Privacy Policy

1. Introduction

Tack.lu ("we", "our", "us") is committed to protecting your privacy. This privacy policy explains how we collect, use, disclose, and protect your information when you use our platform connecting homeowners and craftsmen in Luxembourg.

2. Information We Collect

2.1 Information You Provide

• Homeowners: Name, email, phone, address, project description, photos (optional)
• Craftsmen: Company name, professional email, phone, VAT number, address, payment information (via Stripe)
• Communications: Messages exchanged through our platform, feedback and reviews

2.2 Automatically Collected Information

• IP address
• Browser and device type
• Pages visited and visit duration
• Geolocation data (with your consent)

3. How We Use Your Information

We use your data to:

• Facilitate connections between homeowners and craftsmen
• Process payments and manage billing
• Send notifications about your projects
• Improve our service and user experience
• Prevent fraud and ensure security
• Comply with our legal obligations
• Send marketing communications (with your consent)

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: To provide our matching services
• Legitimate interests: To improve our services, prevent fraud, and ensure security
• Consent: For sending marketing communications and using non-essential cookies
• Legal obligations: To comply with applicable laws (tax, accounting, etc.)

5. Sharing Your Information

We share your information only in the following cases:

• Between users: Homeowner contact details are shared with selected craftsmen after payment
• Service providers:
  • Stripe for payment processing
  • Resend for email delivery
  • Supabase for data hosting
  • Vercel for website hosting
• Legal obligations: If required by law or competent authority

We never sell your personal data to third parties.

6. Data Security

We implement technical and organizational security measures to protect your data:

• SSL/TLS encryption for all transmissions
• Secure authentication with password hashing
• Restricted access to personal data
• Regular security audits
• PCI DSS compliance for payments (via Stripe)

7. Data Retention

We retain your data for the following periods:

• Project data: 3 years after last activity
• Billing data: 10 years (legal requirement)
• Marketing data: Until consent is withdrawn
• Technical logs: 1 year

8. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right of access: Obtain a copy of your personal data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion of your data
• Right to restriction: Limit processing of your data
• Right to portability: Receive your data in a structured format
• Right to object: Object to processing of your data
• Right to withdraw consent: At any time for consent-based processing

To exercise these rights, contact us at: privacy@tack.lu

9. Cookies

We use cookies for:

• Essential cookies: Necessary for website operation
• Performance cookies: To analyze website usage (with consent)
• Preference cookies: To remember your choices (language, etc.)

You can manage your cookie preferences through your browser settings.

10. International Transfers

Some of our service providers are based outside the EU. We ensure that these transfers are made with appropriate safeguards (standard contractual clauses, Privacy Shield, etc.).

11. Minors

Our service is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a new "Last updated" date. For significant changes, we will notify you by email.

13. Contact

For any questions about this privacy policy, contact us:

14. Supervisory Authority

If you are not satisfied with our response, you may file a complaint with the National Commission for Data Protection (CNPD) of Luxembourg: