Privacy Policy

Effective date: 28 August 2026

This Privacy Policy explains how fix246 processes personal data when you use https://fix246.com.

1. About this Privacy Policy

This Privacy Policy explains how fix246 collects, uses, stores and shares personal data when you visit or use fix246, create an account, create or update a profile, post a Job Request, add a Service Offering, use Availability, use the Service Network, use the Opportunity Hub or External Opportunity Radar, save Favorites, create Search Alerts, view Smart Matching results, use My Social Showcase, send messages, submit an advertising enquiry, use an optional payment-method indicator or otherwise interact with the platform.

fix246 is operated from Germany and focuses on users, properties, services and opportunities in Barbados. Because of this, data protection rules in Germany, the European Union and Barbados may be relevant.

fix246 is designed as a bridge between Germany and Barbados. The platform is built for the practical needs of Barbados, while its organisational and technical operation follows a German and European approach to privacy, transparency, security and accountability.

2. Germany, Barbados and our approach to privacy

fix246 combines a Barbados-focused service experience with a German and European approach to responsible platform operation.

Germany and the European Union provide a strong legal and organisational framework for data protection, including the General Data Protection Regulation (GDPR). We use this framework as an important benchmark for how we handle personal data on fix246.

Where possible, we aim to use reliable hosting, infrastructure and service providers located in Germany or the European Union. This supports clear responsibilities, structured data handling, strong security expectations and transparent user rights.

At the same time, fix246 is built for Barbados. Users in Barbados may post Job Requests, offer services, communicate with each other, save Service Providers, use availability features and build trusted service connections. This means that some personal data may naturally be visible or shared between users in Barbados as part of the platform, for example through public listings, profiles, messages or Service Network features.

Our goal is to combine German and European standards for privacy, structure and platform operation with a practical Barbados-focused service platform.

3. Who is responsible for your data?

The controller responsible for the processing of personal data on fix246 is:

Lars Kreis
trading as fix246
Germany

Email: mail[at]fix246.com

4. Privacy Contact

fix246 has not appointed a Data Protection Officer because fix246 is currently not legally required to appoint one.

For questions about privacy, data protection, the processing of your personal data or the exercise of your data protection rights, contact:

report[at]fix246[dot]com

5. Summary

fix246 processes personal data to operate a platform where individuals and businesses can post Job Requests, present Service Offerings, communicate with each other, manage availability, save listings and Service Providers, organise opportunities, use the External Opportunity Radar to view selected public external opportunities, create Search Alerts, receive Smart Matching results, feature public social media posts and submit advertising enquiries.

Some information is public, especially information in public profiles, Service Offerings, Job Requests, availability information, Social Showcase entries and voluntary public profile indicators.

Other information, including private messages, account settings, Search Alerts, Favorites, Smart Matching selections, Service Network entries, Opportunity Hub records and internal notes, is generally not public.

fix246 may process this information for platform operation, delivery of requested features, communication, support, security, fraud and abuse prevention, moderation, service improvement, legal compliance and the establishment, exercise or defence of legal claims.

6. Data we collect

6.1 Account data

When you create an account, we may collect:

• username;
• email address;
• password hash;
• account creation date;
• login data;
• account type;
• profile settings;
• password reset requests;
• Google sign-in data if you use Google login;
• security and authentication information.

We do not store your Google password.

6.2 Profile and Service Provider data

If you create or update a profile or Service Provider profile, we may collect:

• display name;
• profile photo or avatar;
• business name;
• account type;
• Service Provider status;
• Business Service Provider status;
• Commercial Client status;
• contact or social links that you add;
• profile description;
• service categories;
• Parish or service area information;
• availability;
• opening hours;
• images and other profile content.

6.3 Job Request data

If you post a Job Request, we may collect and publish information such as:

• job title;
• job description;
• type of work;
• required provider type;
• category;
• Parish or location information;
• timing information;
• images;
• author profile information;
• date of publication;
• replies or messages related to the request.

You should not include unnecessary sensitive information or private addresses in public fields. If an exact address is needed, it should generally be shared only with the relevant Service Provider through private communication.

6.4 Service Offering data

If you add a Service Offering, we may collect and publish information such as:

• service title;
• service description;
• categories and subcategories;
• Parish or service area;
• availability;
• opening hours;
• business name;
• images;
• profile links;
• Service Provider account type;
• listing date and status.

6.5 Availability and opening hours

fix246 may process availability and opening-hours information entered by Service Providers.

This may include:

• dates over the next 14 days;
• available time slots;
• “By appointment” status;
• “Not available” status;
• regular weekly opening hours;
• automatic availability labels such as available today, tomorrow, this week or in the next two weeks.

Availability may be displayed publicly in Service Offerings, search results, Service Provider pages, listing cards, Service Network features or Commercial Client tools.

Availability information is provided by the Service Provider and is intended as practical guidance only. Users should confirm availability directly before relying on it.

6.6 Messages and communication data

If you use messaging or contact functions, we may process:

• sender and recipient;
• message content;
• date and time;
• related listing or profile;
• reply status;
• technical delivery information.

Private messages are stored in the active platform database for 180 days and are then automatically deleted. fix246 does not routinely monitor private messages. Authorised persons may access messages that are still technically available only in limited cases, such as a specific support request, reported misuse, a security incident or a legal obligation.

6.7 Service Network data

If you use the Service Network, we may process:

• saved Service Providers or Service Offerings;
• categories of saved providers;
• availability filters used;
• profile or network display information;
• interactions with saved providers.

This data is used to help eligible users organise trusted Service Providers, check availability and contact saved Service Providers more efficiently.

6.8 Opportunity Hub data

If you use the Opportunity Hub, we may process:

• saved Job Requests;
• opportunity status;
• whether you marked a request as saved, interested, waiting, quoted, won or done;
• next action notes;
• next action dates;
• internal notes;
• client or requester connections;
• statistics such as open opportunities, won opportunities or known requesters.

Opportunity Hub data is primarily used as a workspace for eligible Business Service Providers.

6.9 Advertising enquiry data

If you submit an advertising enquiry, we may collect:

• your name;
• email address;
• business or company name;
• preferred advertising placement;
• message content;
• consent checkbox information;
• date and time of submission;
• technical anti-spam information.

We use this information to respond to your enquiry and discuss potential advertising or promotional placements.

Advertising placement and performance data

When advertisements or sponsored placements are displayed on fix246, we may record limited first-party performance information, including:

• the relevant advertising campaign;
• the advertising placement;
• the type of page on which the advertisement was displayed;
• the broad device category, such as desktop or mobile;
• the number of advertisement impressions;
• the number of advertisement clicks;
• the resulting click-through rate.

We use this information to operate advertising placements, check their technical performance, prepare internal statistics and, where applicable, provide performance information to the relevant advertiser.

These statistics are not used to create behavioural advertising profiles, track visitors across unrelated websites or provide personalised advertising. fix246 does not use third-party advertising networks, retargeting technologies or advertising tracking cookies.

6.10 My Social Showcase data

My Social Showcase allows registered users to select public posts from supported social media platforms and associate them with their own Job Requests or Service Offerings.

Supported platforms may currently include Instagram, Facebook and TikTok.

When you add, preview, manage or display a Social Showcase post, fix246 may process:

• your user account identifier;
• the public social media post URL submitted by you;
• the relevant social media platform;
• the public name or username of the original creator;
• the creator’s public profile URL, where available;
• a public thumbnail or preview image;
• a public caption, title or description;
• the type of media;
• a technical URL used to display or link to the post;
• the Job Requests or Service Offerings to which the post is assigned;
• the display order of featured posts;
• whether the entry is active or hidden;
• the date on which the entry was created;
• the date and result of technical availability checks; and
• aggregate numbers of Showcase activations, post opens and clicks to original posts.

The information is obtained from the public URL submitted by the user and from publicly available information provided by or displayed on the relevant social media platform.

fix246 may retrieve this information through public embedding information, public page metadata or other publicly accessible technical information. No connection between the user’s fix246 account and their social media account is required, and fix246 does not receive the user’s social media password.

fix246 may periodically request the public post URL to check whether the post remains publicly available. If a post repeatedly appears to be unavailable, it may no longer be displayed on the associated listing.

On public Job Requests and Service Offerings, external Social Showcase content is blocked by default. The visitor must first choose to load the Showcase before external preview media is requested from the relevant social media platforms.

When a visitor loads the Showcase or opens a social media post, the visitor’s browser may connect directly to the relevant external platform. The external provider may receive information such as:

• the visitor’s IP address;
• browser and device information;
• operating system information;
• date and time of access;
• the fix246 page from which the content was loaded;
• referrer information;
• cookies, identifiers or account information already held by the external provider; and
• information about interaction with the external content.

The external platform processes this information under its own privacy policy and as an independent controller.

On the private My Social Showcase management area, external preview media may be loaded when the account holder previews or manages a selected public post.

Social Showcase engagement counters are stored as aggregate totals associated with the relevant listing or featured post. The counters themselves do not create an individual visitor profile and do not store an individual click history.

Normal technical server and security logs may be generated separately when the platform or tracking endpoint is accessed.

6.11 Search Alerts and saved searches

Registered users may create Search Alerts for new Job Requests or Service Offerings.

When you create or manage a Search Alert, fix246 may process:

• your user account identifier;
• the email address associated with your account;
• the type of listing covered by the alert;
• search words entered by you, where applicable;
• the selected category or Area of Work;
• selected Parish information;
• selected Service Provider or requester types;
• selected availability filters;
• other search parameters selected by you;
• the technical alert identifier;
• the date on which the alert was created or last checked;
• information used to prevent duplicate alerts; and
• technical information relating to the generation or delivery of alert emails.

Search Alerts are stored as part of the user’s account and are used to identify newly created listings that match the selected criteria.

Search Alert emails are functional service messages requested by the user. They are not behavioural advertising or unrelated marketing emails.

A Search Alert may be deleted by the user through the relevant account or Search Alert functions.

6.12 Favorites and saved listings

Registered users may save Service Offerings, Job Requests, Service Providers or other supported listings as Favorites or add them to organisational areas such as the Service Network or Opportunity Hub.

When you save a listing, fix246 may process:

• your user account identifier;
• the identifier of the saved listing or profile;
• the type of saved content;
• the relationship between your account and the saved item; and
• organisational information added by you, where available.

Saved Favorites are generally private to the relevant user account.

The owner of a listing is not informed merely because another user saves the listing as a Favorite, unless fix246 expressly introduces and describes such a function.

Favorites and saved listings remain stored until the user removes them, the relevant listing is deleted or the account is deleted, subject to limited backup, security and legal retention requirements.

6.13 Smart Matching data

Smart Matching is an optional feature that compares Job Requests, Service Offerings and relevant profile information to identify potentially relevant listings.

Depending on the available information, Smart Matching may process:

• the user’s selected Job Request or Service Offering;
• listing categories and Areas of Work;
• listing headlines and descriptions;
• requested or offered Service Provider types;
• Parish and service-area information;
• availability and requested timing information;
• relevant public profile or listing information;
• the identifiers of potentially matching listings;
• automatically calculated matching components; and
• an automatically generated match label or ranking.

The matching process may analyse wording in listing headlines and descriptions and may interpret timing expressions such as dates, days of the week, “today”, “tomorrow”, “this week” or “next week”.

Smart Matching uses this information only to provide optional informational results to the relevant user.

Match pairings are not stored as permanent posts, user-profile attributes or permanent database records. Calculated results are normally stored only in a short technical cache, currently for approximately five minutes, to avoid unnecessary repeated calculations.

The underlying Job Requests, Service Offerings, profiles, availability entries and Favorites remain subject to their normal retention periods.

Smart Matching does not make decisions that produce legal or similarly significant effects on users. It does not automatically approve, reject, employ, engage, verify or exclude a user.

Users remain responsible for reviewing listings, deciding whom to contact and carrying out their own checks before entering into an agreement.

6.14 Voluntary BiMPay information

fix246 may allow users to voluntarily indicate that they use or accept BiMPay.

When a user selects “Using BiMPay”, fix246 may process:

• the user’s account and profile identifier;
• the voluntary “Using BiMPay” selection;
• the Service Offerings and Job Requests associated with the user;
• whether the information is displayed on a published profile or listing;
• aggregate adoption and visibility figures;
• aggregate views of the relevant BiMPay information page;
• aggregate clicks on “Using BiMPay” information links; and
• aggregate clicks to official BiMPay resources.

The user’s selection may be displayed publicly on the user’s profile, Service Offerings, Job Requests and other relevant public platform areas.

The information is provided voluntarily by the user and is not independently verified by fix246.

fix246 does not use this feature to process payments and does not:

• initiate, authorise, receive, hold, transfer or settle payments;
• access a user’s BiMPay account;
• collect BiMPay login credentials;
• collect account balances;
• collect payment amounts;
• collect recipient information;
• collect transaction references;
• receive confirmation that a transaction was completed; or
• create an individual financial or transaction history.

Dedicated BiMPay reporting is aggregated and does not store individual visitor click histories, visitor cookies or visitor IP addresses.

Normal web server and security logs may nevertheless be generated independently when a fix246 page or link is accessed.

Aggregate reporting may be used to evaluate the visibility and use of the feature and may be shared with relevant project or cooperation partners. Such reporting does not include individual financial or transaction information.

6.14A External Opportunity Radar and public Threads data

External Opportunity Radar is an Opportunity Hub feature for identifying selected public opportunities outside fix246 that may be relevant to a Service Provider’s published Service Offerings. The feature may use approved external public sources, including Threads through the Meta Threads API and public government procurement sources.

When the Threads source is active, fix246 searches recent public Threads posts using selected Barbados and property-service search terms. For a returned public Threads post, fix246 currently processes only the data needed for the feature:

• the stable Threads post identifier;
• the public post text;
• the public username returned with the post;
• the public permalink to the original post; and
• the post timestamp.

fix246 may also create and store limited Radar metadata derived from that public content, including the search term that returned the post, Barbados location signals, relevant Area of Work or Parish signals, the local classification result and score, source-availability checks, dates of collection and expiry, and whether an eligible fix246 user saved or dismissed the opportunity.

fix246 does not request or separately collect a post author’s private account data, direct messages, non-public content, follower lists, profile image, biography or contact details through this feature. If an author has chosen to include personal information in the public text of a post, that information may form part of the retrieved public text. Radar does not separately enrich the post with that information.

The feature uses local rule-based matching against fix246’s Areas of Work. It does not use the post data for behavioural advertising, to create a profile of a Threads user, to sell personal data or to send direct marketing. It does not automatically post, reply, like, follow, share or send a message through Threads.

An active Radar card may display a limited source excerpt, public username, date, detected location or service category, and a link labelled “View original on Threads”. The card is shown only in the private Opportunity Hub of eligible logged-in Service Providers with a matching published Service Offering. It is not published as a public fix246 listing or indexed as a public Radar page.

To access the Threads API, an authorised fix246 administrator may connect a Threads account. In that case, fix246 stores the access token, the connected Threads account’s platform user identifier, token expiry information and connection time solely to authenticate the server-side API request and maintain that connection. We do not receive or store the connected user’s Threads password.

6.15 Technical data

When you visit or use fix246, we may process technical data such as:

• IP address;
• browser type;
• device type;
• operating system;
• referring URL;
• pages visited;
• time and date of access;
• server logs;
• cookie identifiers;
• security logs;
• failed login attempts;
• spam or bot-detection signals.

6.16 Payment and billing data

If fix246 introduces paid plans, paid advertising, featured placements or other paid services, we may process:

• plan type;
• billing name and address;
• invoice details;
• tax information;
• payment status;
• transaction references;
• payment provider data.

We do not intend to store full card details unless expressly stated. Card payments, if introduced, should normally be processed by a payment provider.

7. How we use personal data

We process personal data for the following purposes:

• to provide, maintain and operate the website and platform;
• to create and manage user accounts;
• to enable login, including Google login where selected;
• to create, publish and manage Job Requests and Service Offerings;
• to display profiles, categories, Parish information, availability and opening hours;
• to enable users to contact and communicate with each other;
• to provide the Service Network and Opportunity Hub;
• to save and organise Favorites and listings;
• to create and deliver Search Alerts;
• to calculate and display Smart Matching results;
• to provide and manage My Social Showcase;
• to retrieve and display public social media preview information;
• to verify whether featured public social media posts remain available;
• to record aggregate Social Showcase engagement;
• to provide voluntary public profile and payment-method indicators where available;
• to respond to advertising and business enquiries;
• to provide customer and technical support;
• to prevent fraud, spam, misuse, automated abuse and unauthorised access;
• to protect users, accounts, data and platform infrastructure;
• to moderate content and enforce the Terms of Use;
• to receive, review and resolve reports and complaints;
• to maintain backups, server logs and security records;
• to improve platform functionality, usability, relevance and technical performance;
• to send account, security, Search Alert and other requested service communications;
• to administer paid services, invoices or advertising where applicable;
• to display and operate advertisements and sponsored placements;
• to record first-party advertising impressions and clicks;
• to prepare aggregate advertising and feature-performance reports;
• to comply with legal, regulatory, tax and accounting obligations; and
• to establish, exercise or defend legal claims.

8. Legal bases under GDPR

Where the General Data Protection Regulation applies, fix246 processes personal data on one or more of the following legal bases.

8.1 Performance of a contract and requested services

We process personal data where this is necessary to provide the platform, account or feature requested by the user or to take steps requested before entering into an agreement.

This may include:

• registration and account management;
• profiles;
• Job Requests;
• Service Offerings;
• messaging;
• Availability;
• Service Network;
• Opportunity Hub and a provider’s private Radar saved or dismissed state;
• Favorites;
• Search Alerts;
• Smart Matching;
• My Social Showcase;
• voluntary profile indicators;
• advertising enquiries; and
• paid services where applicable.

The legal basis is Article 6(1)(b) GDPR.

8.2 Consent

We rely on consent where consent is legally required.

This may include:

• optional marketing communications;
• non-essential cookies or similar technologies;
• loading optional external social media content; and
• other optional third-party services that cannot lawfully be used without prior consent.

Where public Social Showcase content is blocked by default, consent may be requested directly at the point at which the visitor chooses to load the external content.

Consent can be withdrawn at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The legal basis is Article 6(1)(a) GDPR.

8.3 Legitimate interests

We process personal data where this is necessary for our legitimate interests or the legitimate interests of another person and those interests are not overridden by the rights and freedoms of the affected individual.

Our legitimate interests may include:

• operating and securing the platform;
• detecting and preventing fraud, spam and misuse;
• protecting users and accounts;
• maintaining technical and security logs;
• providing customer support;
• moderating content;
• investigating reports and complaints;
• improving platform performance and usability;
• improving the relevance of search and matching functions;
• retrieving and accurately attributing public social media content selected by users;
• checking whether featured public posts remain available;
• identifying selected public external opportunities that are relevant to Barbados property-service providers;
• keeping External Opportunity Radar data current and removing source items that are no longer public or active;
• measuring aggregate platform, advertising and feature engagement;
• administering our business;
• communicating with users; and
• establishing, exercising or defending legal claims.

For public Threads data used by External Opportunity Radar, our legitimate interest is to help Service Providers identify recent, publicly available Barbados property-service opportunities without requiring the public post author to create a fix246 account. We apply safeguards designed to limit the effect on the author: Radar requests only the five fields described in section 6.14A, accepts only public posts with a strong Barbados signal, displays the result only to eligible logged-in Service Providers with a matching Area of Work, uses a limited excerpt and original-source link, does not use the data for advertising or automated outreach, and provides a practical deletion and objection route in section 21A.

The legal basis is Article 6(1)(f) GDPR.

8.4 Legal obligations

We process personal data where necessary to comply with legal, regulatory, tax, accounting, court, law-enforcement or official obligations.

The legal basis is Article 6(1)(c) GDPR.

8.5 Legal claims and protection of vital interests

Where necessary, we may process personal data to establish, exercise or defend legal claims or, in exceptional circumstances, to protect the vital interests of a person.

The applicable legal basis may include Article 6(1)(d) or Article 6(1)(f) GDPR.equest. This includes account registration, Job Requests, Service Offerings, messaging, Service Network, Opportunity Hub and paid features where applicable.

We may also process personal data to respond to an enquiry, prepare an offer or take other steps requested before entering into an advertising or business relationship.

8.2 Legitimate interests

We process data where necessary for legitimate interests, including platform security, fraud prevention, abuse prevention, moderation, service improvement, logging, business administration and communication with users.

8.3 Consent

We rely on consent where required, for example for optional marketing communications, non-essential cookies or optional third-party services that cannot lawfully be used without prior consent.

8.4 Legal obligations

We process data where necessary to comply with tax, accounting, legal, regulatory or official obligations.

8.5 Legal claims

We may process data where necessary to establish, exercise or defend legal claims.

9. Barbados data protection

Because fix246 is focused on Barbados and may process personal data of users in Barbados, the Barbados Data Protection Act, 2019-29 and related requirements may also be relevant.

Where Barbados data protection law applies, fix246 aims to process personal data fairly, lawfully, transparently, securely and only for appropriate purposes.

Users in Barbados may have rights under Barbados data protection law, including rights relating to access, correction and protection of personal data.

If a registration as a data controller or data processor becomes legally required in Barbados, fix246 will take the necessary steps to comply with the applicable requirements.

10. Public visibility

Some information provided through fix246 may be visible to other users or to the general public.

Public information may include:

• username or display name;
• public profile information;
• business name;
• profile image;
• public Service Offerings;
• public Job Requests;
• categories and Areas of Work;
• Parish or service-area information;
• availability and opening hours;
• images uploaded to profiles or listings;
• public social and website links;
• Social Showcase posts and original-creator attribution;
• public thumbnails, captions or descriptions associated with featured social media posts;
• voluntary public indicators such as “Using BiMPay”, where available;
• public guide content;
• advertisements and sponsored content; and
• other information that is clearly identified as public before publication.

Public pages may be indexed, cached or displayed by search engines and other third parties.

Information may remain temporarily available in search-engine caches or third-party archives even after it has been removed from fix246.

Users must not publish personal data that they do not want to be publicly available.

Active External Opportunity Radar cards are not public pages. They may contain limited data from a public external source, such as the public username, source-text excerpt, source link, timestamp and inferred service or location signal. This information is visible only to eligible logged-in Service Providers with a matching published Service Offering, or to the same logged-in user who previously saved the item to their private Opportunity Hub.

The following information is generally not public:

• account settings;
• Search Alerts;
• Favorites;
• private Service Network organisation;
• private Opportunity Hub records;
• internal notes and next-action dates;
• private messages; and
• individual Smart Matching results.

11. Sharing personal data with other users

fix246 is designed to connect users. Certain personal data is therefore displayed or shared with other users as part of the requested platform functions.

For example:

• visitors may view public profiles, Job Requests and Service Offerings;
• Job Request posters may receive messages from Service Providers;
• Service Providers may view public Job Requests and requester profile information;
• users may view public availability, opening hours and service areas;
• the sender and recipient can view messages exchanged between them;
• visitors may view public Social Showcase entries and original-creator attribution;
• visitors may view voluntary public indicators selected by a user;
• users may save public listings in their private Favorites, Service Network or Opportunity Hub;
• eligible Service Providers may receive a private External Opportunity Radar result containing limited data from a public external source where it matches their published Service Offerings; and
• registered users may receive private Smart Matching results based on relevant public listings and their own account content.

Saving a listing or receiving a Smart Matching result does not make the saving user’s private organisational information visible to the listing owner.

12. Sharing data with service providers

We may share data with technical and business service providers who help us operate fix246, including:

• hosting providers;
• domain and email providers;
• WordPress and plugin infrastructure;
• security and backup services;
• spam protection providers;
• Google login services;
• Google reCAPTCHA services for account registration security;
• Cloudflare Turnstile services for contact and advertising enquiry form security;
• payment providers if paid features are introduced;
• accounting, tax and legal advisers;
• customer support tools if used.

Where possible, we aim to use reliable service providers located in Germany or the European Union. Some providers, especially global technology providers such as Google, may process data outside Germany, the European Union or Barbados.

These providers may process data only for the relevant service and subject to applicable data protection requirements.

12A. External social media platforms

Instagram, Facebook and Threads are services provided by entities within the Meta group. TikTok is provided by the relevant TikTok entity for the visitor’s region.

These external providers do not act solely as processors on behalf of fix246. They process information under their own terms and privacy policies and may act as independent controllers.

When a user adds a Social Showcase URL, fix246’s server may request the public URL to obtain public preview and attribution information or to check whether the post remains available. When a visitor chooses to load or open Social Showcase content, the visitor’s browser may connect directly to the relevant external platform.

External Opportunity Radar uses a separate server-side Threads API connection, where activated, to search for and refresh selected public Threads posts as described in section 6.14A. The search does not cause a Service Provider’s browser to load an embedded Threads post, send a browser cookie to Threads or connect to Threads merely because the Radar card is displayed. A connection to Threads may occur when the Service Provider actively selects “View original on Threads”.

Meta may process the administrator’s server-side API request and the connected Threads account data in accordance with Meta’s own terms and privacy policy. When a user opens the original post, Meta may also receive technical information and may recognise that user through existing cookies, identifiers or a logged-in Threads account. fix246 does not control how Meta or another external social-media platform combines or further processes information received by it.

Users and visitors should review the privacy information of the relevant external platform before loading or using its content.

13. Hosting and technical infrastructure

fix246 is operated from Germany. Where possible, we aim to use hosting and technical infrastructure located in Germany or the European Union.

Hosting in Germany or the European Union can support a clear legal framework, structured technical responsibilities, high expectations for data security and strong user rights under the GDPR.

Our hosting and technical providers may process data that is necessary to deliver the website, store content, protect the platform, maintain backups, prevent abuse and keep the service available.

This may include IP addresses, server logs, uploaded files, account data, listing content, messages, database content, security logs and backup data.

14. Google login

fix246 may allow users to sign in or register with Google.

fix246 requests the Google scopes openid, email and profile. If you choose to sign in or register with Google, fix246 may receive your unique Google account identifier, email address, name and profile image. We use this information only to create, link and authenticate your fix246 account. We do not receive your Google password and do not use Google login data for personalised advertising or sell it to third parties. Account-related data is generally retained while your fix246 account exists and is deleted or anonymised following account deletion, subject to applicable legal, security and backup retention requirements.

Google processes data according to its own privacy policy and account settings.

15. Google reCAPTCHA

fix246 uses Google reCAPTCHA v2 to protect account registration against spam, bots, automated abuse, fake registrations and fraudulent activity.

Google reCAPTCHA is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and/or Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When reCAPTCHA is loaded or used, Google may process technical and usage-related information, including your IP address, browser and device information, cookies, interaction data and other signals used to distinguish legitimate users from automated traffic.

Google reCAPTCHA v2 may require you to confirm that you are not a robot or complete a security challenge.

Where the GDPR applies, we use reCAPTCHA on the basis of our legitimate interest in protecting account registration, users and the platform against spam, automated attacks, fake accounts, fraudulent activity and other security risks. Where consent is legally required, reCAPTCHA will be handled through the website’s applicable consent mechanism.

Data may be processed by Google outside your country, including in the United States. Google processes data in accordance with its own privacy policy and applicable data protection terms.

fix246 does not currently use Google reCAPTCHA v3.

16. Cloudflare Turnstile

fix246 uses Cloudflare Turnstile to protect the contact and advertising enquiry form against spam, bots, fraudulent submissions and automated abuse.

Cloudflare Turnstile is provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA.

When Turnstile is used, Cloudflare may process technical security signals such as the visitor’s IP address, browser and device information, user-agent information, TLS-related signals, the Turnstile sitekey, the originating website and information about whether a challenge or verification was successfully completed.

This information is used to distinguish legitimate visitors from automated traffic, generate a verification token and validate that token when the form is submitted.

According to Cloudflare, Turnstile signals are used for bot detection and security and are not intended for advertising, behavioural profiling or retargeting.

Where the GDPR applies, we use Turnstile on the basis of our legitimate interest in protecting our forms, website and business communication against spam, automated submissions, fraudulent enquiries and security risks.

Turnstile may involve the processing of data outside the European Economic Area, including in the United States. Cloudflare processes data in accordance with its own privacy information and applicable data protection arrangements.

17. Cookies

fix246 may use cookies and similar technologies.

17.1 Essential cookies

Essential cookies are needed for login, account sessions, security, form submission, spam prevention and basic website functions.

Google reCAPTCHA may set or access cookies that are necessary for its security and risk-analysis functions when reCAPTCHA is executed during account registration.

Cloudflare Turnstile may use technical security mechanisms necessary to generate and validate a bot-protection token for the protected form.

17.2 Preference cookies

Preference cookies may remember settings such as interface choices or user preferences.

17.3 Analytics cookies

fix246 does not currently use third-party analytics cookies or analytics technologies to track visitors across websites.

Limited first-party aggregate statistics may be recorded without creating a cross-site behavioural profile. These may include advertisement impressions, advertisement clicks, Social Showcase activations, post opens, clicks to original posts and aggregate interactions with other platform features.

If optional analytics cookies or comparable non-essential analytics technologies are introduced in the future, this Privacy Policy, the Cookie Policy and the applicable consent mechanism will be updated before they are used.

17.4 Marketing or advertising cookies

fix246 does not use cookies for behavioural advertising, personalised advertising, retargeting or cross-site advertising tracking.

Advertisements and sponsored placements may be displayed directly by fix246. Limited first-party statistics, such as impressions, clicks, placement, page type and broad device category, may be recorded to measure advertising performance.

These internal advertising statistics do not require the use of third-party advertising networks or the creation of cross-site visitor profiles.

If fix246 introduces marketing cookies, behavioural advertising or third-party advertising technologies in the future, this Privacy Policy and the applicable consent mechanism will be updated before those technologies are used.

17.5 External social media content

External Social Showcase content on public listings is blocked by default.

Before activation, fix246 displays a first-party information and activation area. The external social media preview images and embedded players used by the public Showcase are not requested by the visitor’s browser until the visitor chooses to load the Showcase.

After activation, the visitor’s browser may request external preview media from Instagram, Facebook or TikTok.

When the visitor opens an Instagram or TikTok post, an external embedded player may be loaded. Depending on technical availability, Facebook content may be displayed through an external preview and a link to the original post.

The external provider may use cookies, local storage or other similar technologies and may process technical and interaction information.

Further information is provided in the Cookie Policy.

18. Consent and point-of-use activation

fix246 does not currently use a general consent banner for third-party analytics or behavioural advertising because those technologies are not currently active.

Optional external Social Showcase content on public listings is controlled through point-of-use activation.

The external content remains blocked until the visitor selects the button provided directly at the Showcase.

The activation applies only to the current page view. fix246 does not currently store the activation as a permanent, site-wide consent preference.

Reloading the page blocks the external Social Showcase content again.

The account holder’s private My Social Showcase management and preview functions may load external preview media when the account holder chooses to preview or manage a selected public post.

Where fix246 introduces additional non-essential cookies, analytics, marketing technologies or third-party services in the future, consent will be requested before those technologies are used where required by law.

Consent may be withdrawn through the available consent or activation mechanism. Withdrawal does not reverse data already transmitted to an external provider before withdrawal.

19. International data transfers

fix246 is operated from Germany and focuses on users, properties, services and opportunities in Barbados.

Where possible, we aim to use hosting, infrastructure and service providers located in Germany or the European Union.

However, some services and external platforms may process personal data outside Germany, Barbados or the European Economic Area.

These may include:

• Google login;
• Google reCAPTCHA;
• Cloudflare Turnstile;
• Instagram;
• Facebook;
• Threads;
• TikTok;
• email or security providers;
• backup providers; and
• payment providers, if paid services are introduced.

Where External Opportunity Radar uses the Threads API, the server-side request is made to Meta’s Threads service. Meta may process the request and the connected Threads account data in countries in which Meta operates, including outside the European Economic Area. The public Threads data returned to fix246 is processed under the safeguards and limited purpose described in this Privacy Policy.

Because fix246 connects users in Barbados, public listings, profile information, Job Requests, Service Offerings, availability, Parish information and messages between users may also be accessed or received in Barbados.

Where personal data is transferred outside the European Economic Area, the transfer may be based on:

• an adequacy decision;
• standard contractual clauses;
• another approved transfer mechanism;
• contractual necessity;
• explicit consent; or
• another legally permitted basis.

When a visitor chooses to load external social media content, information may be transferred directly by the visitor’s browser to the relevant external platform and processed in countries used by that provider.

Information about the safeguards used by an external provider is available through that provider’s privacy information.

20. How long we keep data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Typical retention periods and criteria include:

• account data: while the account exists and for a limited period afterwards where required for security, legal obligations or dispute handling;
• public profiles and listings: while published and for a limited period after deletion where necessary for backups, security, moderation, disputes or legal obligations;
• private messages: for 180 days in the active platform database, after which they are automatically deleted;
• deleted messages and other deleted data in backups: until the relevant backup is overwritten according to the backup cycle;
• Search Alerts: until the user deletes the alert, the associated account is deleted or the alert is otherwise no longer required;
• Favorites and saved listings: until the user removes the item, the relevant content is deleted or the associated account is deleted;
• Service Network data: while the relevant saved items, feature or account remain active;
• Opportunity Hub records, statuses, notes and next-action dates: until the user removes the record or the account is deleted, subject to legal, security and backup requirements;
• External Opportunity Radar data from an active Threads card: normally no longer than 30 days from the original post timestamp, and sooner if the original post is deleted, made non-public, expires or must be removed;
• rejected Radar candidates: normally deleted after 60 days;
• Radar candidates awaiting review or no longer supporting a live opportunity: normally archived after 90 days; an archived candidate that no longer supports a retained archived opportunity is normally deleted after 120 days in archived status;
• archived Radar opportunity records: normally retained for no more than 365 days in archived status for source-integrity, audit and dispute-handling purposes; associated candidate data is retained only for as long as it is needed to support that archived record;
• a provider’s saved or dismissed Radar state: normally for up to 30 days, or sooner where the underlying opportunity is no longer active, is removed or the user removes it;
• the access token and connected Threads account identifier: only while the authorised API connection is needed; they are cleared when the administrator disconnects the account or when fix246 receives a valid Threads deauthorisation or data-deletion callback;
• Smart Matching results: normally only in a short technical cache, currently for approximately five minutes;
• Social Showcase entries: while the entry remains saved by the account holder or until the associated account is deleted;
• Social Showcase technical availability information: while the relevant Social Showcase entry remains active;
• deleted Social Showcase entries: for a limited period in the WordPress trash, security records and backups before final deletion or overwriting;
• aggregate Social Showcase engagement statistics: while the relevant listing, featured post or account remains active and for a reasonable period afterwards for reporting, platform administration and dispute handling;
• advertising enquiries: for up to 12 months after the enquiry unless a business relationship begins;
• advertising campaign data: for the duration of the campaign and for a reasonable period afterwards for reporting, accounting, dispute handling and business administration;
• invoices and accounting records: according to applicable statutory retention periods;
• server logs: according to the technical retention periods described below;
• security records: for as long as reasonably necessary to investigate abuse, protect the platform and document security incidents;
• backups: until overwritten according to the applicable backup cycle; and
• reCAPTCHA and Turnstile information held by fix246: only for as long as required for validation, security, troubleshooting, abuse prevention or legal purposes.

Our hosting provider processes server logs for the operation, security and protection of the website. Full visitor IP addresses are generally retained for a maximum of seven days for the detection and prevention of attacks. Anonymised web-server log data may remain available for up to six weeks. Error logs are generally available for up to five days.

Other technical system logs may be processed for limited periods where necessary for security, troubleshooting and service operation.

If you request deletion, we will delete or anonymise personal data unless retention remains necessary for legal obligations, security, dispute resolution, fraud prevention, protection of rights or another legitimate and legally permitted purpose.

21. Account deletion

You may request deletion of your account by contacting termination[at]fix246[dot]com.

Deleting your account may remove or anonymise your profile and certain account data. Some information may remain where necessary, for example:

• messages already sent to other users;
• records needed for legal or tax obligations;
• security logs;
• backups until overwritten;
• content needed to resolve disputes or enforce rights;
• information that another user needs for an existing agreement or communication;
• Search Alerts associated with the account;
• Favorites and saved-listing relationships;
• private Service Network and Opportunity Hub records;
• Social Showcase entries created by the user;
• listing assignments and display order relating to Social Showcase entries;
• voluntary public profile indicators; and
• temporary Smart Matching cache entries.

21A. External Opportunity Radar and Threads data deletion

This section explains how a person can request deletion of data processed by fix246 through the External Opportunity Radar.

Connected Threads account

If an authorised Threads account connected to fix246 revokes access through Meta or Threads, or if fix246 receives a valid Threads deauthorisation or data-deletion callback, fix246 clears the locally stored access token, connected Threads platform user identifier and token-expiry information. This stops use of that connection for further Threads API requests.

Public Threads post or public-source data

If you are the author of a public Threads post, an authorised representative, or otherwise have a valid data-protection request relating to an External Opportunity Radar record, email report[at]fix246[dot]com with the subject line “External Opportunity Radar data deletion”. Please include the public post link and username, and only the minimum additional information needed to identify the record and verify your authority. If Meta has provided a deletion confirmation code, you may include it.

After reasonable verification, fix246 will remove the relevant public-source record from the active Radar and will delete or anonymise the associated Radar data unless retention remains necessary for a legal obligation, security incident, dispute, fraud-prevention purpose or another legally permitted reason. Deleted data may remain temporarily in routine backups until the relevant backup is overwritten.

You may also use this contact route to object to the processing of your public Threads post by the Radar. We will review the request and, where the objection applies, stop the processing and remove the relevant active record unless compelling legitimate grounds or another legal basis requires continued processing.

22. Your rights under GDPR

Where the GDPR applies, you may have the right to:

• access your personal data;
• correct inaccurate data;
• request deletion;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability;
• withdraw consent;
• lodge a complaint with a data protection authority.

To exercise your rights, contact mail[at]fix246[dot]com.

We may need to verify your identity before responding.

23. Your rights under Barbados data protection law

Where Barbados data protection law applies, you may have rights relating to access, correction, fair processing, security and protection of your personal data.

You may also have the right to contact the Barbados Data Protection Commission.

24. German supervisory authority

If the GDPR applies, you have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for private organisations established in Hesse is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden
Germany

Postal address:
Postfach 3163
65021 Wiesbaden
Germany

Telephone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de

25. Barbados Data Protection Commission

Where Barbados data protection law applies, you may have the right to contact the Barbados Data Protection Commission.

Data Protection Commission
Ministry of Industry, Innovation, Science and Technology
5th Floor, SSA Building
Vaucluse
St. Thomas
Barbados

Telephone: +1 246 536-1200 or +1 246 536-1212

Website:
https://www.gov.bb/Departments/data-protection-commissioner

26. Data security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Measures may include:

• access controls;
• password hashing;
• HTTPS encryption;
• backups;
• security plugins;
• logging;
• limited administrator access;
• regular updates;
• German or European hosting and infrastructure where possible;
• structured platform administration under a German and European data protection framework.

No website can guarantee absolute security. Users are responsible for keeping their own passwords and devices secure.

27. Children

fix246 is not intended for children. Users must be at least 18 years old.

We do not knowingly collect personal data from children. If you believe that a child has provided personal data, contact us so we can review and delete it where appropriate.

28. Sensitive data

Users should not post unnecessary sensitive personal data on fix246.

This includes information about health, religion, political opinions, trade union membership, ethnicity, criminal offences, precise private addresses, financial details or identity documents, unless strictly necessary and legally permitted.

fix246 may remove sensitive information that appears unnecessary, unsafe or unlawful.

29. Automated processing, Smart Matching and External Opportunity Radar

fix246 uses automated technical processes to operate platform features. These processes may include:

• displaying availability labels;
• filtering and ordering listings;
• interpreting selected dates or timing expressions;
• comparing Job Requests with Service Offerings;
• calculating Smart Matching components and labels;
• identifying newly created listings for Search Alerts;
• classifying selected public external-source content for External Opportunity Radar against Barbados relevance, service-request intent and Areas of Work;
• matching an approved Radar opportunity against the Areas of Work associated with a Service Provider’s published Service Offerings;
• detecting spam, bots and suspicious submissions;
• protecting registration and forms;
• organising categories; and
• providing aggregate platform statistics.

Smart Matching may compare Areas of Work, listing text, Service Provider types, Parish information and availability or requested timing. External Opportunity Radar uses local rule-based checks to determine whether a public source item is approved, requires manual review or is rejected. The rule result determines only whether the item may be shown as an informational lead within the private Opportunity Hub.

The results are informational suggestions only. fix246 does not use Smart Matching or External Opportunity Radar to make decisions that produce legal or similarly significant effects on a user or a public-source author.

These features do not automatically approve or reject a person as a platform user, determine whether a person may use fix246, award a contract or Job Request, employ or engage a Service Provider, determine creditworthiness, verify qualifications or identity, or prevent users from contacting each other.

Search Alerts identify newly created listings that match saved criteria. They do not make a decision about whether a user is suitable for the listing. Automated security services, including Google reCAPTCHA v2 and Cloudflare Turnstile, may analyse technical signals to distinguish legitimate visitors from automated traffic.

A failed or suspicious security assessment may prevent or delay a registration or form submission. A user who believes that a security process has incorrectly blocked an action may contact fix246 for assistance.

30. Emails and notifications

fix246 may send functional service emails and account notifications, including:

• registration and account-confirmation emails;
• email-verification emails;
• password-reset emails;
• security notices;
• message notifications;
• listing and account notices;
• Search Alert emails;
• notices concerning reports, moderation or account restrictions;
• information about requested plans or paid services; and
• important changes affecting the platform, Terms of Use or Privacy Policy.

Search Alert emails are sent because the user has created and retained an active Search Alert. A user can stop these emails by deleting the relevant Search Alert.

Marketing emails will be sent only where legally permitted or where the recipient has provided the required consent.

Where an unsubscribe function is offered, the recipient may use it to stop the relevant marketing communication.

Unsubscribing from marketing does not necessarily stop essential account, security, legal or requested service messages.

31. Advertising enquiries and business communication

If you submit an advertising enquiry, we use your data to respond, discuss placements, prepare offers and communicate about advertising opportunities.

If an advertising relationship is created, we may retain business communication, invoices and records as required for legal and accounting purposes.

32. Legal requests and enforcement

We may disclose personal data if required by law, court order, regulatory authority, law-enforcement request or where necessary to protect rights, safety, users, the platform or the public.

Before disclosing personal data in response to a governmental or law-enforcement request, fix246 will, where appropriate and legally permitted, assess the authority, legal basis, scope, jurisdiction, necessity and proportionality of the request. We may seek clarification, narrow or challenge an unlawful, invalid, unclear or disproportionate request. Any disclosure will be limited to the minimum information legally required, handled through an appropriate secure channel and documented.

We may also process and preserve data to investigate fraud, abuse, security incidents, illegal content or violations of the Terms of Use. A valid preservation request does not by itself authorise disclosure.

33. External websites and content

fix246 may contain links to or content from third-party websites and services, including:

• user websites;
• Instagram;
• Facebook;
• Threads;
• TikTok;
• public government procurement sources;
• advertisers;
• training providers;
• payment-information providers;
• Google services; and
• other external platforms.

A normal external link does not normally transmit information to the destination merely because the link appears on the page. Information is transmitted when the visitor opens the link. An External Opportunity Radar card contains fix246-rendered source information and a link to the original source. It does not embed the original Threads post or load Threads in the Service Provider’s browser until the user actively opens the original source.

External embedded content or externally hosted preview media may create a connection before the visitor leaves fix246. Public Social Showcase content is therefore blocked by default until the visitor chooses to load it.

Third parties process personal data under their own privacy policies and technical settings. fix246 does not control and is not responsible for the independent privacy practices of an external provider. Users should review the external provider’s privacy information before loading external content, opening an external link or using an external service.

34. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be published on fix246 with a new effective date. For significant changes, we may notify registered users by email or platform notice where appropriate.

35. Contact

For privacy questions, requests or complaints, contact:

fix246
operated by Lars Kreis
60599 Frankfurt am Main
Germany

Email: mail[at]fix246.com
Website: https://fix246.com