Privacy Notice

1. Who we are

This Privacy Notice is issued by Garrick International Solutions ("we", "us", "our"), trading as Service Market Hub. We act as the data controller for the personal data we collect through our website and service.

For questions about this notice or your personal data, contact us via the Contact page.

2. Personal data we collect

• Account data: name, email address, password (hashed), business name.
• Profile and content data: services, availability, clients, bookings, invoices, and any content you upload.
• Support data: messages and metadata when you contact us.
• Usage and device data: IP address, device identifiers, browser type, pages visited, and telemetry.
• Cookies: essential session cookies and limited analytics cookies (see Cookies below).

Payment card details are collected and processed directly by our payment provider, Paddle, and are not stored on our systems.

3. Purposes and legal bases

• Creating and managing your account — performance of contract.
• Providing and operating the service — performance of contract.
• Customer support — performance of contract and legitimate interests.
• Security, fraud prevention, and abuse detection — legitimate interests and legal obligation.
• Product improvement and analytics — legitimate interests.
• Service-related communications — performance of contract.
• Marketing communications, where applicable — consent (you can withdraw at any time).
• Compliance with tax, accounting, and other legal obligations — legal obligation.

4. How we share your data

We share personal data with the following categories of recipients:

• Paddle, our Merchant of Record, which handles checkout, subscription management, payments, refunds, tax compliance, and invoicing.
• Service providers and subprocessors for hosting, database, email delivery, analytics, and customer support tooling.
• Professional advisers such as legal and accounting advisers where reasonably necessary.
• Authorities where required by applicable law, regulation, or legal process.
• Successors in connection with a merger, acquisition, or sale of assets.

5. International transfers

Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or applicable adequacy decisions.

6. Data retention

We retain personal data only as long as necessary for the purposes described above, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. When data is no longer required, it is deleted or anonymised.

7. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

We aim to respond to verified requests within one month.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and regular review of our infrastructure — to protect personal data against loss, misuse, and unauthorised access.

9. Cookies

We use essential cookies necessary to operate the service (for example to keep you signed in) and limited analytics cookies to understand how the service is used. You can manage cookies via your browser settings; disabling essential cookies may prevent parts of the service from working.

10. Changes to this notice

We may update this notice from time to time. Material changes will be communicated through the service or by email where appropriate.