PestMatch
How it worksGuidesFor Pest ControllersGet a Quote
LEGAL

Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains how [Company Name] ("PestMatch", "we", "us", "our") collects and uses your personal data when you use the PestMatch website and services (the "Service"). We are the data controller for the personal data described in this Policy. You can contact us at [contact email] or at [Registered Address]. We are registered with the UK Information Commissioner's Office under registration number [ICO registration number].

1. Who we are and what PestMatch does

PestMatch is an online marketplace that introduces homeowners and occupiers ("Homeowners") to independent pest control professionals ("Pest Controllers"). We are not a pest control provider and do not carry out pest control services ourselves.

2. Personal data we collect

  • Account data: name, email, phone number, password, role (homeowner or controller).
  • Job and quote data: postcode, property details, pest type, photos and descriptions you submit, quotes exchanged and booking status.
  • Pest Controller profile data: business name, service area, qualifications, insurance documents, ID verification data.
  • Photos: images you upload for AI pest identification or to describe a job.
  • Communications: messages you send via our contact form or support channels.
  • Technical data: IP address, device and browser information, cookies (see our Cookie Policy).

3. How we use your data and our lawful bases

  • To provide the Service (contract): creating accounts, matching Homeowners and Pest Controllers, handling quotes and bookings.
  • To identify pests with AI (contract / consent): processing photos you upload through our AI identification feature.
  • To verify Pest Controllers (legitimate interests, legal obligation): checking qualifications, insurance and ID.
  • To communicate with you (contract, legitimate interests): service updates, replies to enquiries.
  • To keep the Service safe (legitimate interests, legal obligation): fraud prevention, security, moderation.
  • To improve the Service (legitimate interests): analytics and product research on aggregated, non-identifying data.

4. Photos and AI identification

When you use our AI identification feature, your photo is sent securely to our AI provider (OpenAI) to generate an identification result. We only send the image and minimal necessary metadata. Photos are retained to help you track and share with a Pest Controller. Do not upload images containing identifiable people or sensitive personal information — please blur or crop them first.

5. Who we share your data with

  • Pest Controllers you request quotes from — we share the details needed to quote and complete the job.
  • Supabase — our hosting and database provider, which stores account, job, quote and file data on our behalf in the UK/EU.
  • OpenAI — our AI provider, used to process pest identification requests.
  • Professional advisers, law enforcement or regulators where legally required.

We do not sell your personal data.

6. International transfers

Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum.

7. Retention

We keep account and job data for as long as your account is active and for a reasonable period afterwards to handle disputes, tax and legal obligations. Contact messages are kept for up to 24 months. You can ask us to delete your account at any time.

8. Your rights

Under UK GDPR you have the right to:

  • access the personal data we hold about you;
  • ask us to correct or delete it;
  • restrict or object to processing;
  • request portability of data you provided;
  • withdraw consent where processing is based on consent;
  • complain to the UK Information Commissioner's Office (ico.org.uk).

To exercise your rights, email us at [contact email].

9. Security

We use appropriate technical and organisational measures to protect your data, including encrypted transport, access controls and row-level database security.

10. Changes to this Policy

We may update this Policy from time to time. We will post the new version on this page with an updated "Last updated" date.

11. Contact

[Company Name], [Registered Address]. Email: [contact email].