Privacy policy
Last updated 25 October 2026
Who we are
Trade Foundation is a sole trader business operating from the United Kingdom. For anything in this policy, including any request about your data, contact us at office@tradefoundation.co.uk or +44 7365 578020.
We are the data controller for the account information described below. Where you use Trade Foundation to contact your own customers, you are the controller of their information and we act as your processor.
What we collect
When you create an account
- Your email address, which is how you sign in.
- A password, which is stored only as a cryptographic hash. We never see or store the password itself.
When you set up your business
- Your business name.
- Your trade, for example plumber or electrician.
- The area you cover, as free text. We send this text to a mapping service to place it on a map, which is described below.
- A contact phone number, if you choose to give one.
As you use the dashboard
- Enquiry records, which hold an approximate location, where the enquiry came from and when it arrived.
- Ordinary technical information that any website receives, such as your IP address and browser type, used to keep the service running and secure.
Why we hold it, and on what basis
- To provide the service you signed up for. Our lawful basis is performance of a contract with you.
- To keep the service secure and working. Our lawful basis is our legitimate interests in preventing abuse, diagnosing faults and protecting accounts.
- To meet legal obligations, such as keeping records we are required to keep.
We do not sell your data, and we do not share it with anyone for their own marketing.
Who else processes it
We use a small number of suppliers to run the service. Each one processes data on our instructions only.
- Supabase hosts the database and handles sign-in. Your account record and your business details are stored there.
- Vercel hosts the website and serves the pages you load.
- OpenStreetMap Nominatim converts the service area text you enter into map coordinates. Only that text is sent, never your name, email or phone number.
Some of these suppliers operate outside the United Kingdom. Where data is transferred abroad, it is covered by the safeguards UK data protection law requires, such as the UK addendum to the standard contractual clauses.
Cookies
The site sets cookies for one purpose: keeping you signed in. One cookie holds your session, and another records whether you asked to stay signed in on the device so the session lasts the right length of time. There are no advertising cookies and no third-party analytics on this site.
How long we keep it
We keep your account and business details for as long as your account is open. If you close your account, we delete or anonymise them within 90 days, except where we are required to keep a record for longer, for example for tax purposes.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong
- delete it, where there is no reason for us to keep it
- restrict or object to how we are using it
- send it to you, or to someone else, in a portable format
Email office@tradefoundation.co.uk and we will respond within one month. There is no charge for this.
If you are not happy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, or call their helpline on 0303 123 1113. We would rather you came to us first so we can put it right.
Children
Trade Foundation is a tool for businesses. It is not intended for anyone under 18, and we do not knowingly collect their data.
Changes to this policy
When we change this policy we update the date at the top of the page. If a change materially affects how we handle your data, we will tell you by email before it takes effect.