Privacy Policy
Last updated: 11 October 2026
Tapatradie Limited, trading as Tap a Tradie (“Tap a Tradie”, “we”, “us”), runs a two-sided marketplace in the United Kingdom connecting customers with vetted local tradespeople across a range of trades, through our website and mobile apps. This policy explains what personal data we collect, why, who we share it with and the rights you have over it. It applies to customers, tradespeople and anyone visiting our website.
1. Who we are
Tapatradie Limited is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 17355214, with our registered office at Fitzroy House, Crown Street, Ipswich, Suffolk, IP1 3LG. VAT registration number GB 531 3799 81. Contact us at support@tapatradie.app. For any question about this policy or your data, contact support@tapatradie.app.
You must be 18 or over to use Tap a Tradie. We do not knowingly collect data from anyone under 18; if you believe we have, tell us and we will delete it.
2. What we collect
- Account details. Your name, email address and phone number when you create an account.
- Addresses. The property addresses and postcodes you add so tradespeople know where the job is. We use address lookup services to help you enter them accurately.
- Job details, photos and videos. The service you request, your description of the problem, and any photos or videos you attach to help diagnose it or record the finished work.
- Verification documents from tradespeople. Photos of safety cards and trade qualifications, HMRC documents such as evidence of a Unique Taxpayer Reference, and the results of checks we run against Companies House and HMRC records. Photo ID is checked by Stripe as part of identity verification, not by us. When our admins review documents, we keep screenshots as evidence of the decision.
- Supplier listings. The suppliers shown in the Pro app are chosen and listed by Tap a Tradie; tradespeople do not add their own, and we hold no personal data about you in these listings.
- Live location of tradespeople. While a tradesperson is travelling to or working on an active job, we process their device location so the customer can track their arrival. We store only the latest position and its timestamp, never a history. Section 4 explains this in full.
- Signatures. Used to sign off completed work.
- In-app chat messages and media. Messages, photos and videos exchanged between customers and tradespeople, kept for safety and moderation. Either party can report a message to us.
- Reviews. Ratings and review text left after a job.
- Device push tokens. So we can send booking and job notifications to your device.
- Payment and fee records. Charges, payouts, refunds, cancellation fees and no-show fees. We store only the card brand, the last four digits and Stripe reference numbers. Full card numbers never touch our systems.
- Moderation reports. Reports you make about messages, reviews or users, and how we handled them.
- Security logs. Sign-ins, failed sign-in attempts, account changes and admin actions that change data, recorded with IP address and device to keep accounts safe.
3. Why we use your data, and our lawful bases
We use this data to run the marketplace: matching your job with nearby tradespeople, letting you track their arrival, enabling chat, taking payment, sending transactional notifications and emails, verifying tradespeople, handling warranty claims and fee disputes, keeping the platform safe through moderation, and meeting our legal obligations. We do not sell your personal data, and we do not use it for third-party advertising.
Under UK GDPR our lawful bases are:
- Contract. Bookings, payments and messaging between the parties to a job.
- Legitimate interests. Fraud prevention, security logging, moderation and the verification of tradespeople.
- Legal obligation. Keeping financial records and responding to lawful requests from authorities.
- Consent. Optional location sharing and the optional app lock. We do not currently send marketing; if we ever do, it will be based on consent and you can opt out at any time.
Automated decisions
The only automated decision we make about you is this: if a tradesperson’s account records three no-show strikes, the account is paused automatically so no new jobs are offered. Current jobs continue, and an admin reviews every pause and can lift it. You can ask for a person to review this decision at any time.
Profile and cover photos also pass through an automated safety screen before they appear in the app. If a photo is rejected you can simply upload another, or ask us to review the decision and a member of our team will look at it. We do not make any other decisions about you solely by automated means.
4. Live location of tradespeople
A tradesperson’s live position is shared with the booking customer only while the tradesperson is on the way to the job or on site. We store a single current location and timestamp for each tradesperson, overwritten as it updates. There is no location history. Outside an active job, customers never receive a tradesperson’s coordinates; any distance shown in search results is calculated on our servers.
5. What each side of a booking sees
We release contact details in stages. Before accepting a job, a tradesperson sees the postcode and town, the job description and photos, and the customer’s first name, photo and rating. The full address is released when the tradesperson accepts the job, and the customer’s phone number is available only while the job is live. The customer sees the tradesperson’s name, photo, reviews and live position during the job.
In the public tradesperson directory and search, anyone can see a tradesperson’s business name, trade, photo, service area, ratings and reviews. A tradesperson’s registered or home address, company number and VAT number are not shown to the public; we use them for verification and release them only to a customer they are working with, where identifying the business is needed.
Once a tradesperson takes on your job, they become an independent controller of the personal data they receive to carry it out. Our Terms require them to use that data for the job only.
6. Payments
Payments are processed by Stripe. Your card details go directly to Stripe and we never store card numbers. Tradesperson bank details are held by Stripe, not by us. We keep records of charges, payouts and refunds (amounts, dates, job references) needed to run the service and meet accounting obligations. Stripe’s own privacy policy applies to its processing.
7. Who we share data with
We use a small number of service providers (processors) to run the platform, each under contract and acting only on our instructions:
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database and authentication | EU (Frankfurt) |
| Cloudflare R2 | Storage for photos, videos, documents and signatures (private, apart from public profile and cover photos) | EU |
| Stripe | Payments; holds card and bank details | See Stripe’s policy |
| Twilio | Text messages such as sign-in codes | USA |
| Resend | Transactional email such as confirmations and receipts | USA |
| Expo | Push notifications to the apps | USA |
| OpenAI | Automated safety screen on uploaded profile and cover photos | USA |
| Maps and Places address search, and optional Google sign-in | USA | |
| postcodes.io | Converting postcodes into accurate addresses | UK |
| Companies House | Verifying a tradesperson’s company, directors and status | UK |
| HMRC | Checking a tradesperson’s VAT registration | UK |
| Apple | Notifications to iPhones, iOS app distribution, and optional Sign in with Apple | USA |
| Hetzner | Website hosting | EU |
| Sentry | Crash reporting: device model, app version, IP address, your user ID and details of the error | EU (Frankfurt) where configured, otherwise USA |
Beyond that, data is shared only between the two parties to a booking (section 5), with our professional advisers where needed, or where we are legally required to disclose it, for example to the police or a court. If Tap a Tradie is ever sold or restructured, your data may transfer to the new owner, who must protect it in line with this policy.
8. International transfers
Twilio, Resend, Expo, OpenAI, Google and Apple process some data in the United States, as does Sentry where a project is not hosted in its EU region. These transfers rely on the UK International Data Transfer Addendum to the standard contractual clauses, the UK Extension to the EU–US Data Privacy Framework, or another safeguard approved under UK GDPR. Our database and file storage are in the European Union; transfers from the UK to the EEA are covered by the UK’s adequacy regulations, so no additional safeguard is needed. You can ask us for details of these safeguards.
9. How long we keep your data
We keep your data while you hold an account, with these limits:
| Data | How long |
|---|---|
| Chat messages | While your account is active, so a record of what was agreed is available for disputes or warranty claims |
| Chat photos and files, job photos and videos, sign-off signatures | 24 months after the job completes |
| Text message send logs | 90 days |
| Moderation records | 12 months |
| Undeliverable notification records | 30 days |
| Verification evidence reviewed by staff | 6 years (contractual records) |
| Payment and fee records | 6 years after the end of the financial year (HMRC) |
| Security logs | 24 months, then purged automatically |
| Live location | Only the latest position, overwritten as it updates |
If you delete your account, there is a 30-day grace period during which you can change your mind by signing back in. After that we anonymise your profile, delete your addresses and push tokens, and permanently close the login. Records of jobs, payments, reviews and messages remain in anonymised form where we need them to meet legal obligations, resolve disputes, honour warranty claims or prevent fraud. Deletion is paused while a payment dispute is open on one of your jobs, and for 120 days after your last paid job (the card chargeback window), so that the signed sign-off and chat for that job stay available as evidence. You can still request deletion during that time and it completes once the period has passed.
10. How we protect your data
All traffic between the apps, the website and our providers is encrypted in transit, and the database and its backups are encrypted at rest. Uploaded files sit in a private store and can only be viewed through time-limited links, with the shortest expiry on documents; the exceptions are profile photos and cover photos, which are public so they can be shown in the app and on the website. Access is restricted row by row so people see only what belongs to them. Admin actions that change data are logged with who, when and what changed, and admin views of personal data, documents and media are logged in the same way.
If a data breach is likely to put you at high risk, we will tell you without undue delay and report it to the ICO as the law requires.
11. Cookies on this website
This website uses one essential cookie, used to control access to the site before launch, and remembers your cookie choice in your browser. If you accept, we also use Google Analytics (Google Ireland Limited) to understand how the site is used: which pages are visited, from what kind of device, and roughly where from. IP addresses are anonymised. Analytics cookies are only set after you click Accept on the cookie bar; choose No thanks and nothing is sent to Google. We do not use advertising or cross-site tracking cookies. To change your mind at any time, use “Cookie settings” in the footer of any page: the bar asks again, and withdrawing consent removes the analytics cookies.
12. Your rights
Under UK GDPR you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased (“right to be forgotten”);
- receive your data in a portable format;
- object to or restrict certain processing;
- withdraw consent at any time where consent is the basis, such as location sharing;
- ask for a person to review an automated decision.
To exercise any of these rights, email support@tapatradie.app. We will respond within one month, and may ask you to confirm your identity. There is normally no charge.
13. Complaints
If you are unhappy with how we have handled your data, you have the right to complain to us. Email support@tapatradie.app or write to the address below. We will acknowledge your complaint within 30 days, investigate it and tell you the outcome.
You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
14. Changes to this policy
We will update this policy as the product evolves and show the latest revision date at the top. Significant changes will be flagged in the app or by email.
15. Contact
Tapatradie Limited, Fitzroy House, Crown Street, Ipswich, Suffolk, IP1 3LG · support@tapatradie.app