Privacy Policy

1. Who we are

London Trade Registry Ltd (“LTR”, “we”, “us”, “our”) is a company registered in England and Wales. We operate the platform available at londontrade.registry and associated mobile applications (the “Platform”). We are the data controller for personal information collected through the Platform.

2. What data we collect

• Account data: name, email address, phone number, and password (hashed).
• Profile data: postcode, trade category, DBS check status, certifications, and company information for traders.
• Job data: descriptions, photos, addresses, and budget information submitted when posting a job.
• Payment data: transaction references processed via Stripe. We do not store card numbers.
• Communications: messages sent between customers and traders via our in-platform chat.
• Usage data: IP address, browser type, pages visited, and time spent on the Platform, collected via cookies and server logs.

3. How we use your data

We process your personal data for the following purposes:

• To create and manage your account and verify your identity.
• To match customers with appropriate tradespeople and dispatch job offers.
• To process payments and prevent fraud.
• To send transactional communications (job confirmations, payment receipts, vetting updates).
• To improve the Platform through analytics and performance monitoring.
• To comply with our legal obligations under UK law.

4. Legal basis for processing

Under the UK GDPR, we rely on the following lawful bases: contract performance (to provide the Platform service), legitimate interests (fraud prevention, improving our service), legal obligation (tax and regulatory compliance), and consent (marketing emails, non-essential cookies).

5. Data sharing

We share your data only as necessary:

• With traders/customers: limited profile information (name, phone) is shared when a job is accepted.
• Service providers: Stripe (payments), Supabase (database), Vercel (hosting), Mapbox (maps), Resend (email).
• Authorities: when required by law or to protect the safety of our users.

We do not sell your personal data to third parties.

6. Data retention

We retain your account data for as long as your account is active and for 7 years thereafter to comply with tax and legal obligations. Chat messages are retained for 3 years. Usage logs are deleted after 90 days.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal obligations).
• Object to or restrict processing.
• Data portability.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, email privacy@londontrade.registry. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We use industry-standard encryption (TLS) for data in transit and AES-256 encryption for data at rest. Access to personal data is restricted to employees who need it to perform their duties and is subject to strict confidentiality obligations.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date and, for material changes, notify you by email or a prominent notice on the Platform.

10. Contact us

For any privacy-related queries, contact our Data Protection Officer at privacy@londontrade.registry or by post to: London Trade Registry Ltd, 20 Eastbourne Terrace, London, W2 6LG.