Privacy Policy

Effective date: 1 April 2026

SelectAndPay Ltd ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information about you when you use the SelectAndPay platform. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

1.Data We Collect

We collect the following categories of personal data:

Account & Identity Data

Name, email address, and authentication details provided when you sign in via Manus OAuth.

Booking & Transaction Data

Delivery address, postcode, contact phone number, booking reference, service details, delivery date, and payment confirmation data (we do not store full card numbers).

Supplier Business Data

Company name, business address, service area, pricing information, waste carrier licence details, and Stripe Connect account identifiers.

Usage & Technical Data

IP address, browser type, pages visited, and interaction data collected automatically when you use the platform.

Reviews & Feedback

Star ratings and written reviews submitted after a completed booking.

2.How We Use Your Data

We use your personal data for the following purposes:

PurposeLegal Basis
Processing and fulfilling bookingsContract performance
Processing payments via StripeContract performance
Sending booking confirmations and updatesContract performance
Facilitating Stripe Connect supplier payoutsContract performance
Verifying supplier licences and complianceLegal obligation
Preventing fraud and abuseLegitimate interests
Improving platform features and performanceLegitimate interests
Responding to support enquiriesLegitimate interests
Sending marketing communications (with consent)Consent

3.Data Sharing

We share your personal data only where necessary:

  • Suppliers: We share your name, delivery address, contact number, and booking details with the Supplier fulfilling your order.
  • Stripe: Payment data is processed by Stripe Inc. under their Privacy Policy. We share only what is necessary to process your payment.
  • Manus OAuth: Authentication is handled by Manus. We receive only your name and email address from this service.
  • Legal authorities: We may disclose data where required by law, court order, or to protect the rights and safety of others.

We do not sell your personal data to third parties.

4.Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy:

  • Booking records: 7 years (for tax and legal compliance)
  • Account data: Until you request deletion or your account is inactive for 3 years
  • Payment records: 7 years (financial regulation requirements)
  • Reviews: Until deleted by us or at your request
  • Usage/technical data: 12 months

5.Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access

Request a copy of the data we hold about you

Right to rectification

Correct inaccurate or incomplete data

Right to erasure

Request deletion of your data (subject to legal obligations)

Right to restriction

Restrict how we process your data in certain circumstances

Right to portability

Receive your data in a structured, machine-readable format

Right to object

Object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

6.Cookies

SelectAndPay uses essential cookies to maintain your login session and ensure the platform functions correctly. We do not use advertising or tracking cookies.

Essential cookies cannot be disabled as they are necessary for the platform to work. You can clear cookies at any time through your browser settings, but this will log you out of your account.

7.Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), secure session management, and restricted access controls.

Payment card data is never stored on our servers. All payment processing is handled by Stripe, which is PCI DSS compliant.

8.International Transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area. Where data is transferred outside these regions (for example, to Stripe's US servers), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO.

9.Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a prominent notice on the platform. The "effective date" at the top of this page will always reflect the most recent update.

10.Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact our Data Protection contact at:

SelectAndPay Ltd

Email: [email protected]

SelectAndPay Ltd · Registered in England and Wales · Last updated: 1 April 2026