Skip to main content
FACTOTUM

Privacy policy

What we store, why, for how long — and how to get a copy or have it deleted in a few clicks.

1. Who is responsible for your data

The controller of the data is FACTOTUM, established in Luxembourg. Send your data protection questions to the address given at the foot of this page and you will get an answer within one month. This statement is written without legal jargon and describes exactly what the platform actually does.

2. What data we collect

We collect what an order needs, namely name, phone, email, the address of the visit, the description of the job and any photos you add yourself, billing data, messages exchanged with the professional and technical logs such as date, time and device type. For a professional we also hold company details, insurance and the business permit. We never ask for sensitive data such as health or beliefs.

3. Why and on what legal basis

Handling the order, taking payment and giving support rest on the contract with you. Invoices and tax or accounting records are kept because the law obliges us to. Security, fraud prevention and improving the platform rely on our legitimate interest. Push messages, marketing email and non-essential cookies run only with your consent, which you can withdraw at any time in your account.

4. Who sees your data

The professional sees your address and phone number only once the order is confirmed, and only for that visit. Beyond that, data goes solely to the providers we need, namely the payment service, text and push delivery, email delivery, hosting and accounting. They act on our instructions under a data processing agreement. We never sell your data and never hand it over for someone else’s advertising.

5. Storage and transfer

Your data is stored in data centres inside the European Union. If a provider exceptionally has to work outside the Union, that happens only on the basis of an adequacy decision of the European Commission or of standard contractual clauses, with encryption and a written framework. An up to date list of providers is available on request.

6. How long we keep data

Invoices and accounting records must be kept for ten years because the law requires it. The history of visits and the messages stay for three years so that complaints and disputes can be settled. Photos attached to an order are deleted twelve months after the visit. Technical logs are held for twelve months. Once these periods end, the data is deleted or irreversibly anonymised.

7. Your rights

You can see your data, have it corrected or erased, restrict its use, download it in a readable file and object to processing based on our legitimate interest. Your account holds the export button and the account deletion button. We answer within one month and, where a request is unusually complex, we tell you about the extension and the reason for it.

8. Automated decisions and ranking

The platform suggests professionals by distance, availability, trade and the reviews of earlier visits, and the ranking page explains how much each criterion counts. An automatic check can block an order or an account when fraud is suspected. In that case you get the reason in writing and can ask for a review by a person, who is able to overturn the decision.

9. Security

The connection is encrypted and account data is protected by access rules, so each person sees only what their work requires. Card details are handled by the payment provider and never sit on our servers. If an incident nevertheless affects your data, we notify the supervisory authority within seventy-two hours and write to you directly where the risk is high.

10. Cookies, complaint and changes

Necessary cookies keep the session and the language, all others run only with your consent and the full list is on the dedicated page. If you are unhappy with our processing, you may turn to the National Commission for Data Protection in Luxembourg or to the authority of your country of residence. Any material change to this statement is announced in the account and by email, and earlier versions stay available on request.

1. Who is responsible

FACTOTUM, established in Luxembourg, is the data controller for the data you provide when booking a service or creating an account. Our contact details and data protection contact appear on every invoice and in your account settings.

2. What we collect and why

Booking data (name, address, phone, email, job description, photos) to plan and carry out the work and to issue a legally compliant invoice.

Account data (login email, language, display preferences) to give you secure access to your jobs, chat and documents.

Chat messages between you and your technician, to document the job and handle any complaint.

Payment status data. Card details are handled by our payment provider; we never store your card number.

3. Legal bases

Performance of the contract for bookings, invoices and chat; legal obligation for accounting and VAT records; legitimate interest for fraud prevention and service quality; consent for optional marketing messages, which you may withdraw at any time.

4. Retention

Accounting documents are kept 10 years as required by Luxembourg law. Booking and chat records are kept for the warranty period plus the limitation period. Account preferences are kept until you delete your account.

5. Who can see your data

Only the staff who need it: the assigned technician sees the job and its address, accounting sees invoice data, legal sees compliance requests, administrators see all. Every staff action on your record is written to an internal audit log.

6. Your rights

You may request access, rectification, deletion, restriction, portability, and object to processing. Use the buttons in your account settings — the request is registered and handled by our legal desk, and you receive a written answer.

You may also lodge a complaint with the Luxembourg data protection authority (CNPD).

7. Cookies and preferences

We store your language and comfort display settings in your browser so the site stays readable and in your language. These are strictly necessary preferences and are not used for advertising.

Who to write to

privacy@factotum.lu

GDPR and personal data

The text in force in your language, to keep or to print.