This privacy notice explains how Tradies Online (“we”, “us”) collects and uses personal data when you visit tradies-online.com, the SaaS application at app.tradies-online.com, or our native mobile app.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Tradies Online is operated by Alex Kilby, sole trader, based in the United Kingdom. For any privacy-related question or to exercise your rights, contact us at alex@tradies-online.com.

We are the “data controller” for the personal data described below. Where we use third-party processors (listed in the “Sharing” section), they process your data on our behalf under written agreements.

What we collect

We collect different categories of data depending on how you use our services:

When you visit our marketing site

Anonymised usage analytics (pages viewed, session duration, device and browser type, approximate location from IP) — only if you accept analytics cookies.
Information you submit through contact forms or the beta waitlist.

When you create an account

Name, email address, password (stored as a one-way hash), phone number.
Business details: trade, services offered, service area, business name.
Payment information — processed by Stripe; we never see your card details.

When you connect external accounts

OAuth tokens for Facebook, Instagram, and Google Business Profile, used solely to publish the content you create through Tradies Online.
Public profile information from those platforms (handle, page name, profile photo).

When you log a job

Photos, voice recordings, and text descriptions you upload.
Approximate GPS location, if you grant permission.
Customer contact details you enter for invoicing and review requests.

How we use it

To provide the service — generate posts, send invoices, request reviews, build websites, deliver notifications. (Lawful basis: contract.)
Account management and customer support — respond to questions, investigate issues, send service updates. (Lawful basis: contract.)
Improving the product — anonymised analytics to understand which features are useful. (Lawful basis: consent, where you opt in.)
Legal and security obligations — fraud prevention, complying with law enforcement requests. (Lawful basis: legal obligation, legitimate interests.)

Sharing

We do not sell your personal data. We share it only with the following processors, strictly as needed to operate the service:

Supabase — database, authentication, file storage (EU region).
Cloudflare — application hosting and content delivery.
Stripe — subscription billing and customer payments.
Resend — transactional email delivery.
Twilio — SMS and WhatsApp message delivery.
OpenAI — AI generation of captions, invoice descriptions, and review responses (no training on your data).
PostHog — anonymised product analytics (only with your consent).
Meta and Google — when you connect Facebook, Instagram, or Google Business Profile, we share only the content you ask us to publish.

International transfers

Some processors are based in the United States. Where we transfer personal data outside the UK, we rely on the UK’s adequacy regulations or Standard Contractual Clauses approved by the Information Commissioner’s Office.

How long we keep it

Account data: while your account is active, plus 6 years for tax records.
Job photos and content: while your account is active, deleted on request.
Anonymised analytics: rolling 13 months.
Marketing waitlist: until you unsubscribe or 24 months of inactivity.

Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Have inaccurate data corrected.
Have your data erased (“right to be forgotten”).
Restrict or object to processing.
Receive your data in a portable format.
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email alex@tradies-online.com. We will respond within one calendar month.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk.

Cookies

Our use of cookies is described separately in our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the most recent change. Material changes will be notified by email or in-app.