Legal

Privacy Policy

TradeWise Ltd · Last updated: 1 September 2026

TradeWise Ltd is the Data Controller for the TradeWise platform. This policy explains how we collect, use, and protect your personal data under UK GDPR.

1. Who We Are

TradeWise Ltd (“TradeWise”, “we”, “us”) is the Data Controller for personal data processed through the TradeWise Platform. We are registered in England and Wales.

Our Data Protection Officer can be contacted at dpo@tradewise.co.uk.

2. What Data We Collect

Account data

Name, email address, phone number, password hash, account type, registration date.

Profile data

For tradespeople: company name, trade categories, service area, years of experience, bio, portfolio images.

Job data

Job descriptions, photos uploaded, location (postcode), urgency level, budget range.

Contract data

Quotes, the generated contract and its signatures, and the agreed price. We do not take payments, so we hold no card or bank details.

Verification data

The outcome of photo-ID verification and the name on the document (the document itself is handled by Stripe Identity and never stored by us), certificates tradespeople upload, Companies House and HMRC check results.

Communications

In-app messages between homeowners and tradespeople, support tickets, email correspondence.

Usage data

Pages visited, features used, search queries, device type, browser, IP address, session duration.

Review data

Star ratings and written reviews you submit.

3. How We Use Your Data

We process your data under the following lawful bases (UK GDPR Article 6):

Contract performance (Art. 6(1)(b))

To provide the Platform services: matching jobs to tradespeople, messaging, generating contracts, invoicing commission, handling disputes.

Legitimate interests (Art. 6(1)(f))

To improve our AI matching algorithms, detect fraud, prevent abuse, send relevant service updates, and conduct internal analytics.

Legal obligation (Art. 6(1)(c))

To comply with financial regulations, tax obligations (HMRC), and court orders.

Consent (Art. 6(1)(a))

To send marketing emails and push notifications (where you have opted in). You may withdraw consent at any time.

Vital interests (Art. 6(1)(d))

In rare circumstances involving safety risks.

Public task (Art. 6(1)(e))

Where required to cooperate with regulatory authorities.

4. Data Sharing

We share your data with:

  • Tradespeople/Homeowners: Limited profile and job information shared between matched parties to facilitate the booking.
  • Verification partners: Stripe Identity (ID verification), Companies House (company verification), HMRC (VAT number verification). Your ID document is handled by Stripe and never stored by us; we receive only the result and the name on the document.
  • Service providers: Convex (database and hosting), Resend (transactional email), Twilio (SMS verification codes), Anthropic and OpenRouter (the AI that structures job descriptions; job text is sent, account details are not), postcodes.io (postcode to coordinates).
  • Legal/regulatory: Where required by law, court order, or regulatory authority.

We do not sell your personal data to third parties.

5. Data Retention

Data typeRetention periodReason
Account data7 years after account closureHMRC / legal compliance
Job & contract data6 years after completionLimitation Act 1980 (contract disputes)
Communications2 yearsDispute resolution support
Verification resultsWhile the account is openNeeded to keep the verified badge current
Marketing consent recordsUntil consent withdrawn + 3 yearsCompliance with ePrivacy Regulations

6. Your Rights

Under UK GDPR, you have the following rights:

Right of access

Request a copy of all personal data we hold about you (Subject Access Request). Responded to within 30 days.

Right to rectification

Request correction of inaccurate or incomplete personal data.

Right to erasure

Request deletion of your personal data where no longer necessary, unless retention is required by law.

Right to portability

Receive your data in a structured, machine-readable format (where technically feasible).

Right to object

Object to processing based on legitimate interests or for direct marketing purposes.

Right to restrict processing

Request that we limit how we use your data while a dispute is resolved.

Rights re: automated decisions

Request human review of any significant automated decisions affecting you.

To exercise your rights, visit our GDPR & Data Rights page or email dpo@tradewise.co.uk.

7. Cookies

We set only the cookie that keeps you signed in, and no analytics or advertising cookies. Details are in our Cookie Policy.

8. Security

We implement appropriate technical and organisational measures to protect your personal data, including TLS encryption in transit, encryption at rest by our hosting provider, and role-based access controls so that only the parties to a job can read its details.

In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware.

9. Children's Privacy

The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified to registered users via email at least 30 days before taking effect. The “last updated” date at the top of this page reflects the most recent revision.

11. Contact & DPO

Data Protection Officer

Email: dpo@tradewise.co.uk

You also have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.