Cabin (Cabin Technologies Ltd, “we”, “us”, “our”) runs the Cabin app and getcabin.co.uk. Builders use Cabin to run projects with staged client payments, book trades and handle CIS. People having work done use it to fund and approve those payments, or to post a job for builders to quote on.
1. Who We Are
Cabin Technologies Ltd is the controller of your personal data.
Contact: hello@getcabin.co.uk
2. What Data We Collect
Information you provide:
- Account details: name, email, mobile number, postcode
- Mobile verification: whether your mobile number is verified, and whether you’ve opted in to WhatsApp messages (and when)
- Profile information: trade type, day rate, bio, company name
- Tax information: VAT number, CIS status, UTR and (optionally) National Insurance number, used for CIS
- Projects: job title, description, site postcode, payment schedule, approvals and any queries you raise, with the reasons you give
- Jobs posted for quotes: what you need done, where, budget range, timing, and any photos or plans you upload
- Payment information: handled by Stripe. We don’t store card or bank numbers
Information collected automatically:
- Location data: GPS coordinates when you clock in or out (with your permission)
- Project views: when a client last opened a project page
- Message delivery: whether a WhatsApp message or text we sent you was delivered
- Device information: device type, operating system, app version
- Usage and crash data: features used, bookings made, times active, and error reports
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Create and manage your account | Contract performance |
| Sign you in with a code sent by email, WhatsApp or text message | Contract performance |
| Run projects: charge, hold and release stage payments, and record approvals and queries | Contract performance |
| Record when you open a project. This decides how long a payment waits for you before it’s released automatically (see our Terms, section 4) | Contract performance |
| Send a job you post for quotes to up to five builders, and send you their replies | Contract performance |
| Book trades and match builders with tradespeople | Contract performance |
| Process payments via Stripe | Contract performance |
| Send payment and project notifications by email and push | Contract performance |
| Send the same notifications on WhatsApp | Consent (you can withdraw it at any time) |
| Turn a job description into a tidy scope with our assistant, Gaffer | Legitimate interest |
| Verify location for clock in/out | Legitimate interest (fraud prevention) |
| Prevent fraud and abuse of sign-in codes | Legitimate interest |
| Deduct CIS and file returns with HMRC | Legal obligation |
| Send marketing (if opted in) | Consent |
| Improve the app and fix errors | Legitimate interest |
4. Who We Share Data With
| Recipient | Purpose | Data Shared |
|---|---|---|
| Other users on a project or booking | Run the project or booking | Name, trade, rating, payment schedule and status, approvals and queries on that project |
| Builders you send a job to for quotes | Let them reply with a price | Job description, photos, budget range, timing and postcode district. Your name, email, mobile and full address are shared only with the builder you choose |
| HMRC | CIS returns | Name, UTR, NI number (if given), CIS payments and deductions |
| Your accountant (only if you add one and they confirm) | Copies of CIS statements | CIS deduction statements |
| Stripe | Payment processing | Name, email, card and bank details |
| Twilio | Sending sign-in codes and messages by WhatsApp or text | Mobile number, message content |
| Meta (WhatsApp) | Delivering WhatsApp messages, if you opted in | Mobile number, message content |
| Resend | Sending email | Email address, message content |
| Anthropic | Gaffer, our assistant | The text you give Gaffer and the job details it works on |
| Supabase | Database hosting | All account data (encrypted) |
| Sentry | Error reports | Device and error details, no names or emails |
| Expo | Push notifications | Device tokens |
| Apple/Google | App distribution | Crash reports, analytics |
5. Mobile Number, WhatsApp and Text Messages
You can add a mobile number to your account and verify it with a code. Once it’s verified, you can sign in with a code sent by WhatsApp or text message instead of email.
We only send you WhatsApp messages about your projects if you’ve opted in. You can turn this off at any time in your account, or by asking us. Every message we send on WhatsApp is also sent by email.
We never release a payment because of a reply to a message. Payments are only approved by someone signed in to Cabin.
Sign-in codes are sent to UK mobile numbers only.
6. Location Data
We collect GPS location only at the moment you clock in or clock out of a job. This is used to:
- Verify you're at the job site (within 500 metres)
- Provide proof of attendance to the builder and the client
- Prevent fraudulent bookings
- Support dispute resolution
What we collect: GPS coordinates (latitude/longitude), timestamp, and the associated booking reference.
What we don't do: We do not track your location continuously, in the background, or outside of active clock-in/clock-out actions.
Your control: You can deny location permission in your device settings at any time. However, clock-in/clock-out features require location access to function.
Retention: Clock-in/clock-out location data is retained for 90 days for dispute resolution, then anonymised. You may request early deletion by contacting hello@getcabin.co.uk.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until you delete your account |
| Booking and project history | 7 years (tax compliance) |
| Payment and CIS records | 7 years (legal requirement) |
| Jobs posted for quotes that don’t go ahead | 12 months |
| Message delivery records | 12 months |
| Location data | 90 days (then anonymised) |
| WhatsApp and marketing preferences | Until withdrawn |
8. Your Rights (UK GDPR)
You have the right to:
- Access your data (request a copy)
- Correct inaccurate data
- Delete your account and data, except records we must keep by law
- Export your data (portability)
- Object to processing based on legitimate interest
- Withdraw consent for WhatsApp messages and marketing
To exercise these rights, email hello@getcabin.co.uk. We'll respond within 30 days.
9. Data Security
We protect your data using:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest (database encryption)
- Row-level security (you only see your own data)
- Secure authentication (Supabase Auth), with codes by email, WhatsApp or text
- A code to your other contact method before your email, mobile number or payout details can be changed
- PCI-compliant payment processing (Stripe)
10. Cookies
The Cabin app doesn't use cookies. Our website uses essential cookies and browser storage only, to keep you signed in and to make the site work.
11. Children
Cabin is not intended for anyone under 18. We don't knowingly collect data from minors.
12. International Transfers
Your data is stored in the EU (Supabase servers). Stripe, Twilio, Meta, Resend and Anthropic may process data in the US. Where they do, the transfer is covered by the UK International Data Transfer Addendum or another safeguard approved under UK law.
13. Changes to This Policy
We'll notify you of significant changes via email or in-app notification. Continued use after changes means acceptance.
14. Contact & Complaints
Questions? Email hello@getcabin.co.uk
Complaints? You can also contact the UK Information Commissioner's Office (ICO) at ico.org.uk.
Cabin Technologies Ltd
Cabin HQ, Riverbridge House, Fetcham Grove, Guildford Road, Leatherhead, Surrey KT22 9AD
Registered in England and Wales, company number 17063088
Registered office: 3rd Floor, 86-90 Paul Street, London, United Kingdom EC2A 4NE