Servicebird (“Servicebird”, “we”, “us”, “our”) operates an on-demand technology marketplace platform connecting UK public sector organisations — including NHS Trusts, local authorities, police forces, courts, and education authorities — with vetted freelance professionals across interpreting and translation, welfare support, psychiatric assessment, SEND transport, homecare, and appropriate adult provision. This Privacy Policy explains how we collect, use, share, and protect personal data when you use our website at https://servicebird.co.uk (the “Site”) and our platform services (the “Services”).
We are the data controller for personal data processed for our own purposes (such as website analytics, account administration, and marketing), and in some cases a data processor or joint controller in relation to data submitted by Requester organisations and Freelancer professionals through the platform, as set out below.
1.1 Who we are
Data controller: Servicebird Ltd (Company Registration Number: 17420098)
Registered office: The Wellsprings, Howell Croft South, Bolton, BL1 1SB, United Kingdom
ICO registration number: CSN8127056 (Registered with the Information Commissioner's Office under the UK Data Protection Act)
Data protection contact: info@servicebird.co.uk
1.2 What personal data we collect
Depending on how you interact with us, we may collect:
- Account and identity data: name, job title, employer/organisation, email address, phone number, login credentials.
- Freelancer verification data: DBS/right-to-work checks, professional qualifications, accreditation numbers, insurance details, references, and (where relevant to the service being provided) sensitive category data such as criminal record information processed under UK GDPR Article 10.
- Service and booking data: assignment details, location and timing of engagements, communications between Requesters and Freelancers, and any case-related information shared to fulfil a booking.
- Payment data: billing details and transaction records (payment card details are processed by our payment provider and are not stored by us — see Section 1.6).
- Technical data: IP address, browser and device type, log data, and cookies (see our separate Cookie Policy in Section 2).
- Special category data: where the nature of a service requires it (for example, psychiatric assessment, welfare support, or appropriate adult provision), the platform may facilitate the transfer of special category data — such as health information — between a Requester organisation and a Freelancer. In these cases the Requester organisation is normally the data controller for that data, and Servicebird acts as a data processor providing the technical means of transfer.
1.3 How we use your data and our legal basis
We process personal data on the following legal bases under UK GDPR:
- Performance of a contract — to create accounts, match Requesters with Freelancers, administer bookings, and provide customer support.
- Legal obligation — to carry out safeguarding checks, respond to regulators, and meet public sector procurement and record-keeping requirements.
- Legitimate interests — to improve the Site and Services, prevent fraud, and maintain platform security, where these interests are not overridden by your rights.
- Consent — for marketing communications and non-essential cookies, which you can withdraw at any time.
- Explicit consent / substantial public interest — for special category data processed in connection with health, welfare, or safeguarding-related assignments, in accordance with Article 9 UK GDPR and Schedule 1 of the Data Protection Act 2018.
1.4 Who we share data with
- Requester organisations and Freelancer professionals, strictly as needed to fulfil a specific booking.
- Verification and vetting providers (e.g. DBS umbrella bodies, qualification-checking services).
- IT infrastructure, hosting, and payment providers who process data on our behalf under data processing agreements.
- Regulators, law enforcement, or courts where we are legally required to disclose data.
- A prospective buyer or investor in the event of a corporate transaction, subject to appropriate confidentiality safeguards.
We do not sell personal data to third parties.
1.5 International transfers
Where any supplier or sub-processor is located outside the UK, we ensure an adequate level of protection through mechanisms such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
1.6 Payment processing
Card payments and electronic disbursements are processed by our regulated payment providers (including Stripe Payments UK and authorised FCA payment gateways). We do not store full card details on our own systems. Please refer to each provider’s published privacy notice for details of how they process payment transactions.
1.7 Data retention
We retain personal data only for as long as necessary for the purposes it was collected, including to satisfy legal, accounting, or safeguarding record-keeping requirements. Specifically: financial and transaction records are retained for 7 years to meet HMRC statutory requirements; vetting and safeguarding verification audits are retained for 6 years following the conclusion of an assignment; active account profiles are maintained for the duration of the engagement; and transient session cookies are cleared within 30 days.
1.8 Your rights
Under UK GDPR you have the right to: access your personal data; request correction of inaccurate data; request erasure; restrict or object to processing; request data portability; and withdraw consent at any time. To exercise any of these rights, contact us at info@servicebird.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.
1.9 Children
Our Services are intended for use by professional adults and organisations. We do not knowingly collect personal data from children, save where a Requester organisation shares information about a service user (which may include a minor) strictly for the purpose of arranging a booking, in which case Servicebird acts as a processor on the Requester’s instructions.
1.10 Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via the Site or by email where appropriate. The “Last updated” date at the top of this page shows when it was last revised.