Privacy Policy

GrafterNow Limited ("We", "Grafter", "Us") is committed to protecting and respecting your privacy.

This policy sets out how we collect, use, store and share your personal data when you use the GrafterNow Platform (www.grafternow.com and our mobile application). Please read it carefully.

By registering on or using the GrafterNow Platform, you acknowledge that you have read and understood this policy.

Data controller: GrafterNow Limited, Company No. 10497778, 61 Bridge Street, Kington, England, HR5 3DJ. Contact: support@grafternow.com

Applicable law: This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Last updated: June 2026

Information you give us directly, including when you register, create a profile, post a job, apply for work, or contact us. This may include:

Information we collect automatically when you visit the platform, including:

We use your personal data only where we have a lawful basis to do so. The table below sets out what we do, why, and the legal basis we rely on.

We will never use your personal data for purposes incompatible with those listed above without first informing you and, where required, obtaining your consent.

We do not sell your personal data. We share it only in the following circumstances.

With visitors to the platform. Grafter profile information, including first name, last initial, location, travel radius, bio, skills, star ratings, and certifications held, is visible to all visitors to the GrafterNow Platform, including those who are not registered, but only where the grafter has opted in to appearing in Browse via their account settings. Grafters who have not opted in will not appear in Browse and their profile will not be visible to visitors.

Profile photos are only visible to registered users. Full contact details are never displayed publicly and are only accessible to clients who use credits to reveal them.

Publicly visible profile information may be indexed by search engines such as Google. Grafters should bear this in mind when enabling Browse in their account settings.

With registered clients. When a registered client uses credits to reveal a grafter's contact details, those details are shared with that client. This sharing is necessary to perform the service both parties have signed up for.

With service providers. We share data with third-party suppliers who help us operate the platform, including payment processors, cloud hosting providers, analytics tools, and email delivery services. These providers act as data processors on our behalf and are contractually required to handle your data securely and only for the purposes we specify.

In connection with a business transfer. If GrafterNow is sold, merged, or its assets transferred, your personal data may be shared with the prospective buyer as part of that transaction. We will notify you in advance where practicable. The legal basis for this is our legitimate interests in completing the transaction.

Where required by law. We may disclose your personal data to law enforcement, regulators, or courts where we are legally obliged to do so.

We will not share your personal data with third parties for their own marketing purposes.

We use cookies to distinguish you from other users, remember your preferences, and improve your experience on the platform. Some cookies are strictly necessary for the platform to function; others are used for analytics and performance monitoring.

You can control cookie settings through your browser. Disabling certain cookies may affect how the platform works. By continuing to use the platform after being informed of our cookie use, you consent to our use of non-essential cookies.

Your personal data is stored on servers located within the United Kingdom or the European Economic Area (EEA). Where data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR, such as the use of standard contractual clauses approved by the UK Information Commissioner's Office (ICO).

While we take all reasonable steps to protect your data, no internet transmission is completely secure. Any transmission is made at your own risk. Once received, we use strict security measures to prevent unauthorised access.

We keep your personal data only for as long as necessary for the purposes described in this policy. We may periodically review accounts and remove personal data that is no longer required.

Some data may be retained for longer where required by law — for example, financial records which must be kept for 6 years under HMRC requirements.

Under UK GDPR you have the following rights in relation to your personal data: the right of access; the right to rectification; the right to erasure; the right to restrict processing; the right to data portability; the right to object to processing based on legitimate interests; and the right to withdraw consent where we rely on consent as our lawful basis.

To exercise any of these rights, or to withdraw consent to marketing at any time, contact us at support@grafternow.com. We will respond within one month.

You also have the right to complain to the Information Commissioner's Office at www.ico.org.uk.

The platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before submitting any personal data.

We will post any changes to this policy on this page and notify you by email where the changes are material. The date at the top of this policy reflects the most recent update.

For any questions about this policy or how we handle your data:

Email: support@grafternow.com Post: GrafterNow Limited, 61 Bridge Street, Kington, England, HR5 3DJ

GrafterNow Limited · Company No. 10497778 · VAT No. 260 9588 73