Privacy Policy

Pluggerzz is operated by MIJAM Limited (company number 14221336). Registered office: 6 Yeoman Place, Woodley, Reading, RG5 3BX. ICO registration: ZB497922. Privacy contact: [email protected].

Pluggerzz is a digital platform that connects individuals and businesses seeking services ("Users") with independent service providers ("Providers"). We operate under UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this Privacy Policy, you can contact us at [email protected].

We collect personal data that you provide when using the Pluggerzz Platform, as well as information automatically collected when you interact with our services.

2.1 Information You Provide to Us

When you sign up or use Pluggerzz, we may collect your name, email address, phone number, and password for account creation. If you create a profile, we may collect additional details such as your profile photo, bio, skills (for Providers), and job preferences.

For payment processing, we collect billing information and transaction history. We hold the bank account details providers give us for payouts. Customer card details are handled by Stripe and are not stored by us. We also collect any messages and correspondence between Users and Providers, as well as any verification documents, such as identification or certifications submitted by Providers.

2.2 Information We Collect Automatically

When you use Pluggerzz, we may collect certain information automatically, including your IP address, browser type, operating system, and device identifiers. We track your usage of the Platform, such as pages visited, actions taken, and time spent on the site. If you grant permission, we may collect location data to provide better service matching. Additionally, we use cookies and similar technologies to improve your experience.

2.3 Information from Third Parties

We may collect data from third parties, including payment processors for transaction verification, marketing or analytics partners to enhance our Platform.

We use your personal data to operate and improve the Pluggerzz Platform. This includes providing and managing your account, verifying Provider identities, processing payments, and facilitating communication between Users and Providers.

We also use your data to prevent fraud, ensure compliance with UK laws, and communicate with you regarding updates, promotions, or important service information. Marketing communications are only sent if you have given consent.

We analyze usage patterns to improve our Platform and may use aggregated, non-identifiable data for business insights. If required by law, we may also process your data for regulatory and compliance purposes.

We do not sell your personal data. However, we may share it in certain circumstances.

We share data with trusted service providers, including payment processors and cloud storage providers, to ensure smooth Platform operations. When Users and Providers interact, we share relevant details such as job requests and Provider profiles to facilitate bookings.

If required by law, we may disclose data to regulatory authorities, law enforcement, or legal representatives to comply with legal obligations or protect the rights and safety of Pluggerzz, Users, and Providers.

We take security seriously and implement measures such as encryption, access controls, and regular audits to protect your personal data. However, while we strive to keep your data secure, no system is entirely foolproof. We encourage Users and Providers to use strong passwords and be mindful of sharing sensitive information.

We retain personal data only for as long as necessary. We keep your account information while your account is open. When it is closed, we delete or anonymise it within 3 months, except where we must keep it longer for tax, Right to Work or legal reasons. Payment data is retained for a minimum of six years to comply with UK tax laws. Communication records and customer support queries are stored for up to two years.

Certain data may be retained for legal, regulatory, or security purposes even after an account is deleted.

We use cookies and tracking technologies to enhance your experience. Essential cookies enable core Platform functionality, analytics cookies help us improve our services, and marketing cookies are used for targeted advertisements, subject to your consent.

You can manage cookie preferences through your browser settings. Disabling some cookies may affect Platform performance.

Under UK GDPR, you have the right to access, correct, or delete your personal data. You may also restrict how we process your data, request data portability, or object to specific uses. If you have given consent for marketing, you can withdraw it at any time.

To exercise your rights, contact us at [email protected]. We may request identity verification before processing your request. If you are not satisfied with our response, you can file a complaint with the UK Information Commissioner's Office (ICO) via www.ico.org.uk.

The Pluggerzz Platform may contain links to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to review their privacy policies separately.

We may update this Privacy Policy from time to time. Any significant changes will be communicated through email notifications or an updated version on the Platform. We will tell you about significant changes by email or in the app.

For privacy-related inquiries or to exercise your rights, contact us at [email protected]

Sale, merger or restructuring

If MIJAM Limited or the Pluggerzz business is sold, merged or restructured, your information may pass to the new owner, who must use it on the same terms. Prospective buyers see only anonymised or summary information. We will tell you before your information moves to a new controller.

Right to Work privacy notice

Version: rtw-2026-10-18
Controller: MIJAM Limited (trading as Pluggerzz)

Who we are

Pluggerzz is operated by MIJAM Limited (company number 14221336).

• Registered office: 6 Yeoman Place, Woodley, Reading, RG5 3BX
• ICO registration: ZB497922
• Privacy contact: [email protected]

What this notice covers

This notice explains how we use personal information for Right to Work (RTW) checks on Pluggerzz: identity and eligibility evidence you submit, review outcomes, and related security or audit records.

Who the check covers: we check the individual provider who offers or accepts work carried out in the UK through Pluggerzz. Only that provider, with a current approved Right to Work check, may perform the work. You cannot assign a handyman, team member or substitute to perform it in your place. Pluggerzz does not currently offer a separate approval and assignment process for substitutes.

HMRC / tax reporting details are described in a separate notice on this page and are stored and accessed separately from RTW. They are not covered here.

What we collect

Identity and eligibility information you submit for a Right to Work check (for example name, date of birth, document images or share-code details), the outcome of the check, and related security or audit events.

Where a share code is used, authorised reviewers use the GOV.UK share-code checking service.

Why we use this information

We use this information to:

• operate your provider account on Pluggerzz;
• carry out a Right to Work check before you can make offers or accept new UK work on Pluggerzz;
• keep job alerts available to you while a check is outstanding or incomplete (you may still receive job notifications; making offers and accepting new UK work require RTW approval);
• keep security and audit records; and
• respond to your rights requests.

Lawful bases (UK GDPR Article 6):

• Running the RTW check so you can offer and accept UK work on Pluggerzz (and keeping related evidence; rights requests) — Article 6(1)(c) — extended right-to-work scheme for online matching services
• Platform integrity, preventing illegal working on Pluggerzz, and related security / audit records — Article 6(1)(f) — legitimate interests in protecting provider information, preventing unauthorised access or changes, and keeping an accountable record of checks and reviews

Where Right to Work evidence includes special-category personal data, processing also relies on Article 9(2)(b) and DPA 2018 Sch 1 Pt 1 para 1. That condition applies to both the manual document route and the share-code route.

We are not relying on consent as the Article 6 basis for RTW checks.

Who we share information with

• Hostinger — Hosting (primary VPS) — Manchester, United Kingdom
• Hostinger — Weekly backups (available) — Düsseldorf, Germany
• Hostinger — Sends platform emails through our hosting service.
• GOV.UK — Share-code checking (used by authorised RTW reviewers) — United Kingdom

Backups are held in Germany, which the UK recognises as providing adequate protection for personal data. This does not mean that all other processing or access takes place only in the UK or Germany.

Permission to access tax details does not give access to Right to Work evidence.

How long we keep RTW information

We review records for deletion monthly and delete them manually when due, keeping a log of the deletion. We use the following retention periods:

• Document images / evidence — providers who worked: engagement end + 2 years
• Document images — approved but never worked: 12 months after approval
• Document images — rejected: 6 months after the decision
• Document images — withdrawn or abandoned: 30 days after last activity
• Engagement end: earliest of account closure, withdrawal of RTW approval, or 12 months with no UK job
• Audit records linked to a check follow the deletion deadline of that check and its evidence. Any longer legal hold is justified and recorded individually
• Backup copies: Hostinger retains up to two weekly restore points in Düsseldorf, Germany. This does not guarantee deletion exactly 14 days after a record is removed from the live service

Your rights

You can contact us at [email protected] to exercise your rights, and you may complain to the Information Commissioner’s Office (ico.org.uk).

You may request access, rectification, erasure where applicable, restriction, portability where applicable, and objection where legitimate interests (Article 6(1)(f)) apply.

Security

RTW evidence is encrypted at rest. Access for review is limited to authorised RTW reviewers. Access to sensitive evidence or identity fields is audited.

Changes

We will update this notice when our RTW practices change materially. The version identifier appears above.

Tax details privacy notice

Version: tax-hmrc-2026-10-18
Controller: MIJAM Limited (trading as Pluggerzz)

Who we are

Pluggerzz is operated by MIJAM Limited (company number 14221336).

• Registered office: 6 Yeoman Place, Woodley, Reading, RG5 3BX
• ICO registration: ZB497922
• Privacy contact: [email protected]

What this notice covers

This notice explains how we use personal information for HMRC / tax reporting details collected on your Pluggerzz account (Account → Right to Work), when that collection is open.

These details are stored and accessed separately from Right to Work evidence. Right to Work has its own privacy notice.

We report information about reportable providers to HMRC each year, as explained below.

When you save tax details you are asked to confirm “I have read this”. That records that you have read this notice (version and time). It is an acknowledgement, not consent.

What we collect

Depending on your situation, we may collect:

• full name
• date of birth (we may reuse the date of birth already held for your Right to Work check, where available)
• home address and postcode
• National Insurance number, or an indication that you do not yet have one
• for overseas-resident individuals: overseas Tax ID and the country that issued it

What we report to HMRC

For each calendar year, we report information about reportable providers to HMRC, including your identity and tax details, what you earned through Pluggerzz, the fees we deducted, the number of jobs you were paid for, and the bank account we paid you into. We send you a copy of the information we report about you by 31 January following the end of that calendar year.

Why we use this information

We use this information to:

• meet our legal obligations as an HMRC reporting platform operator (MIJAM Limited is registered for that purpose);
• keep security and audit records of how tax details are accessed; and
• respond to your rights requests.

Lawful basis (UK GDPR Article 6): Article 6(1)(c) — legal obligation.

We are not relying on consent as the Article 6 basis for collecting these tax details.

Who we share information with

• Hostinger — Hosting (primary VPS) — Manchester, United Kingdom
• Hostinger — Weekly backups (available) — Düsseldorf, Germany
• Hostinger — Sends platform emails through our hosting service.
• HMRC — Platform reporting when we make required filings — United Kingdom
• Authorised MIJAM staff — Controlled in-product access to tax details when needed for reporting or to handle your request — United Kingdom
• External accountant, if appointed for filing — Reporting information will be shared only when the reporting process is in place; we will explain the arrangements before sharing it.

Backups are held in Germany, which the UK recognises as providing adequate protection for personal data. This does not mean that all other processing or access takes place only in the UK or Germany.

Tax details are not accessible through Right to Work reviewer permissions.

How long we keep tax information

We keep tax due-diligence information for five years from the end of the relevant reportable period.

There is no blanket short deletion period for these records. Where the law requires us to keep information for that due-diligence period, we will not erase it earlier simply because you ask us to.

Hostinger retains up to two weekly backup restore points in Düsseldorf, Germany. This does not guarantee deletion exactly 14 days after a record is removed from the live service.

Your rights

You can contact us at [email protected] to exercise your rights under UK data protection law. Depending on the circumstances, these may include access, rectification, erasure where applicable and where legal retention does not require us to keep the data, restriction, data portability where applicable, and information about how we use your data.

Because we rely on a legal obligation (Article 6(1)(c)) for this tax collection, some rights (such as erasure or objection) may be limited where we must keep the information for HMRC due-diligence or reporting.

You may complain to the Information Commissioner’s Office (ico.org.uk).

Security

Tax details are encrypted at rest using a dedicated key, separate from Right to Work evidence encryption. Values are masked by default. Full values are available only through controlled, audited access.

Changes

We will update this notice when our tax-details practices change materially. The version identifier appears above and is shown where you acknowledge the notice.