UK GDPR & Data Protection Act 2018 compliant
1. Who we are
Able AI Agent Ltd, company No. 16302164, registered office 29 Broadhurst Gardens, Reigate, Surrey RH2 8AW, is the controller of personal data processed via the Able website, mobile PWA and associated APIs (collectively "the Platform").
Contact: aw@able.global
2. What data we collect & why
| Category | Examples | Lawful basis |
| Account & identity | Name, e-mail, mobile, password hash | Contract (Art 6(1)(b)) |
| Professional profile | Skills, video bio, rates, Right to Work evidence | Contract; Legitimate interests |
| Transaction data | Shift and booking details, hours, invoices, Stripe IDs | Contract; Legal obligation (tax) |
| Technical & usage | IP address, device ID, Firebase Auth tokens, error logs | Legitimate interests (fraud prevention, site security) |
| Marketing consents | Opt-in history, preferences | Consent (Art 6(1)(a)) |
Special-category data is neither sought nor processed. Video bios are hosted and displayed as you record them; we do not perform biometric identification on them. We rely on automated processing (AI matching) only to offer shifts and make recommendations; no decision with legal or similarly significant effects is taken without human review.
3. How long we keep data
- Active account: while your account remains open.
- Dormant account: we contact you with reminders while your account is inactive; accounts are deleted after 24 months of inactivity unless you ask us to keep your profile open, or sooner on request.
- Financial records: 6 years + current tax year.
4. Sharing & international transfers
We share personal data only with service providers who process it on our instructions:
- Payments: Stripe Payments UK Ltd (processor, Art 28 DPA).
- Hosting & infrastructure: Cloudflare, Inc. (website); Google Firebase / Google Cloud Platform (UK/EU).
- AI inference: third-party model inference providers under contract, protected by the UK Addendum or SCCs; the current list is available on request from aw@able.global.
- Email communications: MailerLite (worker and venue communications).
- CRM: HubSpot (business contact management for venues and partners).
We do not sell personal data. Where suppliers are outside the UK/EEA, transfers are protected by the UK Addendum to the EU SCCs or an adequacy decision.
5. Your rights
Access · Rectification · Erasure · Restriction · Portability · Objection · Human review of automated decisions.
Requests: aw@able.global — we reply within one calendar month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).
6. Cookies & analytics
See our separate Cookies Policy.
7. Changes
Material updates will be flagged in-app and by e-mail 14 days before taking effect.
Last updated: 20 August 2026