DayFriend - Privacy Policy

1. Who We Are

DayFriend is the data controller for personal data collected through dayfriend.co.uk. Contact hello@dayfriend.co.uk for any questions about your personal data.

2. Data We Collect

From clients: full name, email, phone, address, booking history, payment records and care recipient details.

From Pros/Companions: full name, email, phone, address, date of birth, ID verification records, DBS certificate details, qualifications, references, booking history, mandatory insurance declaration timestamp and bank account details provided for payouts stored in encrypted form.

3. What We Never Store

Client payment card details are processed by Stripe only — DayFriend never stores card data. Pro/Companion bank account details provided for payouts are stored in encrypted form by DayFriend and displayed in masked format only. Passport or driving licence scan images are handled by Stripe Identity only. DayFriend does not collect or store DBS certificate images or PDFs.

4. How We Use Data

We use data to operate the platform and process bookings, verify Pro/Companion identity and DBS status, send booking confirmations and notifications, prevent fraud and maintain platform security, and meet legal and regulatory obligations.

5. Legal Basis

Contract: fulfilling bookings and platform service.

Legitimate interests: fraud prevention and security.

Legal obligation: financial records and DBS compliance.

6. Data Sharing

We share data with trusted third-party service providers including payment processors, identity verification providers, background check providers, communication services and mapping services. All third-party providers are contractually required to handle your data securely and in accordance with UK GDPR. DayFriend does not sell personal data. Data is shared with law enforcement only where legally required.

7. Retention

We only keep your personal data for as long as strictly necessary to deliver our services, comply with legal obligations (including tax, employment, and DBS retention rules), resolve disputes, and enforce our agreements.

Financial and booking records: 7 years from transaction date for HMRC compliance.

In-app messages between clients and Pros: automatically purged 30 days after booking completion.

Account data: 6 years after account closure.

DBS certificate reference numbers: retained for the duration of the active Pro profile, purged within 30 days of closure.

Right to erasure: personal data will be deleted within 30 days of a verified written request, except where retention is required by law.

8. Your Rights

You have the right to access, correct, erase, restrict or port your personal data.

Contact hello@dayfriend.co.uk to exercise any right. Complaints can be made to the ICO at ico.org.uk.

9. Cookies

Essential cookies are used for platform function. Analytics cookies are used with consent only.

10. Changes

Users will be notified by email of material changes. The current version is always available at dayfriend.co.uk/privacy-policy.