Privacy Policy

1. Who we are

1.1KT Partners Ltd (company number 14433679), trading as Trady, is the data controller for personal data collected through the Trady website and mobile application (the "Platform").

1.2Registered office: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom.

1.3ICO registration number: [registration in progress — number to be published once issued].

1.4Contact our privacy team at privacy@gettrady.co.uk for any data protection query.

2. What personal data we collect and why

We collect different categories of data depending on whether you are a Customer, a Worker or a website visitor. The table below sets out the main processing activities and the lawful basis we rely on for each, as required by Article 13 of the UK GDPR.

2.1Special category data: where DBS checks are required or carried out for Workers, this is special category data within the meaning of Article 9 UK GDPR. We rely on the substantial public interest condition (preventing or detecting unlawful acts; safeguarding) in Schedule 1 of the Data Protection Act 2018, supported by an Appropriate Policy Document available on request from privacy@gettrady.co.uk.

2.2Children: the Platform is not directed at children under 18 and we do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete it.

3. How we collect your data

3.1Directly from you: when you create an account, post a Job, accept a quote, send a message through the Platform, or contact our support team.

3.2From your use of the Platform: technical data such as IP address, browser type and device identifiers, collected through cookies and similar technologies (see our Cookie Policy).

3.3From third parties: qualification registers (such as Gas Safe Register, NICEIC, NAPIT), the Disclosure and Barring Service (where applicable), Stripe (payment confirmations), and credit reference agencies (where Worker payouts require additional checks).

4. Who we share your data with

4.1We share personal data only as necessary to operate the Platform. Categories of recipient include:

• the Worker matched to your Job (Customer name, contact details and Job address) or the Customer who has booked you (Worker name, profile, qualifications);
• Stripe Payments UK, Ltd (payment processing and secure payment holds);
• our cloud hosting provider, Amazon Web Services EMEA SARL or equivalent (Platform infrastructure);
• our customer support and CRM tools (e.g. for handling complaints and dispute investigation);
• professional advisers (lawyers, accountants, auditors) where necessary;
• law enforcement, regulators or courts where we are required by law to do so.

4.2We do not sell your personal data. All processors are bound by written data processing agreements that meet the requirements of Article 28 UK GDPR.

5. International data transfers

5.1Some of our service providers process data outside the United Kingdom — in particular, Stripe processes certain payment data on infrastructure located in the United States.

5.2Where data is transferred outside the UK, we rely on one or more of the following safeguards as required by UK GDPR:

• the UK Extension to the EU–US Data Privacy Framework (the "Data Bridge") for transfers to recipients certified under that framework;
• the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses;
• any other lawful transfer mechanism approved by the UK Government or the ICO from time to time.

5.3You may obtain a copy of the relevant safeguard by contacting privacy@gettrady.co.uk.

6. How long we keep your data

6.1We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

6.2Indicative retention periods:

• Customer account data: until 30 days after account closure, except where retention is required for tax or legal reasons (see below);
• Worker account data: for at least the duration of the Worker Agreement plus 6 years, then no longer than necessary (aligning with the limitation period for contractual claims in England and Wales);
• Transaction and tax records: at least 6 years from the end of the tax year to which they relate (HMRC requirement), then no longer than necessary;
• DBS information: no longer than 6 months after a recruitment decision, unless a longer period is justified and recorded;
• Unfinished tradesperson applications: saved so you can resume them, on the basis of Article 6(1)(b) (steps taken at your request before entering a contract), and deleted after 90 days of inactivity or as soon as you submit — see 6.3 below;
• Job photographs: 6 months after the job is completed — see 6.5 below;
• Marketing data: until you unsubscribe;
• Cookies and similar: as set out in our Cookie Policy (most expire within 13 months).

6.3If you start a tradesperson application and don't finish it. The application form saves your progress as you go, so you can come back to it. We do this on the basis of Article 6(1)(b) of the UK GDPR — taking steps at your request before entering a contract. If you stop and don't return, we will delete that saved progress after 90 days without any activity. The 90 days run from the last time you touched the form, not from when you started — so a long application you keep coming back to is never deleted while you are still working on it.

6.4If you finish and submit the application, the saved progress is deleted straight away and the submitted application is kept instead, under the Worker retention period above. Nobody at Get Trady reads an unfinished application; we can see that one exists and how far it got, which is how we know whether the form is working.

6.5Photographs of your job. You and the tradesperson can add photographs to a job — before the work starts, after it is finished, and as evidence if there is a dispute. We delete these 6 months after the job is completed. Deletion removes the photographs themselves; we keep only a record that a deletion took place, which contains no image data.

6.6There is one exception. If a dispute has been raised about the job and it has not been fully resolved, we hold the photographs until that dispute is closed, because they may be the evidence it turns on. Once the dispute is closed the normal 6-month rule applies. A dispute that is paused, waiting on someone, or has been escalated outside Get Trady still counts as open.

6.7Photographs are only ever visible to you, to the tradesperson on the job, and to Get Trady where a dispute has been raised. We never publish job photographs in reviews. Reviews on Get Trady are a rating and written text only.

6.8What we keep after you delete your account. Some records — booking, payment and dispute history — are kept for 6 years from the end of the tax year they relate to, because UK accounting and tax law requires us to keep them. This is an exception to the right to erasure, permitted where we have a legal obligation to retain the data. Your profile, messages and uploaded documents are deleted. Your name and contact details are removed from the records we keep, but those records still reference your account. That means they remain your personal data, and your other rights — including access, rectification and being told about a breach — continue to apply to them.

7. Security

7.1We use appropriate technical and organisational security measures, including TLS encryption in transit, access controls, role-based permissions, and the principle of least privilege for staff access.

7.2Payment card data is handled by Stripe and never stored on Trady systems. Stripe is PCI-DSS Level 1 certified.

7.3In the event of a personal data breach affecting your rights or freedoms, we will notify you and the ICO within 72 hours where required by Articles 33 and 34 UK GDPR.

8. Your rights under UK GDPR

8.1Subject to the conditions set out in UK GDPR, you have the right to:

• access the personal data we hold about you (subject access request);
• have inaccurate data corrected;
• have your data erased in certain circumstances ("right to be forgotten");
• restrict our processing in certain circumstances;
• object to processing carried out on the basis of legitimate interests, including for direct marketing;
• data portability (to receive your data in a structured, machine-readable format and have it transmitted to another controller, where technically feasible);
• withdraw consent at any time where processing is based on consent (without affecting the lawfulness of processing before withdrawal);
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (we do not currently make such automated decisions about you).

8.2To exercise any of these rights, contact privacy@gettrady.co.uk. We will respond within one month, extendable by a further two months for complex requests. There is normally no charge.

8.3You have the right to object to processing based on our legitimate interests at any time. This includes objecting to direct marketing.

9. Complaints

9.1We hope you will contact us first at privacy@gettrady.co.uk if you have a concern about how we handle your data. You also have the right to complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113 • Web: ico.org.uk

10. Cookies

10.1We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences at any time through the cookie banner or your account settings. Strictly necessary cookies do not require consent.

11. Changes to this Policy

11.1We may update this Policy from time to time. The "Last updated" date at the top of the Policy will reflect the date of the latest version. Material changes will be notified to registered users by email and through the Platform.

12. Contact

Privacy queries: privacy@gettrady.co.uk
General queries: hello@gettrady.co.uk
Postal: KT Partners Ltd, 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom