Privacy Policy & GDPR

This Privacy Policy explains how LuxService EU S.a.r.l-s (“LuxService”, “we”, “us”, or “our”) processes personal data through luxservice.eu, our applications, account dashboards, freelance marketplace, project workflows, and related invoicing, payment, payroll, support, and communication tools (collectively, the “Platform”).

This Policy applies to Clients, Freelancers, website visitors, support contacts, and other people who interact with the Platform. For processing described here, LuxService is generally the data controller. A Client or another organisation may be the controller where it independently determines how personal data is used within a project.

Personal data means information relating to an identified or identifiable person. This Policy should be read together with our Terms of Use and any notice shown when data is collected.

The data we collect depends on how you use LuxService. It may include:

• Identity and contact data: name, username, email address, telephone number, country, address, and profile photograph.
• Account and verification data: login records, authentication details, identity or business-verification information, work eligibility, and fraud-prevention results.
• Professional profile data: skills, experience, education, languages, portfolio, rates, availability, certifications, work preferences, and reviews.
• Project and communication data: project descriptions, budgets, proposals, contracts, milestones, messages, meetings, files, feedback, and support requests.
• Transaction and compliance data: billing details, payment status, invoices, payout details, tax information, payroll information, refunds, and transaction references.
• Technical and usage data: IP address, device and browser information, timestamps, pages and features used, diagnostic records, approximate location, and cookie identifiers.
• Marketing preferences: communication choices, campaign interactions, and consent records.

Please do not provide passwords, full payment-card numbers, one-time authentication codes, or sensitive personal data unless the Platform expressly requests it through an appropriate secure workflow.

We receive personal data directly from you when you create an account, complete a profile, describe a project, submit a proposal, communicate, upload a file, make or receive a payment, use an invoicing or payroll tool, contact support, or subscribe to communications.

We may also receive data from Clients or Freelancers involved in the same project, identity and authentication providers, payment and banking providers, app stores, referral partners, publicly available professional sources, and service providers that support Platform security and operation.

We automatically receive limited technical and usage information when you visit or use the Platform. Where required, non-essential cookies and similar technologies are used only with your consent.

We process personal data only when we have a valid purpose and legal basis. Depending on the activity, we use data to:

• Create, authenticate, secure, and administer accounts.
• Publish professional profiles and project requests according to your settings.
• Match Clients with Freelancers and support proposals, contracts, milestones, delivery, and reviews.
• Process payments, payouts, invoices, refunds, payroll functions, and transaction records.
• Verify users, prevent fraud and abuse, enforce our Terms, and protect the Platform.
• Provide customer support and communicate about projects, accounts, security, and service changes.
• Analyse and improve Platform performance, accessibility, matching quality, and user experience.
• Meet accounting, tax, regulatory, law-enforcement, and other legal obligations.
• Send marketing communications where permitted and honour communication preferences.

Under the GDPR, our legal basis depends on why the data is used:

• Contract: processing required to provide an account, match or manage a project, support a transaction, or provide a requested Platform tool.
• Pre-contractual steps: processing required to respond to a request before a contract is formed.
• Legal obligation: processing required for tax, accounting, anti-fraud, regulatory, or lawful authority requests.
• Legitimate interests: securing and improving the Platform, preventing misuse, supporting users, and operating our business where those interests are not overridden by your rights.
• Consent: processing such as optional marketing or non-essential cookies where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.

Where special-category data is exceptionally required, we will identify an additional lawful condition or obtain explicit consent as required by law.

LuxService may use automated or AI-assisted tools to interpret project descriptions, identify relevant skills, recommend Freelancers, organise search results, detect abuse, or help users prepare Platform content.

Matching suggestions are decision-support tools. Clients and Freelancers decide whether to contact, select, or work with one another. We do not intend to make solely automated decisions that produce legal or similarly significant effects unless we provide the information and safeguards required by law.

You may contact us if you have questions about a matching result or believe information used by an automated tool is inaccurate.

We do not sell personal data. We share only what is reasonably necessary for the purposes described in this Policy, including with:

• Clients and Freelancers: profile, proposal, project, contact, contract, delivery, and transaction information needed for an engagement.
• Service providers: hosting, cloud storage, authentication, communications, customer support, analytics, security, payment, banking, invoicing, payroll, and marketing providers.
• Professional advisers and authorities: auditors, accountants, lawyers, insurers, regulators, courts, law enforcement, or debt-recovery providers where lawful and necessary.
• Business transfers: parties involved in a merger, investment, restructuring, financing, or sale, subject to appropriate confidentiality and legal safeguards.

Technology or support providers, including SmartTeller where engaged, may access data only to perform contracted services for LuxService and are subject to data-protection and confidentiality obligations.

LuxService is based in Luxembourg and serves users in Europe and beyond. Some service providers or recipients may process data outside the European Economic Area.

When GDPR-protected data is transferred to a country without an adequacy decision, we use an available lawful transfer mechanism, such as European Commission Standard Contractual Clauses, together with supplementary safeguards where required. You may contact us for information about the safeguards relevant to your data.

Core Platform data is stored in databases and systems used to operate LuxService. Data may also be processed through trusted cloud, email, document, authentication, support, payment, invoicing, and payroll providers.

We use reasonable technical and organisational measures designed to protect personal data, including access controls, authentication, encryption where appropriate, monitoring, backups, contractual controls, and staff or provider confidentiality requirements.

No internet service can guarantee absolute security. You are responsible for securing your account credentials and must notify support@luxservice.eu promptly if you suspect unauthorised access.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including while an account or project is active and for periods required to resolve disputes, prevent fraud, enforce agreements, and meet legal, tax, accounting, and regulatory obligations.

Retention periods vary by data type and legal requirement. When data is no longer required, we delete or anonymise it, unless continued storage is required or permitted by law. Backup copies may remain for a limited period until securely overwritten.

We may use essential cookies to operate login, security, preferences, and core Platform functions. With consent where required, we may use analytics or marketing technologies to understand Platform use, measure campaigns, and improve services.

You can manage non-essential cookie choices through any consent controls made available on the Platform and through your browser settings. Blocking essential cookies may prevent parts of the Platform from working.

You can unsubscribe from promotional email using the link in the message or by contacting us. We may still send non-marketing messages required for your account, projects, transactions, security, or legal notices.

Subject to the conditions and limits in applicable law, you may have the right to:

• Request access to and a copy of your personal data.
• Correct inaccurate or incomplete personal data.
• Request deletion of personal data.
• Restrict or object to certain processing, including direct marketing.
• Receive eligible data in a structured, commonly used, machine-readable format.
• Withdraw consent at any time where processing relies on consent.
• Request safeguards concerning qualifying automated decision-making.
• Lodge a complaint with Luxembourg’s CNPD or another competent supervisory authority.

To exercise a right, email support@luxservice.eu. We may need to verify your identity and clarify the request. We will respond within the period required by applicable law.

You may request account deletion through the application, the account-deletion page, or LuxService Support. Deleting an account does not require us to erase information that must be retained for legal compliance, tax and accounting records, fraud prevention, unresolved disputes, outstanding transactions, or the establishment, exercise, or defence of legal claims.

Where complete deletion is not yet legally possible, access will be restricted and the data will be deleted or anonymised when the applicable retention requirement ends.

LuxService is a professional-services platform and is not intended for children. A person who cannot legally enter into the relevant agreement must not create an independent account or use paid Platform services without a lawful representative where applicable.

If you believe a child has provided personal data unlawfully, contact us so that we can investigate and take appropriate action.

We may update this Policy to reflect changes in the Platform, service providers, legal requirements, or data practices. Material changes will be communicated by an appropriate notice, and the effective date at the top of this page will be updated.

For privacy questions or requests, contact support@luxservice.eu or use our contact page.