Privacy Policy

1. Who we are

1.1KT Partners Ltd (company number 14433679), trading as Get Trady, is the data controller for personal data collected through the Get Trady website and mobile application (the "Platform").

1.2Registered office: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom.

1.3ICO registration number: ZC209765.

1.4Contact our privacy team at privacy@gettrady.co.uk for any data protection query.

If you are a tradesperson and we hold details about your business that you never gave us — details we found from public sources: Companies House and the business's own website — a separate notice covers that: Outreach privacy notice. It explains where those details came from, what we do with them, and how to make us stop.

2. What personal data we collect and why

We collect different categories of data depending on whether you are a Customer, a Worker or a website visitor. The table below sets out the main processing activities and the lawful basis we rely on for each, as required by Article 13 of the UK GDPR.

2.1Attribution data. Where you follow a link carrying campaign identifiers, or arrive from another website, we record those values the first time you visit and do not overwrite them on later visits. We record only the domain name of the referring site, never the full web address, so we do not learn which page you came from.

Two different things can happen with those values, and we treat them differently. Storing them on your device, so that they are still there as you move around the site, happens only if you accept non-essential cookies — if you decline, nothing is stored on your device. Recording them with a form you choose to send us is not the same thing: where campaign identifiers are present in the web address of the page at the moment you submit a sign-up or application form, we may record them alongside that submission even if you declined non-essential cookies, because reading a value that is already in the address of the page you are on does not involve storing anything on your device. We do this to understand which campaigns bring people to Get Trady, relying on our legitimate interests in measuring and improving our marketing (Article 6(1)(f) UK GDPR). We do not use it to build a profile of you or to track you across other websites. You may object to this processing at any time, and it is deleted when your account is closed.

2.2Special category data: where DBS checks are required or carried out for Workers, this is special category data within the meaning of Article 9 UK GDPR. We rely on the substantial public interest condition (preventing or detecting unlawful acts; safeguarding) in Schedule 1 of the Data Protection Act 2018, supported by an Appropriate Policy Document available on request from privacy@gettrady.co.uk.

2.3Children: the Platform is not directed at children under 18 and we do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete it.

2.4Job updates on WhatsApp. When you create an account, and at any time in your account settings, you can choose to get job updates on WhatsApp. The box is unticked unless you tick it, and you do not need it to use the Platform. If you opt in, we rely on your consent (Article 6(1)(a) UK GDPR) to send you job alerts, acceptances and payment updates on WhatsApp, and no other WhatsApp messages. We keep a record of your choice. You can withdraw your consent at any time in your account settings.

3. How we collect your data

3.1Directly from you: when you create an account, post a Job, accept a quote, send a message through the Platform, or contact our support team, including by email or on WhatsApp.

3.2From your use of the Platform: technical data such as IP address, browser type and device identifiers, collected through cookies and similar technologies (see our Cookie Policy).

3.3From third parties: qualification registers (such as Gas Safe Register, NICEIC, NAPIT), the Disclosure and Barring Service (where applicable), Stripe (payment confirmations), and credit reference agencies (where Worker payouts require additional checks).

4. Who we share your data with

4.1We share personal data only as necessary to operate the Platform. Categories of recipient include:

• the Worker matched to your Job (Customer name, contact details and Job address) or the Customer who has booked you (Worker name, profile, qualifications);
• Stripe Payments UK, Ltd (payment processing and secure payment holds);
• our cloud hosting provider, Amazon Web Services EMEA SARL or equivalent (Platform infrastructure);
• our customer support and CRM tools (e.g. for handling complaints and dispute investigation);
• WhatsApp (part of Meta), which provides the messaging service if you choose to contact us on WhatsApp, and handles your data under its own privacy policy;
• professional advisers (lawyers, accountants, auditors) where necessary;
• law enforcement, regulators or courts where we are required by law to do so.

4.2We do not sell your personal data. All processors are bound by written data processing agreements that meet the requirements of Article 28 UK GDPR.

5. International data transfers

5.1Some of our service providers process data outside the United Kingdom — in particular, Stripe processes certain payment data on infrastructure located in the United States.

5.2Where data is transferred outside the UK, we rely on one or more of the following safeguards as required by UK GDPR:

• the UK Extension to the EU–US Data Privacy Framework (the "Data Bridge") for transfers to recipients certified under that framework;
• the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses;
• any other lawful transfer mechanism approved by the UK Government or the ICO from time to time.

5.3You may obtain a copy of the relevant safeguard by contacting privacy@gettrady.co.uk.

5.4If you choose to message us on WhatsApp, WhatsApp may process your messages outside the United Kingdom. It does so as part of its own service, under its own terms and privacy policy. The safeguards in clause 5.2 describe our own service providers and not WhatsApp.

6. How long we keep your data

6.1We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

6.2Indicative retention periods:

• Customer account data: until 30 days after account closure, except where retention is required for tax or legal reasons (see below);
• Worker account data: for at least the duration of the Worker Agreement plus 6 years, then no longer than necessary (aligning with the limitation period for contractual claims in England and Wales);
• Transaction and tax records: at least 6 years from the end of the tax year to which they relate (HMRC requirement), then no longer than necessary;
• DBS information: no longer than 6 months after a recruitment decision, unless a longer period is justified and recorded;
• Unfinished tradesperson applications: saved so you can resume them, on the basis of Article 6(1)(b) (steps taken at your request before entering a contract), and deleted after 90 days of inactivity or as soon as you submit — see 6.3 below;
• Job photographs: 6 months after the job is completed — see 6.5 below;
• Marketing data: until you unsubscribe;
• Records of your contact choices (for example, opting in to job updates on WhatsApp or to marketing emails, and any later withdrawal): kept while your account is open and, after it is closed, together with the records described in 6.8, so that we can show what you agreed to and when;
• Attribution data (how you heard about us, campaign identifiers and referring site): retained while your account is open, and deleted when your account is closed;
• Site feedback submitted through our feedback form: 24 months from receipt. Where you had an account, your email address and account identifier are removed from site feedback when the account is erased; the report itself is kept for the remainder of the 24 months. Correspondence sent to our email addresses, or to us on WhatsApp, is kept for as long as we need it for the matter it concerns, and for any longer period we are required to keep it by law — for example, records relating to bookings, payments and disputes are kept for 6 years from the end of the tax year they relate to (see 6.8);
• Cookies and similar: as set out in our Cookie Policy (most expire within 13 months).

6.3If you start a tradesperson application and don't finish it. The application form saves your progress as you go, so you can come back to it. We do this on the basis of Article 6(1)(b) of the UK GDPR — taking steps at your request before entering a contract. If you stop and don't return, we will delete that saved progress after 90 days without any activity. The 90 days run from the last time you touched the form, not from when you started — so a long application you keep coming back to is never deleted while you are still working on it.

6.4If you finish and submit the application, the saved progress is deleted straight away and the submitted application is kept instead, under the Worker retention period above. Nobody at Get Trady reads an unfinished application; we can see that one exists and how far it got, which is how we know whether the form is working.

6.5Photographs of your job. You and the tradesperson can add photographs to a job — before the work starts, after it is finished, and as evidence if there is a dispute. We delete these 6 months after the job is completed. Deletion removes the photographs themselves; we keep only a record that a deletion took place, which contains no image data.

6.6There is one exception. If a dispute has been raised about the job and it has not been fully resolved, we hold the photographs until that dispute is closed, because they may be the evidence it turns on. Once the dispute is closed the normal 6-month rule applies. A dispute that is paused, waiting on someone, or has been escalated outside Get Trady still counts as open.

6.7Photographs are only ever visible to you, to the tradesperson on the job, and to Get Trady where a dispute has been raised. We never publish job photographs in reviews. Reviews on Get Trady are a rating and written text only.

6.8What we keep after you delete your account. Some records — booking, payment and dispute history — are kept for 6 years from the end of the tax year they relate to, because UK accounting and tax law requires us to keep them. This is an exception to the right to erasure, permitted where we have a legal obligation to retain the data. Your profile, messages and uploaded documents are deleted. Your name and contact details are removed from the records we keep, but those records still reference your account. That means they remain your personal data, and your other rights — including access, rectification and being told about a breach — continue to apply to them.

7. Security

7.1We use appropriate technical and organisational security measures, including TLS encryption in transit, access controls, role-based permissions, and the principle of least privilege for staff access.

7.2Payment card data is handled by Stripe and never stored on Get Trady systems. Stripe is PCI-DSS Level 1 certified.

7.3In the event of a personal data breach affecting your rights or freedoms, we will notify you and the ICO within 72 hours where required by Articles 33 and 34 UK GDPR.

8. Your rights under UK GDPR

8.1Subject to the conditions set out in UK GDPR, you have the right to:

• access the personal data we hold about you (subject access request);
• have inaccurate data corrected;
• have your data erased in certain circumstances ("right to be forgotten");
• restrict our processing in certain circumstances;
• object to processing carried out on the basis of legitimate interests, including for direct marketing;
• data portability (to receive your data in a structured, machine-readable format and have it transmitted to another controller, where technically feasible);
• withdraw consent at any time where processing is based on consent (without affecting the lawfulness of processing before withdrawal);
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (we do not currently make such automated decisions about you).

8.2To exercise any of these rights, contact privacy@gettrady.co.uk. We will respond within one month, extendable by a further two months for complex requests. There is normally no charge.

8.3You have the right to object to processing based on our legitimate interests at any time. This includes objecting to direct marketing.

9. Complaints

9.1We hope you will contact us first at privacy@gettrady.co.uk if you have a concern about how we handle your data. You also have the right to complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113 • Web: ico.org.uk

10. Cookies

10.1We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences at any time through the cookie banner or your account settings. Strictly necessary cookies do not require consent.

11. Changes to this Policy

11.1We may update this Policy from time to time. The "Last updated" date at the top of the Policy will reflect the date of the latest version. Material changes will be notified to registered users by email and through the Platform.

12. Contact

Privacy queries: privacy@gettrady.co.uk
General queries: hello@gettrady.co.uk, or WhatsApp +44 7769 792181
Postal: KT Partners Ltd, 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom