Privacy policy

Who we are

Tayobi ("we", "us", "our") operates the website tayobi.co.uk and the Tayobi Provider mobile application. We are a UK-based platform that connects customers needing roadside assistance with independent service providers.

What data we collect

Customers (web users)

• Name — to identify you to your provider
• Email address — to send your job tracking link
• Phone number (optional) — so your provider can contact you directly
• Location — GPS coordinates to match you with nearby providers
• Vehicle details — make, model, registration, colour to help providers identify your vehicle
• Job description — details of the issue you need help with

Providers (app users)

• Full name and phone number — for your provider profile
• Email address — for account authentication
• Business name (optional) — displayed to customers
• Location data — base location for job matching; live location while en route to customers
• Identity documents — driving licence or passport for verification
• Insurance certificates — to verify you are insured
• Device push token — for job notifications

Why we collect it

We collect personal data to provide the service: matching customers with providers, enabling communication between them, and facilitating job completion. Our lawful basis for processing is legitimate interest (providing the service you requested) and, for providers, contract (your agreement to our provider terms).

Who we share it with

Customer details (name, approximate location, vehicle details) are shared with providers who are quoting on or assigned to your job. Provider details (first name, business name, rating, and phone number after acceptance) are shared with the customer they are helping. We do not sell your data to third parties.

Location data

Location data is treated as personal data under UK GDPR. Customer locations are stored as part of the job record. Provider tracking locations (recorded while en route) are deleted 7 days after job completion. We never sell or share location data with third parties.

How long we keep it

• Job records — 2 years (for dispute resolution and service improvement)
• Provider tracking locations — 7 days after job completion
• Provider accounts — until you request deletion
• Deleted data — soft-deleted data is permanently purged after 60 days

Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (right to erasure)
• Object to processing
• Complain to the Information Commissioner's Office (ICO)

To exercise these rights, contact us at privacy@tayobi.co.uk.

Data storage

Your data is stored securely using Supabase (EU-hosted PostgreSQL database) and Cloudflare (global edge network). Files (documents, photos) are stored in Cloudflare R2 (EU region). All data is encrypted in transit (TLS) and at rest.

Analytics

We use PostHog for anonymised product analytics to understand how our service is used and improve it. No personally identifiable information is sent to PostHog.

Changes to this policy

We may update this policy from time to time. Significant changes will be communicated to registered providers via email.