Privacy Policy

People looking for a provider

• Account details: your name, email address and a hashed password (we never store your password in plain text). Signing in is required to search the directory.
• Terms acceptance: when you create an account, we record the date and version of the Terms and Conditions you accept.
• HALO does not send or store messages between users. If you contact a provider, you do so directly using the details on their profile, outside HALO.
• Providers you save and providers you have recently viewed, so you can find them again from your dashboard.
• Basic usage information linked to your account (if signed in) and a random session ID: pages viewed, the page that referred you, the type of device (mobile, tablet or desktop, worked out from your browser — we do not store your IP address), searches you make in the directory (search text, filters chosen and the number of results), provider profiles you view, and when a listing is submitted.

Provider users

• Listing details: name, town/area, the care categories you list in (Child Care, Animal Care, House Care, Self Care, Elder Care, Transport Care, Student Care and/or Event Care — you can choose more than one), the services you offer within each chosen category (you can choose more than one), your own short description if you choose “Other”, and the types you specify for services marked “specify type”. Services and category-specific answers are kept separately for each category you choose. We also collect experience, highlights and a required profile photo or logo.
• Across all care categories: areas covered (UK regions), how you provide your service (mobile, remote / online and/or in person), languages (including Makaton, “All” and any other languages you specify), and Yes / No / Not applicable answers about insurance and professional qualifications / registration, with optional qualification or registration details if you answer Yes.
• Ages covered for Child Care, Student Care and Event Care, and a separate age list for Self Care. Ages covered is not collected for Elder Care.
• Category-specific questions: Yes / No / Not applicable answers, short text answers and checklists, such as Ofsted registration, SEN / neurodivergent experience and childcare vouchers for Child Care; required animal types for Animal Care; pet friendliness and equipment for House Care; dementia experience for Elder Care; mode of transport and any other mode you specify for Transport Care; subjects covered and SEN / neurodivergent experience for Student Care; and types of event, dietary requirements (including any others you specify) and capacity for Event Care. DBS, First Aid and Driver answers are collected only for Child Care and Elder Care.
• Gender is no longer collected or shown on profiles or used as a search filter. Previously collected gender answers have been deleted.
• Your three personal answers: “What ONE aspect do you LOVE about your job that caused you to work in this field?”, “In addition to the service you provide, what ONE positive aspect of YOURSELF do you feel you provide to your clients?” and “Lastly, what ONE positive aspect do you feel your clients provide you?”
• Contact details for your public profile: contact name and email (both required); phone and website / social handle (optional). We do not collect your address.
• Account credentials: email and a hashed password.
• Billing information handled by our payment processor (Stripe): name, billing details and card details (we do not store card numbers).
• Usage information as described above.

• To operate the directory and show provider listings — legitimate interests (running a directory) and, for providers, performance of a contract.
• Every listing is checked and published by HALO's admin before it appears in the directory, and the admin can hide a listing later. We do this to check that listings meet our Terms and to moderate the site — legitimate interests and, where applicable, legal obligation. This check is not an endorsement of any provider.
• To create and secure accounts and process subscription payments — performance of a contract.
• To record the date and version of Terms acceptance and show that the account holder agreed to the Terms — performance of a contract.
• To understand how the site is used and improve it — legitimate interests.
• To comply with legal, tax and safeguarding obligations — legal obligation.

• Supabase, which stores accounts, sign-in and subscription records.
• Lovable Cloud, which stores listings, profile photos, the providers you save or have recently viewed, and the usage information described in section 2.
• Stripe, which handles card payments and stores billing details securely under its own terms.
• Resend, our email provider, which sends password reset emails and notifications to HALO's admin when a listing is waiting for review. It receives the recipient's email address and the content of that email.
• Professional advisers, regulators, or law enforcement where we are legally required to do so.

• Provider listing content: for as long as your account is active, plus up to 12 months after closure so we can respond to disputes.
• Billing records: 7 years, to meet UK accounting obligations.
• Usage and technical data: up to 24 months.

• Confirm what personal data we hold about you and give you a copy.
• Correct data that is inaccurate or incomplete.
• Delete your data where it is no longer needed and no other lawful basis to keep it applies.
• Restrict or object to certain processing.
• Withdraw consent where we rely on it.
• Receive certain data in a portable format.

To exercise any of these rights, or to delete your account, email hello@halodirectory.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).