Privacy Policy

1. Who we are

The Maintenance Cluster (“we”, “our”) operates a B2B platform that connects industrial and commercial organisations with specialist maintenance partners. This Privacy Policy explains how we process personal data under the EU General Data Protection Regulation (GDPR).

2. What data we collect

• Account data — email address, hashed password, role.
• Intake submissions — company name, contact name, sector, problem description, urgency, and similar fields you provide when using the intake wizard.
• Contact-form submissions — name, email, message.
• Partner application data — company details, certifications, references, and uploaded documents (partners only).
• Chat transcripts — messages sent to MaintBot, retained for service-quality review.
• Technical data — IP address, browser type, and cookies used to keep you signed in and remember your consent decisions.

3. Legal basis for processing

We process personal data on one of the following bases:

• Consent — for intake submissions, contact-form enquiries, and analytics cookies.
• Contract — to operate your account and partner relationship.
• Legitimate interests — to keep the platform secure, prevent abuse, and improve our service.

4. Cookies

Essential cookies keep you signed in and remember your consent decision. With your consent, we may also store anonymous analytics cookies. You can change your preferences any time by clearing your browser storage.

5. Data sharing

We share your intake submission with the partner(s) the matching engine recommends, and only after you confirm you want to be contacted. We do not sell personal data to third parties. We use sub-processors for hosting, email delivery, and LLM-assisted matching; a current list is available on request.

6. Retention

Account data is retained for as long as you have an active account, plus 12 months. Intake submissions and leads are retained for 36 months. Chat transcripts are retained for 12 months. You can request earlier deletion at any time (see section 7).

7. Your rights

Under GDPR you have the right to access, correct, or delete your data, to restrict or object to processing, and to data portability. To exercise any of these rights, contact us via the contact form with subject “Data subject request”.

8. Contact

Questions about this policy? Please use the contact form or email the address listed in our footer.

This page is a baseline notice intended for the launch of the platform; the cluster's legal counsel may issue a more detailed policy. If you have specific compliance questions please reach out before relying on this notice.