Privacy Policy

Effective 23 September 2026 · Iskal Limited

Iskal Limited is registered in England and Wales, company no. 16647647, at 124-128 City Road, London, England, EC1V 2NX. Privacy contact: christian@iskal.si.

Our roles and data

Iskal is a controller for platform administration, security, billing, support, direct homeowner use and a minimal homeowner identity. It is normally a processor when a tradesperson uses Iskal to collect job-specific data for that customer's own relationship. We may process identity/contact details, job descriptions, photos, measurements, location, business-account and billing data, technical/security data, support messages and marketing preferences.

Why we process data

We process data to provide requested services and accounts, maintain a minimal homeowner identity, secure the service, prevent fraud, meet billing and legal obligations, support users and improve workflows with de-identified or aggregated information. We use contract, legitimate interests, legal obligations and consent where applicable.

Homeowner identity and job privacy

A homeowner does not need a conventional account. When an email is provided, Iskal may keep a minimal separate identity so returning users can be recognised, job requests delivered and privacy requests handled. A tradesperson does not gain access to previous Iskal jobs merely because the same homeowner uses Iskal again. We do not sell identifiable personal data to data brokers or unrelated tradespeople.

Sharing and transfers

We share a job request with the named tradesperson chosen by the homeowner and use service providers to operate Iskal. See the Subprocessor Register. We use appropriate transfer safeguards where required.

Retention, deletion and rights

Minimal homeowner identities are retained for up to 36 months after the last Iskal activity, then deleted or anonymised unless a longer period is justified. Valid deletion requests remove identifiable active-system RFQ/job data and managed media; genuinely anonymised information may remain. Protected backups have a maximum 90-day retention target and deleted data is not deliberately restored into production. You may request access, correction, erasure, restriction, portability or object to legitimate-interest processing by contacting us.

Cookies and local storage

The current service uses necessary cookies and browser local storage for functionality such as session state, preferences and RFQ drafts. We do not state that non-essential analytics or marketing cookies are used unless they are actually introduced with the required consent controls.