Privacy notice
Last updated: 29 October 2026
- We use your information to get you quotes (customers) or to send you quote requests and handle the introduction fee (businesses).
- When you ask for quotes, up to 3 checked local installers can take your request. Each one that does gets your name, phone number, email and address, so they can call you to arrange a survey, and you get their details too. No other business gets your phone number or email. (For requests sent before 29 October 2026, businesses saw your job but not your contact details until you chose one.)
- We don’t sell personal information. We only use analytics and advertising cookies if you agree.
- Businesses can stop all quote requests at any time with one click.
1. Who we are
Gigs On (gigson.com) is a trading name of Gigson Ltd, a company registered in England and Wales (company number 10177105), registered office M.01 Tomorrow, Blue, Mediacityuk, England, M50 2AB. Gigson Ltd is the controller of the personal information described here and is registered with the Information Commissioner’s Office (registration ZC272454).
Questions or requests about your data: email support@gigson.com or use our support form and choose “Privacy or my data”.
2. Customers
What we collect
- Your request: the type of job and your answers on our request form (or what you tell our assistant GO), your postcode and the address where the work is.
- Your roof (solar requests): the map position of your house, an aerial picture and solar data for your roof from Google, and where you mark your house on our map.
- Your home’s energy certificate: the public Energy Performance Certificate (EPC) for your address from the government’s EPC register, if there is one, such as its energy rating, property type, floor area, heating and roof insulation.
- Photos you choose to add of the job.
- Your details: first and last name, email address and mobile number, and a password if you set one. Email sign-in codes expire after 10 minutes.
- Messages between you and suppliers sent through Gigs On, and the quotes you receive.
- Your choices and reports: whether and when you chose to share your address with suppliers, and any report you make about a supplier.
- Technical information needed to run the site, such as a session cookie that keeps you signed in, and basic server logs.
How we use it
- To understand your job, find and check suitable local installers, and pass your request and contact details to the ones who take it (up to 3), so they can contact you to arrange a survey.
- To pass messages between you and suppliers. We use automated checks, including AI, to remove contact details from messages until you’ve chosen a supplier.
- To check your email address and mobile number are real when you send a request, so installers get genuine requests. We ask your email provider whether the inbox exists, and the mobile networks whether the number is in use. We don’t keep anything from these checks except whether they passed.
- To email you about your Gig, for example when a quote arrives, a deadline is coming up, or suppliers would like your address to price the job. We may also text or WhatsApp you about your Gig, such as deadlines. These are service messages, not marketing.
- To keep the service secure and prevent misuse.
What suppliers see
Suppliers we invite see the job details and your answers, any photos you add to the job, your first name and last initial, and your town or postcode area (for example “Bridport, DT6”). For solar jobs they also see an aerial picture of your roof from Google with the estimated panels and roof measurements; it doesn’t show your street address, but someone who knows the area may recognise the house.
If you choose to share your address, suppliers who have said they’ll quote (or sent a quote) can see it, so they can design and price the job accurately. It’s your choice: you can share or stop sharing at any time on your request page, and we keep a record of your choice. If you stop sharing, suppliers who have already seen it will still have it. Suppliers must not visit, phone or write to you without your agreement; if one does, use “Report an installer” on your request page.
Jobs posted from 27 October 2026: the installers who take a place on your job (up to 3) see your address so they can design and price it. When an installer takes a place on your job, we share your name, email and mobile with that installer so they can contact you to arrange a survey, and you receive their details. Other installers never receive your phone number or email. The rest of this section applies to jobs posted before then.
If you choose a quote and that supplier confirms by paying our introduction fee, we share your name, email, mobile and the job address with that supplier, along with any private photos (such as the photo of your house used for a mock-up), and you receive their contact details. Other suppliers never receive your phone number or email.
3. Businesses we contact for quotes
To find suppliers for a customer’s job, we look up businesses using public sources: business listings (such as Google), web search, the business’s own website, Companies House and accreditation registers (such as MCS). We record business information such as trading and registered name, website, the business email address and phone number published on your website, company registration details and accreditations you display, along with the results of our checks. Ratings from business listings are shown to customers when available and are not stored by us.
We use this to decide whether your business suits a customer’s job, to send you quote requests, and to remember checks so we don’t repeat them unnecessarily (for example, a website we couldn’t read is re-checked after a set time). We only contact limited companies and LLPs, at email addresses published on their own website.
Stopping requests: use “Don’t send me requests” on any request page or the link in any Gigs On email. We then keep your email address on a “do not contact” list so we never contact you again.
If a customer chooses your quote
For jobs posted from 27 October 2026, you pay a fee to receive a customer’s contact details (by card through Stripe, invoiced through Xero), and we share your business name and contact details with that customer at the same time.
We process the introduction fee through Stripe. Your card details go directly to Stripe and we never see them; we keep the amount, the date, its status and Stripe’s reference. We share your business name and contact details with that customer once the fee is paid.
4. If you contact us
When you use the support form or email us, we keep your name, email address, your message and any reference you give, so we can reply and keep a record. To stop spam we keep a scrambled (hashed) version of your IP address for a short time.
5. Our lawful bases
| What | Lawful basis |
|---|---|
| Handling your request, passing your request and contact details to the installers who take it (up to 3), service emails and messages | Contract: providing the service you asked for |
| Checking contact details are real, and looking up your home’s EPC and roof | Legitimate interests: genuine requests, and giving installers accurate details so they can quote properly |
| Finding, checking and contacting businesses for quote requests | Legitimate interests: connecting customers with suitable suppliers, balanced against your interests, with a simple opt-out |
| Sharing your address with suppliers who say they’ll quote | Your consent: it’s your choice, and you can stop sharing at any time |
| Checking contact details and messages, and handling reports about suppliers, to prevent misuse | Legitimate interests: keeping requests genuine and customers safe |
| Introduction fee payments | Contract, and legal obligation for our accounting records |
| Security, preventing misuse and handling complaints | Legitimate interests |
| Answering support messages | Legitimate interests (or contract, if it’s about your Gig) |
6. Who we share it with
Besides the customer–supplier sharing above, we use these service providers, who process data on our behalf under contract:
- Amazon Web Services: hosting, database, photo storage and sending email.
- OpenAI: powers our assistant GO, reads business websites to check suitability, checks messages between customers and suppliers to remove contact details before they’re passed on, and helps us draft replies to businesses. It receives what you type to GO, website text and those messages; it isn’t used to train their models through our account.
- Google: business listings and maps search, to find suppliers near a job; for solar requests, aerial imagery, maps and solar data for the address; and, if you ask for kitchen or bathroom style ideas, Google Gemini, which receives the room photo you choose to restyle.
- Ideal Postcodes: finding your address from your postcode, and checking that your email address and mobile number are real (it asks your email provider and the mobile networks; it doesn’t contact you).
- The government’s EPC register (Ministry of Housing, Communities and Local Government): we send your address to look up your home’s public energy certificate.
- Xero: our accounts and introduction fee invoices (business details, not customers’).
- Stripe: card payments for introduction fees.
- Web search, Companies House and postcode lookup services: to find business websites, check companies and turn postcodes into locations. These receive search terms, company names or postcodes, not customers’ contact details.
- Professional advisers, and authorities where the law requires it.
Some providers (such as OpenAI, Google and Microsoft) may process data in the United States. Where that happens, we rely on appropriate safeguards recognised under UK law, such as the UK–US data bridge or the UK International Data Transfer Addendum. We don’t sell personal information.
7. How long we keep it
- Customer accounts and Gigs: while your account is in use, then deleted or anonymised 2 years after your last activity. Gigs started but never sent, without an email address, are removed sooner.
- Photos: deleted 12 months after they’re added; photos added to a request that’s never completed are deleted after 7 days.
- Introduction fee and payment records: 6 years, as required for accounting.
- Business records from our checks: while useful for matching jobs, and reviewed at least once a year. Notes about checks a business didn’t pass are kept for up to 90 days before re-checking.
- “Do not contact” list: kept indefinitely, so we respect your opt-out.
- Support messages: 2 years.
- Address sharing choices and reports about suppliers: kept with your Gig and deleted with it; reports that lead to action against a supplier are kept for 2 years.
8. Cookies
Needed to run the site (always on): a session cookie that keeps you signed in and protects forms, a cookie that remembers your cookie choices for 6 months, and temporary browser storage that remembers which quote request page you’re on. For businesses: a sign-in cookie that keeps you signed in on that device for 90 days, so you don’t need a new code each time. Logging out removes it.
Only if you agree:
- Analytics: Google Analytics, to count visits and see which pages help people, and Microsoft Clarity, which makes anonymised replays and heatmaps of how our public pages are used. What you type and your conversation with GO are hidden, and Clarity never runs on account, message or business pages. We use these to improve Gigs On.
- Advertising: Google Ads, Meta (Facebook and Instagram) and TikTok, to measure which of our adverts work and show them to people likely to need a tradesperson. These companies may combine this with what they already know about you, under their own privacy policies. If you allow advertising cookies and send us a quote request, we also send Meta a scrambled (hashed) copy of your email address, mobile number and name directly from our server, so Meta can tell us whether one of our adverts led to it. Meta receives a scrambled code, not your actual details.
None of these load until you choose to allow them, and you can change your mind at any time using Cookie settings (also at the bottom of every page). We never sell your personal information.
9. Automated checks
We use automated checks, including AI, to understand customers’ requests, to judge whether a business suits a job (for example, whether its website shows it does that work), and to remove contact details from messages between customers and suppliers before they’re passed on. These checks decide which businesses are invited and what a message shows, not anything with legal or similarly significant effects on individuals. A business can ask us to review a decision through our support form.
10. Your rights
You can ask us to: give you a copy of your data; correct it; delete it; restrict how we use it; object to how we use it (including stopping all contact from us); or send it to you or another organisation in a reusable format. We’ll reply within one month. Email support@gigson.com or use the support form. We may need to confirm who you are first.
If you’re unhappy with how we’ve used your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
11. Children and changes
Gigs On is for adults (18+) arranging work on their property, and businesses. We don’t knowingly collect children’s information.
We’ll update this notice when how we use data changes, and show the date at the top. If a change matters to you, we’ll tell you by email.