Privacy Policy

Last updated: March 2026

Sure Trades People ("SureTrade", "we", "us") is the data controller for the personal data processed through the SureTrade platform. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO NUMBER].

1. What data we collect

Data you provide

• Email address and password (account registration)
• Name and contact details
• Project details (descriptions, budgets, timelines, property type, location)
• Trade profile information (qualifications, insurance details, work photos, service areas, bio)
• Messages sent through the Platform
• Reviews and ratings
• Payment information (processed by Stripe; we do not store card details)

Data we collect automatically

• IP address and approximate location
• Browser type, device type, and operating system
• Pages visited, time spent, and interactions with the Platform
• Cookies and similar technologies (see our Cookie Policy)

2. How we use your data

We use your personal data to:

• Create and manage your account
• Provide our project planning and matching services
• Process payments
• Send service-related communications (e.g., match notifications)
• Improve and develop the Platform
• Detect and prevent fraud or misuse
• Comply with legal obligations

3. Legal basis for processing

We process your data on the following bases under UK GDPR:

• Contract: Processing necessary to provide our services to you
• Legitimate interests: Improving the Platform, fraud prevention, and business analytics, where these do not override your rights
• Consent: Where you have given specific consent (e.g., marketing communications)
• Legal obligation: Where we are required to process data by law

4. Who we share data with

We may share your data with:

• Other users: Homeowners and tradespeople can see limited profile information when matched. Full contact details are shared only after an unlock
• Payment processor: Stripe processes payments on our behalf
• Hosting and infrastructure: Supabase (database), Vercel/Netlify (hosting)
• AI services: We use AI providers to power our project planning tool. Project descriptions may be processed by these services. No personal contact details are shared with AI providers
• Legal and regulatory: Where required by law, regulation, or court order

We do not sell your personal data. We do not share it with third parties for their own marketing purposes.

5. Data retention

We retain your data for as long as your account is active, plus a reasonable period afterwards to fulfil our legal obligations and resolve disputes. Specifically:

• Account data: retained for 2 years after account closure
• Payment records: retained for 7 years (HMRC requirements)
• Chat and project data: retained for 12 months after project completion, then anonymised
• Cookies: see our Cookie Policy

6. Your rights

Under UK GDPR, you have the right to:

• Access your personal data (subject access request)
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten") in certain circumstances
• Restrict processing in certain circumstances
• Port your data to another service
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [PRIVACY EMAIL]. We will respond within one month.

7. International transfers

Your data may be processed outside the UK where our service providers operate. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews.

9. Children

The Platform is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the Platform.

11. Contact and complaints

For privacy-related queries, contact our Data Protection Lead at [PRIVACY EMAIL].

If you are unsatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.