Privacy Policy

This Privacy Policy explains how Tradesite.pro (“we”, “us”, “our”) collects and uses personal data when you use Tradesite.pro (the “Service”). We are the data controller for personal data described here.

Tradesite.pro

1. Who this applies to

This policy applies if you visit our website, create an account, build a site, subscribe to go live, or contact us for support. It does not cover websites we host for our customers (your trade business site) — you are responsible for the content and contact details you publish there.

2. Personal data we collect

• Account data: name, email address, and authentication identifiers when you sign up or sign in (via our identity provider, WorkOS AuthKit).
• Business profile data: business name, trade, phone number, service areas, years of experience, logo, project photos, and other details you enter to generate your site.
• Trade credentials: certifications, accreditations, trade body memberships, licences, insurance and qualifications you choose to tell us about or display on your site.
• Website content: text and images displayed on your published site, including AI-assisted copy generated from your inputs.
• Billing data: subscription status and Stripe customer identifiers. Card payments are processed by Stripe; we do not store full card numbers.
• Usage data: which features you use, how your site performs, and similar information about how you interact with the Service.
• Marketing and communication preferences: whether you have opted in or out of our emails, and whether you opened or clicked them.
• Technical data: IP address, browser type, device information, and similar logs needed to operate and secure the Service.
• Support communications: messages you send to us by email.

3. How we use your data and lawful bases

Under UK GDPR we rely on the following lawful bases:

• Contract (Article 6(1)(b)): to provide the Service, host your site, process your subscription, and support your account.
• Legitimate interests (Article 6(1)(f)): to improve the Service, prevent fraud and abuse, keep our systems secure, market our own products, group accounts into segments so the communications you receive are relevant to your trade, and produce aggregated insights about the trades (sections 4 and 5) — in each case balanced against your rights, and subject to your right to object.
• Legal obligation (Article 6(1)(c)): where we must retain records for tax, accounting, or regulatory purposes.
• Consent (Article 6(1)(a)): for non-essential cookies, and for marketing emails where the Privacy and Electronic Communications Regulations (PECR) require your consent — which includes sole traders and unincorporated partnerships.

Support access. To help when you contact us, our support staff can see your account, including your sites, domains and subscription status, and can change your site and domain settings on your behalf. Every change they make is recorded against your account. They cannot take payments, buy domains, or change your subscription for you. This is part of supporting your account under the contract basis above.

4. Marketing, segmentation and sponsored content

We run a newsletter and other email communications for people who use the Service. Brands that sell to the trade — tool manufacturers, merchants, insurers, training providers and the like — can pay us to place an advert or a sponsored item in those communications. Being clear about how that works matters, so:

• We send the message, not the advertiser. The advertiser supplies the content; it goes out from our systems to our own list.
• Advertisers do not receive your personal data. They do not get your name, email address, phone number or business details, and they cannot export, download or otherwise obtain a copy of our list.
• Advertisers can ask us to reach a segment. For example, electricians in the North West holding a particular accreditation. We match that against our own records and send to the accounts that fit. The advertiser is told how many people were reached and how the campaign performed — never who they were.
• Adverts are labelled. Sponsored and paid-for items are identified as such, and their inclusion is not a recommendation or endorsement by us.

To do this we group accounts using the details you have given us and how you use the Service — trade, service areas, certifications and accreditations, how long you have been trading, business size, and similar. This is profiling under UK GDPR. It affects only which communications you are sent; it produces no decision about you with legal or similarly significant effects, and it never affects your subscription, pricing, or the operation of your site.

Your choice. Where PECR requires consent — in practice, if you are a sole trader or an unincorporated partnership — we will only send you marketing email if you have opted in, or if you bought from us and did not opt out when we collected your address. If you trade through a limited company or LLP we rely on legitimate interests. Either way you can opt out at any time: use the unsubscribe link in any marketing email or email hello@tradesite.pro, and we will stop. Opting out of marketing does not stop service messages about billing, security, or changes to the Service, which we need to send while your account is open.

5. Aggregated and anonymised data

We produce statistics, insights and reports from the data held across all accounts — for example how many painters operate in a given region, which certifications are most common in a trade, or how service coverage varies by area. We may publish this, share it with partners, use it to describe our audience to advertisers, or license it commercially.

Before any of it leaves our own analysis we remove anything that identifies you or your business and aggregate it so that no individual or business can be picked out. Where a group would be small enough to identify someone, we suppress it or widen the grouping. Data prepared this way is no longer personal data under UK GDPR. We do not attempt to re-identify it, and we require anyone we share it with not to attempt it either.

6. Sharing your data

We use trusted processors who handle data on our instructions, including:

• WorkOS — authentication and account security
• Convex — application database and backend hosting
• Stripe — payment processing (see Stripe's privacy policy)
• Sanity — content management for published site pages (where used)
• OpenAI — generating website copy from your business details (inputs you provide are sent for this purpose)
• Crisp — live chat support. When you are signed in we pass your name, email address and account details (such as your plan and the sites you have created) so our team can help without asking you to repeat them (see Crisp's privacy policy)
• Email delivery providers — sending service messages and, where you have not opted out, our newsletter and marketing emails on our instructions

What we do not do: we do not sell, rent or otherwise hand your personal data to advertisers, sponsors, data brokers or list buyers. Advertisers buy access to our audience through us; they do not buy a copy of it. Anything we share commercially outside the processors above is aggregated and anonymised as described in section 5.

If our business is sold or merged, account data may transfer to the buyer as part of that transaction; this policy, or one at least as protective, will continue to apply. We may also disclose data if required by law, court order, or to protect the rights and safety of users and the public.

7. International transfers

Some providers may process data outside the UK. Where they do, we ensure appropriate safeguards are in place (such as UK International Data Transfer Agreements or equivalent mechanisms approved under UK GDPR).

8. How long we keep data

• Account and site data: for as long as your account is active, then deleted or anonymised within a reasonable period after closure unless we must retain it longer by law.
• Billing records: typically up to 6 years for UK tax and accounting requirements.
• Marketing preferences: if you opt out or unsubscribe we keep a minimal record of your email address on a suppression list for as long as we send marketing, so that we do not contact you again by mistake.
• Security logs: for a limited period necessary to investigate incidents and protect the Service.
• Aggregated and anonymised insights (section 5): retained indefinitely, as they contain no personal data and cannot be traced back to you.

9. Your rights

Under UK data protection law you have the right to:

• access a copy of your personal data;
• rectify inaccurate data;
• erase data in certain circumstances;
• object to direct marketing at any time — this right is absolute, and we will stop sending it;
• object to processing based on our legitimate interests, including the segmentation and aggregated analysis described in sections 4 and 5;
• restrict processing in certain circumstances;
• data portability where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise your rights, email hello@tradesite.pro. We may need to verify your identity before responding. Note that once data has been aggregated and anonymised under section 5 we can no longer identify your contribution to it, so it cannot be extracted or deleted — your underlying personal data is still handled as set out above.

10. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in and operate the Service. We do not use third-party advertising cookies on the marketing site. We may also measure whether our emails are opened and which links are clicked, so we can tell how our communications and any sponsored content perform; you can limit this by blocking remote images in your email client, or by unsubscribing. You can control non-essential cookies through your browser settings; blocking essential cookies may prevent sign-in.

11. Children

The Service is for business users aged 18 and over. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date. Significant changes may also be notified by email where appropriate.

13. Contact

Questions about this policy or your data: hello@tradesite.pro.