Privacy Policy
How we collect, use and protect your personal data under UK GDPR.
Last updated: 19 April 2026 (draft v1.0 — pending solicitor review)
1. Who we are
1.1KT Partners Ltd (company number 14433679), trading as Trady, is the data controller for personal data collected through the Trady website and mobile application (the "Platform").
1.2Registered office: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom.
1.3ICO registration number: [registration in progress — number to be published once issued].
1.4Contact our privacy team at privacy@trady.co.uk for any data protection query.
2. What personal data we collect and why
We collect different categories of data depending on whether you are a Customer, a Worker or a website visitor. The table below sets out the main processing activities and the lawful basis we rely on for each, as required by Article 13 of the UK GDPR.
| Purpose | Personal data we use | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Creating and managing your account | Name, email, phone, postcode, password (hashed) | Performance of contract (Art. 6(1)(b)) |
| Matching you with a Worker for a Job | Job description, address, contact details | Performance of contract (Art. 6(1)(b)) |
| Verifying Worker identity, qualifications, insurance and DBS status | ID document, selfie video, qualification certificates, insurance policy, DBS certificate (where applicable) | Performance of contract and legal obligation (Art. 6(1)(b) and 6(1)(c)). For DBS data: substantial public interest condition under Schedule 1 DPA 2018 |
| Processing payments and operating escrow | Payment card details (handled by Stripe — Trady never sees full card numbers), bank details (Workers only) | Performance of contract (Art. 6(1)(b)) |
| Fraud prevention, dispute investigation and platform safety | Account activity, IP address, device data, message history, dispute submissions | Legitimate interests in protecting Customers, Workers and the Platform (Art. 6(1)(f)) |
| Marketing communications about Trady features and offers | Email, name, opt-in status | Consent for prospective customers (Art. 6(1)(a)); legitimate interests for existing customers (Art. 6(1)(f), PECR soft opt-in) |
| Analytics and Platform improvement | Usage data, device data, anonymised behavioural data | Consent (cookies) and legitimate interests (Art. 6(1)(a) and 6(1)(f)) |
| Complying with legal and tax obligations | Transaction records, identity records, communications | Legal obligation (Art. 6(1)(c)) |
2.1Special category data: where we process DBS information for Workers in trades requiring a check, this is special category data within the meaning of Article 9 UK GDPR. We rely on the substantial public interest condition (preventing or detecting unlawful acts; safeguarding) in Schedule 1 of the Data Protection Act 2018, supported by an Appropriate Policy Document available on request from privacy@trady.co.uk.
2.2Children: the Platform is not directed at children under 18 and we do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete it.
3. How we collect your data
3.1Directly from you: when you create an account, post a Job, accept a quote, send a message through the Platform, or contact our support team.
3.2From your use of the Platform: technical data such as IP address, browser type and device identifiers, collected through cookies and similar technologies (see our Cookie Policy).
3.3From third parties: identity verification providers, qualification registers (such as Gas Safe Register, NICEIC, NAPIT), the Disclosure and Barring Service (where applicable), Stripe (payment confirmations), and credit reference agencies (where Worker payouts require additional checks).
4. Who we share your data with
4.1We share personal data only as necessary to operate the Platform. Categories of recipient include:
- the Worker matched to your Job (Customer name, contact details and Job address) or the Customer who has booked you (Worker name, profile, qualifications);
- Stripe Payments UK, Ltd (payment processing and escrow);
- our identity verification provider (for Worker onboarding);
- our cloud hosting provider, Amazon Web Services EMEA SARL or equivalent (Platform infrastructure);
- our customer support and CRM tools (e.g. for handling complaints and dispute investigation);
- professional advisers (lawyers, accountants, auditors) where necessary;
- law enforcement, regulators or courts where we are required by law to do so.
4.2We do not sell your personal data. All processors are bound by written data processing agreements that meet the requirements of Article 28 UK GDPR.
5. International data transfers
5.1Some of our service providers process data outside the United Kingdom — in particular, Stripe processes certain payment data on infrastructure located in the United States.
5.2Where data is transferred outside the UK, we rely on one or more of the following safeguards as required by UK GDPR:
- the UK Extension to the EU–US Data Privacy Framework (the "Data Bridge") for transfers to recipients certified under that framework;
- the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses;
- any other lawful transfer mechanism approved by the UK Government or the ICO from time to time.
5.3You may obtain a copy of the relevant safeguard by contacting privacy@trady.co.uk.
6. How long we keep your data
6.1We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
6.2Indicative retention periods:
- Customer account data: until 30 days after account closure, except where retention is required for tax or legal reasons (see below);
- Worker account data: for the duration of the Worker Agreement plus 6 years (to align with the limitation period for contractual claims in England and Wales);
- Transaction and tax records: 6 years from the end of the tax year to which they relate (HMRC requirement);
- DBS information: no longer than 6 months after a recruitment decision, unless a longer period is justified and recorded;
- Marketing data: until you unsubscribe or 24 months of inactivity, whichever is earlier;
- Cookies and similar: as set out in our Cookie Policy (most expire within 13 months).
7. Security
7.1We use industry-standard security measures including TLS encryption in transit, encryption at rest, role-based access controls, regular vulnerability scanning, and the principle of least privilege for staff access.
7.2Payment card data is handled by Stripe and never stored on Trady systems. Stripe is PCI-DSS Level 1 certified.
7.3In the event of a personal data breach affecting your rights or freedoms, we will notify you and the ICO within 72 hours where required by Articles 33 and 34 UK GDPR.
8. Your rights under UK GDPR
8.1Subject to the conditions set out in UK GDPR, you have the right to:
- access the personal data we hold about you (subject access request);
- have inaccurate data corrected;
- have your data erased in certain circumstances ("right to be forgotten");
- restrict our processing in certain circumstances;
- object to processing carried out on the basis of legitimate interests, including for direct marketing;
- data portability (to receive your data in a structured, machine-readable format and have it transmitted to another controller, where technically feasible);
- withdraw consent at any time where processing is based on consent (without affecting the lawfulness of processing before withdrawal);
- not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (we do not currently make such automated decisions about you).
8.2To exercise any of these rights, contact privacy@trady.co.uk. We will respond within one month, extendable by a further two months for complex requests. There is normally no charge.
9. Complaints
9.1We hope you will contact us first at privacy@trady.co.uk if you have a concern about how we handle your data. You also have the right to complain to the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113 • Web: ico.org.uk
10. Cookies
10.1We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences at any time through the cookie banner or your account settings. Strictly necessary cookies do not require consent.
11. Changes to this Policy
11.1We may update this Policy from time to time. The "Last updated" date at the top of the Policy will reflect the date of the latest version. Material changes will be notified to registered users by email and through the Platform.
12. Contact
Privacy queries: privacy@trady.co.uk
General queries: hello@trady.co.uk
Postal: KT Partners Ltd, 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom
Trady is a service of KT Partners Ltd, a company registered in England and Wales (company number 14433679). Registered office: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE.
Questions about this page? Email hello@trady.co.uk.