TradePage ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you use tradepage.uk.
1. Who We Are
TradePage is a link-in-bio platform for UK tradespeople. We are the data controller for the personal data processed through our service.
Contact: [email protected]
2. Data We Collect
From Tradespeople (Account Holders)
When you create an account, we collect:
- Account information: Email address, password (stored securely using bcrypt hashing)
- Business information: Business name, trade type, phone number, WhatsApp number, profile image, about text
- Certifications: Certification types and registration numbers you choose to display
- Service areas: UK postcode areas you cover
- Projects: Before/after images and descriptions you upload
From Customers (Quote Requesters)
When someone requests a quote through a trade page, we collect:
- Name, phone number, email (optional), postcode
- Job description
- Photos (optional)
Automatically Collected
- IP address (for security and rate limiting)
- Browser/device information (for session management)
- Page view counts (anonymous, aggregated)
3. How We Use Your Data
For Tradespeople
- To create and display your public trade page
- To send you email notifications when you receive quote requests
- To verify your email address
- To enable password reset
- To provide customer support
For Customers
- To forward your quote request to the tradesperson
- To enable the tradesperson to contact you
4. Legal Basis for Processing
We process personal data based on:
- Contract: To provide the TradePage service to account holders
- Legitimate interests: To operate our business, prevent abuse, and improve our service
- Consent: For optional features like marketing communications (if applicable)
5. Data Sharing
With Tradespeople
When a customer submits a quote request, their information (name, phone, email, postcode, job description, photos) is shared with the tradesperson who owns that page. This is the core function of our service.
Service Providers
We use the following third-party services:
- Postmark: To send email notifications (emails only)
- Cloudflare: For file storage (R2) and bot protection (Turnstile)
- Hetzner: Cloud hosting (EU-based servers)
We Do Not
- Sell your personal data
- Share data with advertisers
- Use data for profiling or automated decision-making
6. Data Retention
- Account data: Retained until you delete your account
- Quote requests: Retained until the tradesperson deletes them, or their account is deleted
- Uploaded images: Retained until deleted by the user or account deletion
- Security logs: IP addresses and login attempts retained for 90 days
7. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in a machine-readable format
- Object: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent
To exercise these rights, contact us at [email protected].
8. Security
We protect your data using:
- Passwords hashed with bcrypt (never stored in plain text)
- HTTPS encryption for all data in transit
- Secure, hashed tokens for email verification and password reset
- Rate limiting and bot protection
- Account lockout after failed login attempts
9. Cookies
We use essential cookies only:
- Authentication: To keep you logged in (refresh token, HttpOnly)
- CSRF protection: To prevent cross-site request forgery
We do not use tracking cookies, analytics cookies, or advertising cookies.
10. Children
TradePage is not intended for use by anyone under 18. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this policy from time to time. We will notify account holders of significant changes by email.
12. Contact
For privacy-related questions or to exercise your rights:
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.