Privacy Policy

1. Scope

This Privacy Policy explains how DoneHalo may collect, use, store and protect information when customers, professionals or visitors use the platform, submit a service request, contact support or apply for a professional profile.

2. Information we may collect

• Customer account information such as name, email address, optional phone number, email-verification status and password hashes.
• Contact information such as name, email address, phone number and city.
• Professional information such as service category, experience, portfolio, business information and licence or registration details where relevant.
• Verification information and documents, including identity documents and professional-credential evidence.
• Service-request information submitted by signed-in customers and the professional profile the request was sent from.
• Short-lived email verification and password-reset records. DoneHalo stores a hash of each one-time code rather than the plaintext code.
• Technical and security information such as IP-derived security logs, device/browser data and anti-abuse records.
• Transaction information if payment features are later enabled. Full card details should be handled by a compliant payment provider rather than stored directly by DoneHalo.

3. Why we use information

• To review professional applications and verify identity or credentials.
• To create, operate and secure professional profiles.
• To create and secure customer accounts, verify customer email addresses and support password recovery.
• To match customer requests with relevant professionals.
• To prevent fraud, impersonation, abuse and platform misuse.
• To provide support, resolve disputes and enforce platform rules.
• To improve search, reliability, performance and user experience.
• To comply with legal obligations where applicable.

4. Country label and approximate location

The country selector can estimate the country of a website visitor using an IP-based location lookup. Where available, we use a country code supplied by our delivery network. Otherwise, our server may transmit your public IP address over HTTPS to the external IP-to-country provider Country (api.country.is) for a country-code lookup. The result is approximate and may be affected by VPNs and network routing. Our country lookup cache stores the resulting country code under a hashed key for up to 24 hours. You can manually select another country, and the preference is stored in your browser. This feature only changes the displayed country and does not change where DoneHalo providers operate.

5. Verification documents

Verification documents are not intended for public display. Access should be limited to authorized personnel who need the information for review, fraud prevention, dispute handling or legal compliance. This build encrypts uploaded verification files at rest on the server.

6. Data minimization and retention

DoneHalo should collect only the information reasonably needed for the stated purpose and should not retain sensitive verification files longer than necessary. Production retention schedules should be documented by data category and reviewed regularly.

7. Sharing

DoneHalo may share limited information with service providers that help operate the platform, payment processors, security providers, professional-verification partners, or authorities where legally required. DoneHalo should not sell verification documents or identity data.

8. Public profile information and protected contact details

Approved professional profiles may display selected information such as name, city, service category, portfolio, experience, verification badges and customer reviews. Sensitive identity documents remain private.

Professional phone numbers, WhatsApp numbers and contact email addresses may be treated as protected profile information. DoneHalo may require a customer to create an account, verify their email address and sign in before those protected contact fields or contact actions are made available.

9. Security

Reasonable technical and organizational safeguards should include encryption, access control, server hardening, audit logs, backups, rate limiting and restricted storage of verification files. No internet system can guarantee absolute security.

10. Your choices

Users may request correction of inaccurate account information, ask questions about data use, or request profile removal subject to legal, fraud-prevention and record-retention requirements. Removal of a paid professional profile does not automatically create a right to a refund; see the Terms & Conditions.

11. Children

DoneHalo is intended for adults and lawful business use. The platform should not knowingly collect sensitive professional-verification documents from children.

12. Changes

This policy may be updated as the platform, laws, payment methods and verification systems change. Material changes should be communicated appropriately.

13. Contact

Privacy questions: info@donehalo.com.