GDPR Legitimate Interests Basis for Marketing

What it is

For EU and UK users, TaskRabbit uses a legal justification called 'legitimate interests' to process your contact information, identity data, and booking data for purposes including marketing and analytics.

Why it matters (compliance & governance perspective)

Legitimate interests is a flexible legal basis that doesn't require your consent, meaning TaskRabbit may process your data for marketing-related purposes without explicitly asking you.

Consumer impact (what this means for users)

TaskRabbit collects extensive personal data — including identity documents, background check results, location, and billing information — and shares it with advertising partners and third-party service providers. Users have rights to access, correct, and delete their data, though TaskRabbit may retain some data to meet legal obligations. You can opt out of the sale of your personal information by visiting https://optout.privacyrights.info/?c=1 or submit a Consumer Rights Request at https://support.taskrabbit.com/hc/en-us/requests/new?ticket_form_id=360001457171.

What you can do

Institutional analysis (Compliance & governance intelligence)

The reliance on legitimate interests (GDPR Article 6(1)(f)) for marketing-adjacent processing activities — including contact and identity data — may be challenged under the balancing test if users' rights and interests override those of TaskRabbit. Data Protection Authorities (particularly the ICO in the UK) have scrutinised broad legitimate interest claims for marketing purposes. A Legitimate Interests Assessment (LIA) should be documented.

Applicable agencies

Provision details

Other risks in this policy

• Advertising Data Sharing / CCPA Data Sale high
• Background Check Data Collection high
• Right to Delete Personal Information medium
• Merger and Acquisition Data Disclosure medium
• Cross-Border Data Transfer (Canadian Users) medium
• Right to Access and Data Portability low