when the account is closed and are not automatically treated as reportable seller records. Contact support for correction or deletion requests; legal record-keeping requirements may limit deletion.

International processing

Some service providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we use or rely on an adequacy regulation, approved contractual protections or another lawful transfer mechanism.

Postcode data

Postcode locations are provided by Postcodes.io. Contains Ordnance Survey data © Crown copyright and database right 2025; contains Royal Mail data © Royal Mail copyright and database right 2025; contains National Statistics data © Crown copyright and database right 2025; contains NRS data © Crown copyright and database right 2025. See the source-data licences and Open Government Licence v3.0.

Email notifications

Essential quote, quote-question, payment, cancellation, completion, safety, dispute and annual tax-report messages are service communications connected with use of Nimtask. Matching-job email alerts are optional. New accounts receive them only when the user opts in; existing saved preferences are preserved. We record alert choices and when they were made. Users can switch these alerts off in notification settings or through the unsubscribe link in an alert. Marketing email is separate and requires an optional preference; switching optional emails off does not stop essential marketplace communications.

Location, media and automated risk signals

Postcodes may be converted to approximate coordinates to calculate provider distance. New jobs and worker registration currently require a postcode in England, Scotland or Wales. Northern Ireland, the Channel Islands and the Isle of Man are outside our current service area. Jobs marked remote may be matched to remote-capable providers regardless of distance within the supported marketplace, while local jobs use postcode and travel settings. Job photos and videos are stored privately and made available only to authorised job participants through time-limited links. Automated rules may surface unusual refund, dispute or marketplace patterns across either account capability. They may also pause new private-provider quotes when quote frequency or paid-job history appears more regular than occasional activity. Provider-classification signals ordinarily affect provider activity only; a wider account restriction may apply where a safety, fraud, payment or legal concern justifies it. These signals trigger classification or risk review; they are not by themselves a legal finding that someone is a trader, a final finding of fraud or a permanent ban.

Safety reports and moderation

A safety report can be submitted without signing in. Contact details are normally optional unless follow-up is needed. The expedited intimate-image reporting route requires contact details and declarations needed to identify and handle that report. We preserve the report, related content references, moderator notes and audit evidence to assess the concern, take proportionate action, protect users and meet legal obligations. Reporting content or a review does not automatically remove it.

Retention and account deletion

We keep information only for as long as reasonably necessary, taking account of active jobs, payment and tax records, limitation periods, disputes, fraud and safety risks, legal duties, account security and backup cycles. Provider snapshots, payment evidence, accepted Terms, start choices, dispute records and administrator audit trails may need to remain restricted and preserved after account deletion. Where full identifiers are no longer needed, records may be deleted, anonymised or access-limited.

Registered users can request account deletion from the dashboard after activity in both capacities is finished, including jobs posted, pending or accepted quotes, work being provided, customer payments, provider payouts and open disputes. An active marketplace-risk review may pause self-service deletion while necessary evidence is preserved, but you can still contact us about your data-protection rights.

Your rights and complaints

Depending on the circumstances, UK data-protection law may give you rights of access, correction, deletion, restriction, objection and portability, and rights relating to solely automated decisions. Contact support@nimtask.co.uk to exercise a right. We may need to verify identity and a right can be limited where the law permits or requires. You may also complain to the UK Information Commissioner's Office.

Security and changes

We use access controls, private media storage, server-side secrets, MFA-protected administration and restricted payment operations. No internet service can guarantee absolute security. For remote computer or software jobs, users should not place passwords, authentication codes, financial credentials or cryptocurrency recovery phrases in Nimtask listings or messages. We may update this notice as Nimtask develops; the current version will be published here.