NexHyr Privacy Policy

1. Introduction

NexHyr is a hospitality staffing marketplace that helps workers find shifts and helps businesses fill them. We want the platform to be secure, useful and clear, and we are committed to protecting personal data.

This policy explains what we collect, why we use it, who we share it with and the choices you have when you use NexHyr.

2. Information we collect

3. Why we use your information

We use personal data to create and manage accounts, verify workers and businesses, match workers to shifts, manage bookings, process payments and payouts, prevent fraud, keep the platform secure, support users, improve the product and meet our legal obligations.

We only use analytics for platform improvement if you have agreed to analytics cookies.

4. Identity verification

Workers may need to provide a photo, a government-issued ID and other verification information before they can use all parts of the platform.

Verification can involve automated checks as well as manual review by NexHyr administrators. We use verification data only for identity checks, fraud prevention and marketplace safety.

5. Payments

Payments are processed securely through Stripe. NexHyr does not store full payment card details.

Stripe is used for business payments and worker payouts, including the payment flows that support shift bookings and settlements.

6. Communications

We communicate with users by email, SMS, WhatsApp where opted in, and in-app notifications. These messages may include account notices, booking updates, verification updates and support replies.

You can opt out of non-essential communications where the platform gives you that choice, although we may still send important service or account messages when required.

7. Cookies and browser storage

Our Cookie Policy explains how we use essential cookies and analytics cookies in more detail. We also use browser storage to remember preferences such as cookie consent and theme settings, and session storage where needed to support the current session.

Analytics only operate after consent has been given.

8. Third-party service providers

We work with a small number of service providers to run NexHyr:

• Supabase, which powers our authentication, database and core app data storage.
• Stripe, which handles business payments, worker payouts and payment verification.
• Resend, or SMTP where configured, which sends transactional email messages.
• Twilio or Meta WhatsApp Cloud API, depending on configuration, which can send WhatsApp messages.
• AWS Rekognition, which helps with automated image checks during profile and identity review.
• Vercel, which hosts the platform and provides Speed Insights when you allow analytics cookies.

These providers only receive the data they need to perform their role.

9. Data retention

We keep account information, verification documents, bookings, messages and payment records only for as long as we need them for legal, operational, accounting and security reasons. When data is no longer needed, we delete it or anonymise it where appropriate.

10. Keeping information secure

We use encryption in transit, authenticated access, role-based permissions, secure hosting, logging and monitoring to help protect personal data. We also limit access to verification and account data to the people who need it to do their job.

11. Your rights

Under UK GDPR, you may have the right to access your data, correct it, delete it, restrict how we use it, receive it in a portable format, object to certain uses, withdraw consent and complain to the ICO.

12. Children's privacy

NexHyr is intended for users aged 18 or over. We do not knowingly collect personal data from children.

13. International transfers

Some of our providers may process data outside the UK. Where that happens, we use appropriate safeguards where required by law.

14. Changes to this policy

We may update this policy when our platform changes. If the changes are important, we will let users know where appropriate.

15. Contact

If you have questions about this policy or want to exercise your rights, email support@nexhyr.co.uk.