Legal
Privacy Policy
Matching you with the right Insidoor means knowing where you're going, what you can spend and who's coming with you. Here is exactly what we collect, who sees it, and how to get it back or deleted.
1. Who controls your data
The controller of your personal data is [LEGAL ENTITY NAME], registered in [COUNTRY] under company number [COMPANY NUMBER], at [REGISTERED ADDRESS]. Our data protection contact is privacy@insidoor.com. [DPO NAME AND CONTACT, IF ONE IS APPOINTED]
2. What we collect
You give us
- Matching details — destination city, arrival date, housing budget, languages, and who is moving with you (partner, children, pets). Where you tell us about accessibility needs, schooling or health requirements, that may be special category data, and we only use it to match and brief your Insidoor.
- Contact and account details — name, email, phone, and your account credentials.
- Messages and uploads — what you send in in-app chat, your reactions on the search board, and documents you choose to upload.
- Payment details — handled by our payment processor, [PAYMENT PROCESSOR]. We receive confirmation and the last four digits, never your full card number.
We collect automatically
- Usage and device data — pages viewed, approximate location from IP, browser and device type. See our cookie policy.
If you apply to be an Insidoor
- Identity documents and evidence of your years of residence, for verification; your languages, response time and completion record, which appear on your public profile; and payout details for releasing your share.
3. Why we use it, and our legal basis
- To match you and deliver the service — performance of our contract with you.
- To take payment and release milestone payouts — performance of contract, and our legal obligations around accounting and anti-money-laundering.
- To verify Insidoors and keep clients safe — our legitimate interest in a platform where the people who show up are who they say they are.
- To support you, and to resolve disputes — legitimate interest, and the establishment or defence of legal claims.
- To improve the service — legitimate interest; we use aggregated data wherever it will do.
- To send marketing — your consent, which you can withdraw from any email or by writing to us.
- Special category data (health, accessibility) — your explicit consent, used only to brief your Insidoor.
4. What your Insidoor sees
Your Insidoor is an independent contractor and an independent controller of the data we pass them. They receive only what they need to do the job: your name, your brief (city, budget, dates, family situation, languages), and your messages. They do not receive your payment details. They are contractually required to use it only for your relocation, to keep it confidential, and to delete it when the job is done.
5. Who else we share it with
- Payment processing — [PAYMENT PROCESSOR].
- Identity verification — [ID VERIFICATION PROVIDER], for Insidoors.
- Hosting and infrastructure — [HOSTING PROVIDER].
- Email and support tooling — [EMAIL / SUPPORT PROVIDERS].
- Analytics — [ANALYTICS PROVIDER, IF ANY]. See the cookie policy.
- Insidoor Pro clients — where your employer or university is paying, they see relocation status and milestone progress, not the contents of your chat.
- Authorities — where we are legally required to, and no further.
We do not sell your personal data.
6. International transfers
Insidoor operates in cities worldwide, so matching you with an Insidoor will often mean transferring your brief to the country you are moving to. Where that country is outside the [EEA / UK / YOUR JURISDICTION] and lacks an adequacy decision, we rely on Standard Contractual Clauses with the recipient, plus the confidentiality obligations in our Insidoor agreement.
7. How long we keep it
- Account and relocation records — for the life of your account and [N] years after your last booking, so we can handle disputes.
- Financial records — [N] years, as required by tax law in [COUNTRY].
- Insidoor verification records — for as long as the Insidoor is active, plus [N] years.
- Enquiries that do not become bookings — [N] months.
8. Your rights
Subject to the law that applies to you, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, port it elsewhere, or withdraw consent you previously gave. Write to privacy@insidoor.com and we will respond within one month.
We will not discriminate against you for exercising these rights. If you are unhappy with our response you can complain to your local supervisory authority — in [COUNTRY], that is [SUPERVISORY AUTHORITY].
9. Security
We encrypt data in transit, restrict access to the staff who need it, and hold payment details only through our processor. No system is perfect: if a breach affects your rights we will tell you and the relevant authority within the time the law requires.
10. Children
Insidoor is for adults. We do not knowingly collect data from anyone under 18, other than the details a parent gives us about children moving with them — which we use only to match and to brief the Insidoor on school searches.
11. Changes to this policy
We will post any update here and change the date at the top. Where a change materially affects you, we will email you before it takes effect.
12. Contact and complaints
privacy@insidoor.com, or by post at [REGISTERED ADDRESS]. General enquiries go to hello@insidoor.com.