Privacy Policy

Last updated: 21 February 2026

ScaffLink ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

ScaffLink is a trading name of Exall Group Ltd, registered in England and Wales. We are the data controller for the personal data we process through the ScaffLink platform.

1. Data We Collect

Information you provide

  • Account information: Name, email address, phone number, postcode
  • Booking information: Property address, scaffolding requirements, preferred dates
  • Payment information: Processed securely by Stripe — we do not store your card details
  • Communications: Messages sent through the platform, support enquiries
  • Photos: Images uploaded for custom quote requests or dispute evidence

Information for Scaffolders

  • Company name, registered address, contact details
  • Insurance certificates and expiry dates
  • CISRS card details, NASC membership status
  • Bank account details (for Stripe Connect payouts)
  • Identity verification documents (processed by Stripe)

Information collected automatically

  • IP address, browser type, device information
  • Pages visited, time spent on site, referral source
  • Cookies and similar tracking technologies (see Section 7)

2. How We Use Your Data

We use your personal data for the following purposes:

  • Providing our service: Matching you with scaffolders, processing bookings and payments, managing your account
  • Communications: Booking confirmations, reminders, payment receipts, review requests
  • Service improvement: Analysing usage patterns to improve the platform
  • Safety and compliance: Verifying scaffolder insurance and accreditations, fraud prevention
  • Marketing: With your consent, sending promotional emails about ScaffLink services (you can opt out at any time)

3. Legal Basis for Processing

We process your data under the following legal bases:

  • Contract: Processing necessary to fulfil our booking and payment services
  • Legitimate interest: Platform security, fraud prevention, service improvement
  • Legal obligation: Tax reporting, regulatory compliance
  • Consent: Marketing communications, non-essential cookies

4. Who We Share Data With

We share your data only with parties necessary to provide our service:

  • Scaffolders: Your name, postcode, job requirements, and contact details are shared with the scaffolder you book (after payment)
  • Stripe: Payment processing and scaffolder identity verification
  • Email/SMS providers: Postmark or Mailgun (email), Twilio or Vonage (SMS) for transactional notifications
  • Hosting providers: DigitalOcean / AWS for server infrastructure
  • Analytics: Anonymised usage data for platform improvement

We do not sell your personal data to third parties. We do not share your data with advertisers.

5. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

  • Account data: Retained while your account is active, deleted within 30 days of account closure
  • Booking records: Retained for 7 years for tax and legal compliance
  • Payment records: Retained for 7 years as required by HMRC
  • Marketing preferences: Retained until you withdraw consent
  • Uploaded photos: Retained for 12 months after job completion, then deleted

6. Your Rights

Under UK GDPR, you have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data (subject to legal retention requirements)
  • Portability: Request your data in a machine-readable format
  • Object: Object to processing based on legitimate interest
  • Withdraw consent: Where processing is based on consent, withdraw at any time

To exercise any of these rights, email us at privacy@scaffoldlink.co.uk. We will respond within 30 days.

7. Cookies

We use cookies to operate the platform and improve your experience:

  • Essential cookies: Required for the site to function (session management, CSRF protection). Cannot be disabled.
  • Analytics cookies: Help us understand how visitors use the site. Set only with your consent.
  • Marketing cookies: Used to measure advertising effectiveness. Set only with your consent.

You can manage cookie preferences through the cookie banner displayed on your first visit or through your browser settings.

8. Data Security

We take the security of your data seriously and implement appropriate technical and organisational measures including encrypted data transmission (HTTPS/TLS), secure server infrastructure, regular security updates and monitoring, access controls limiting staff access to personal data, and secure payment processing via Stripe (PCI DSS compliant).

9. International Transfers

Your data is primarily stored and processed within the UK and European Economic Area. Where data is transferred outside this area (for example, to service providers in the US), we ensure appropriate safeguards are in place including Standard Contractual Clauses or adequacy decisions.

10. Children's Privacy

ScaffLink is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of significant changes via email. The "last updated" date at the top of this page indicates when the policy was last revised.

12. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

13. Contact

For any privacy-related questions or to exercise your rights, contact us at:

Email: privacy@scafflink.co.uk
ScaffLink (Exall Group Limited)
England, United Kingdom