Privacy notice
What Mazdurr collects, why, and what we will never do with it. Written to be read, not to be survived.
Who we are
Mazdurr is a service of Aluminur Ltd (company number 15809037, registered office 234 Sydenham Road, Croydon, England, CR0 2EB). We are the data controller for everything described here. Write to us at privacy@mazdurr.com.
The short version
- We ask for the least we can get away with, and we say why each time.
- We never see or store your card details. Stripe handles payment.
- We do not sell your data. We do not sell position, badges or leads to anyone.
- A trader's public page is off until they switch it on, and it never carries a phone number, an email or an address.
- Your postcode is only ever shown to traders as a district, such as B1, until you accept a quote.
- You can export everything we hold and delete your account from inside the app.
What we collect and why
Everyone with an account
| What | Why | Lawful basis |
|---|---|---|
| Name and email | To create your account, sign you in and send you what a job needs | Contract |
| Password, held only as a hash | To sign you in. We cannot read it | Contract |
| A device identifier and your IP address | To keep sessions safe, to recognise a device you have used before, and to stop somebody hammering the sign-in page | Legitimate interests: security |
| Two step verification codes | To confirm it is you | Contract |
| Push notification token, if you allow notifications | To tell you a quote arrived or a stage needs signing off | Consent |
If you are having work done
| What | Why | Lawful basis |
|---|---|---|
| Your full postcode, encrypted | To find traders who cover you and to give the address to the one you accept. Everyone else only ever sees the district | Contract |
| What the job is, and photos if you add them | So a trader can quote accurately | Contract |
| Access details: property type, floor, parking, who will be there, pets, and your notes | So the visit is not wasted. All of it optional | Contract |
| Your budget, if you give one | To help traders decide | Contract |
If you work in the trade
| What | Why | Lawful basis |
|---|---|---|
| Business name, trades, and the district you work from | To route work you can actually do | Contract |
| Your base postcode, encrypted, and how far you travel | To measure distance to a job. We publish a district, never a base address | Contract |
| Identity, insurance and qualification checks, and any certificates you add with their expiry dates | To verify you, and to warn you before something lapses | Contract and legal obligation |
| Where you are working right now, only if you choose to share it | So a job three streets from you reaches you first. It is used only to route work, goes stale after four hours, is never shown to customers or published anywhere, and you can stop sharing it at any time | Consent |
| Your rate card, and how quickly you answer offers | To price a one tap claim, and to decide where you sit in the order work is offered | Contract and legitimate interests |
| Your UTR and CIS status, encrypted | Only to work out the deduction on your own jobs. We do not file anything with HMRC | Legal obligation and contract |
| Your own book: your clients' names, phone numbers and addresses, encrypted | So Mazdurr Site works on jobs that never came from us. This is yours. Only you can see it | Contract |
| Your Stripe account identifier | To pay you | Contract |
If you manage property for other people
Property labels, addresses and postcodes are held encrypted, along with your own reference for each one and a billing email. We use them to attach a repair to a property and to work out what you are billed on.
You may also record a tenant name, phone number and email against a property, and the safety certificates it holds. Tenant contact details are encrypted, are visible only to your own organisation, and are never shown to a trader before they have won the work. Certificates are kept for as long as you look after the property and for six years after the certificate expires, because they are evidence you may need to produce.
If you are a tenant using a reporting link
Your landlord or agent can issue a link for the property you live in. That link identifies the property, never you: opening it shows the name your landlord uses for the property and nothing else. There is no account and no password.
When you report a repair, we hold what you wrote, anything you ticked, and the name and phone number you chose to give, so somebody can contact you about it. That information goes to your landlord or agent, and to the trader once one is appointed. You do not have to give a name or a number to report a repair.
Your landlord can replace the link at any time, which stops the old one working. If you want your details removed, ask your landlord or agent, who decides what is kept: for these records they are the data controller and we act on their instructions.
Who else sees it
- Stripe handles payments and holds card details. We never see them.
- Brevo sends our email.
- Object storage holds the photos you upload.
- Google Firebase delivers push notifications, if you turn them on.
- postcodes.io turns a district such as B1 into a point on a map. We send the district only, never a full postcode and never your name.
- WhatsApp, owned by Meta, only if you opt in to being contacted that way.
- Other people using Mazdurr, as described above: a trader offered your job sees the district and the access details, and your address only once you accept them.
We do not sell data to anybody, and we do not use it to train anything.
Talking to each other directly
When you and a trader agree to it, we pass on a phone number so you can talk directly. Those conversations are yours. Mazdurr is not part of them and does not store them. If it goes wrong, that also means we cannot produce what was said, which is why the record we do keep is built from what happened in the app.
The public record page
A trader can publish a page at mazdurr.com/t/their-name. It is off until they switch it on. It carries their business name, trades, the district they work from, how far they travel, work signed off, ratings, how quickly they answer, and which checks are in date. It never carries a phone number, an email, an address, a base postcode, a customer, a job or a price. Switching it off takes it down.
How long we keep things
- Photos and documents: 90 days, then deleted automatically.
- Sign-in sessions: 30 days.
- Jobs and their records: for as long as your account is open, because the record of what happened is the point of the service.
- Financial and audit records: for as long as tax and anti-fraud law requires, currently six years, then purged.
Deleting your account
You can delete your account in the app. Your personal data is erased or anonymised straight away. A minimal financial and audit record, meaning transaction identifiers, amounts, dispute outcomes and timestamps, is kept for the period the law requires and then purged. We will not let you delete an account while money is being held on a live job, because that would leave the other side stranded. Finish or resolve the job first.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to what we do with it, and to have it sent somewhere else. Export and deletion are both buttons in the app; for anything else write to privacy@mazdurr.com and we will answer within one month. If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Keeping it safe
Phone numbers, addresses, postcodes and UTRs are encrypted where they are stored, not just in transit. Everything travels over HTTPS. Passwords are hashed. Two step verification is available on every account. Our staff access is limited to what is needed to run the service and is logged.
Where your data lives
Our servers are in Germany. Some of the companies above are outside the UK; where that happens the transfer is covered by the UK international data transfer agreement or an adequacy decision.
Analytics and cookies
We use our own analytics, which does not use cookies and does not build a profile of you. We store a sign-in token on your device so you stay signed in. We do not run advertising trackers.
Children
Mazdurr is for people aged 18 or over. It is not for children and we do not knowingly collect their data.
Changes
If we change how any of this works we will change this page and, where it matters, tell you in the app. This version is dated 25 August 2026.