Privacy Policy

Last updated: 24 October 2026. This draft should be reviewed by qualified legal counsel before commercial launch.

Important: DoneHalo may process sensitive identity and professional-verification documents. Production deployment should use strict access controls, encryption, minimal retention and an internal review policy.

1. Scope

This Privacy Policy explains how DoneHalo may collect, use, store and protect information when customers, professionals or visitors use the platform, submit a service request, contact support or apply for a professional profile.

2. Information we may collect

Customer account information such as name, email address, optional phone number, email-verification status and password hashes.
Contact information such as name, email address, phone number and city.
Professional information such as service category, experience, portfolio, business information and licence or registration details where relevant.
Verification information and documents, including identity documents and professional-credential evidence.
Service-request information submitted by signed-in customers and the professional profile the request was sent from.
Short-lived email verification and password-reset records. DoneHalo stores a hash of each one-time code rather than the plaintext code.
Technical and security information such as IP-derived security logs, device/browser data and anti-abuse records.
Transaction information if payment features are later enabled. Full card details should be handled by a compliant payment provider rather than stored directly by DoneHalo.

3. Why we use information

To review professional applications and verify identity or credentials.
To create, operate and secure professional profiles.
To create and secure customer accounts, verify customer email addresses and support password recovery.
To match customer requests with relevant professionals.
To prevent fraud, impersonation, abuse and platform misuse.
To provide support, resolve disputes and enforce platform rules.
To improve search, reliability, performance and user experience.
To comply with legal obligations where applicable.

4. Verification documents

Verification documents are not intended for public display. Access should be limited to authorized personnel who need the information for review, fraud prevention, dispute handling or legal compliance. This build encrypts uploaded verification files at rest on the server.

5. Data minimization and retention

DoneHalo should collect only the information reasonably needed for the stated purpose and should not retain sensitive verification files longer than necessary. Production retention schedules should be documented by data category and reviewed regularly.

6. Sharing

DoneHalo may share limited information with service providers that help operate the platform, payment processors, security providers, professional-verification partners, or authorities where legally required. DoneHalo should not sell verification documents or identity data.

7. Public profile information and protected contact details

Approved professional profiles may display selected information such as name, city, service category, portfolio, experience, verification badges and customer reviews. Sensitive identity documents remain private.

Professional phone numbers, WhatsApp numbers and contact email addresses may be treated as protected profile information. DoneHalo may require a customer to create an account, verify their email address and sign in before those protected contact fields or contact actions are made available.

8. Security

Reasonable technical and organizational safeguards should include encryption, access control, server hardening, audit logs, backups, rate limiting and restricted storage of verification files. No internet system can guarantee absolute security.

9. Your choices

Users may request correction of inaccurate account information, ask questions about data use, or request profile removal subject to legal, fraud-prevention and record-retention requirements. Removal of a paid professional profile does not automatically create a right to a refund; see the Terms & Conditions.

10. Children

DoneHalo is intended for adults and lawful business use. The platform should not knowingly collect sensitive professional-verification documents from children.

11. Changes

This policy may be updated as the platform, laws, payment methods and verification systems change. Material changes should be communicated appropriately.

12. Contact

Privacy questions: support@donehalo.com.