Privacy Policy

Tapatradie Limited, trading as Tap a Tradie (“Tap a Tradie”, “we”, “us”), runs a two-sided marketplace in the United Kingdom connecting customers with vetted local tradespeople across a range of trades, through our website and mobile apps. This policy explains what personal data we collect, why, who we share it with and the rights you have over it. It applies to customers, tradespeople and anyone visiting our website.

1. Who we are

Tapatradie Limited is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 17355214, with our registered office at Fitzroy House, Crown Street, Ipswich, Suffolk, IP1 3LG. VAT registration number GB 531 3799 81. Contact us at support@tapatradie.app. For any question about this policy or your data, contact support@tapatradie.app.

You must be 18 or over to use Tap a Tradie. We do not knowingly collect data from anyone under 18; if you believe we have, tell us and we will delete it.

2. What we collect

3. Why we use your data, and our lawful bases

We use this data to run the marketplace: matching your job with nearby tradespeople, letting you track their arrival, enabling chat, taking payment, sending transactional notifications and emails, verifying tradespeople, handling warranty claims and fee disputes, keeping the platform safe through moderation, and meeting our legal obligations. We do not sell your personal data, and we do not use it for third-party advertising.

Under UK GDPR our lawful bases are:

Automated decisions

The only automated decision we make about you is this: if a tradesperson’s account records three no-show strikes, the account is paused automatically so no new jobs are offered. Current jobs continue, and an admin reviews every pause and can lift it. You can ask for a person to review this decision at any time.

Profile and cover photos also pass through an automated safety screen before they appear in the app. If a photo is rejected you can simply upload another, or ask us to review the decision and a member of our team will look at it. We do not make any other decisions about you solely by automated means.

4. Live location of tradespeople

A tradesperson’s live position is shared with the booking customer only while the tradesperson is on the way to the job or on site. We store a single current location and timestamp for each tradesperson, overwritten as it updates. There is no location history. Outside an active job, customers never receive a tradesperson’s coordinates; any distance shown in search results is calculated on our servers.

5. What each side of a booking sees

We release contact details in stages. Before accepting a job, a tradesperson sees the postcode and town, the job description and photos, and the customer’s first name, photo and rating. The full address is released when the tradesperson accepts the job, and the customer’s phone number is available only while the job is live. The customer sees the tradesperson’s name, photo, reviews and live position during the job.

In the public tradesperson directory and search, anyone can see a tradesperson’s business name, trade, photo, service area, ratings and reviews. A tradesperson’s registered or home address, company number and VAT number are not shown to the public; we use them for verification and release them only to a customer they are working with, where identifying the business is needed.

Once a tradesperson takes on your job, they become an independent controller of the personal data they receive to carry it out. Our Terms require them to use that data for the job only.

6. Payments

Payments are processed by Stripe. Your card details go directly to Stripe and we never store card numbers. Tradesperson bank details are held by Stripe, not by us. We keep records of charges, payouts and refunds (amounts, dates, job references) needed to run the service and meet accounting obligations. Stripe’s own privacy policy applies to its processing.

7. Who we share data with

We use a small number of service providers (processors) to run the platform, each under contract and acting only on our instructions:

ProviderWhat it doesWhere
SupabaseDatabase and authenticationEU (Frankfurt)
Cloudflare R2Storage for photos, videos, documents and signatures (private, apart from public profile and cover photos)EU
StripePayments; holds card and bank detailsSee Stripe’s policy
TwilioText messages such as sign-in codesUSA
ResendTransactional email such as confirmations and receiptsUSA
ExpoPush notifications to the appsUSA
OpenAIAutomated safety screen on uploaded profile and cover photosUSA
GoogleMaps and Places address search, and optional Google sign-inUSA
postcodes.ioConverting postcodes into accurate addressesUK
Companies HouseVerifying a tradesperson’s company, directors and statusUK
HMRCChecking a tradesperson’s VAT registrationUK
AppleNotifications to iPhones, iOS app distribution, and optional Sign in with AppleUSA
HetznerWebsite hostingEU
SentryCrash reporting: device model, app version, IP address, your user ID and details of the errorEU (Frankfurt) where configured, otherwise USA

Beyond that, data is shared only between the two parties to a booking (section 5), with our professional advisers where needed, or where we are legally required to disclose it, for example to the police or a court. If Tap a Tradie is ever sold or restructured, your data may transfer to the new owner, who must protect it in line with this policy.

8. International transfers

Twilio, Resend, Expo, OpenAI, Google and Apple process some data in the United States, as does Sentry where a project is not hosted in its EU region. These transfers rely on the UK International Data Transfer Addendum to the standard contractual clauses, the UK Extension to the EU–US Data Privacy Framework, or another safeguard approved under UK GDPR. Our database and file storage are in the European Union; transfers from the UK to the EEA are covered by the UK’s adequacy regulations, so no additional safeguard is needed. You can ask us for details of these safeguards.

9. How long we keep your data

We keep your data while you hold an account, with these limits:

DataHow long
Chat messagesWhile your account is active, so a record of what was agreed is available for disputes or warranty claims
Chat photos and files, job photos and videos, sign-off signatures24 months after the job completes
Text message send logs90 days
Moderation records12 months
Undeliverable notification records30 days
Verification evidence reviewed by staff6 years (contractual records)
Payment and fee records6 years after the end of the financial year (HMRC)
Security logs24 months, then purged automatically
Live locationOnly the latest position, overwritten as it updates

If you delete your account, there is a 30-day grace period during which you can change your mind by signing back in. After that we anonymise your profile, delete your addresses and push tokens, and permanently close the login. Records of jobs, payments, reviews and messages remain in anonymised form where we need them to meet legal obligations, resolve disputes, honour warranty claims or prevent fraud. Deletion is paused while a payment dispute is open on one of your jobs, and for 120 days after your last paid job (the card chargeback window), so that the signed sign-off and chat for that job stay available as evidence. You can still request deletion during that time and it completes once the period has passed.

10. How we protect your data

All traffic between the apps, the website and our providers is encrypted in transit, and the database and its backups are encrypted at rest. Uploaded files sit in a private store and can only be viewed through time-limited links, with the shortest expiry on documents; the exceptions are profile photos and cover photos, which are public so they can be shown in the app and on the website. Access is restricted row by row so people see only what belongs to them. Admin actions that change data are logged with who, when and what changed, and admin views of personal data, documents and media are logged in the same way.

If a data breach is likely to put you at high risk, we will tell you without undue delay and report it to the ICO as the law requires.

11. Cookies on this website

This website uses one essential cookie, used to control access to the site before launch, and remembers your cookie choice in your browser. If you accept, we also use Google Analytics (Google Ireland Limited) to understand how the site is used: which pages are visited, from what kind of device, and roughly where from. IP addresses are anonymised. Analytics cookies are only set after you click Accept on the cookie bar; choose No thanks and nothing is sent to Google. We do not use advertising or cross-site tracking cookies. To change your mind at any time, use “Cookie settings” in the footer of any page: the bar asks again, and withdrawing consent removes the analytics cookies.

12. Your rights

Under UK GDPR you have the right to:

To exercise any of these rights, email support@tapatradie.app. We will respond within one month, and may ask you to confirm your identity. There is normally no charge.

13. Complaints

If you are unhappy with how we have handled your data, you have the right to complain to us. Email support@tapatradie.app or write to the address below. We will acknowledge your complaint within 30 days, investigate it and tell you the outcome.

You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

14. Changes to this policy

We will update this policy as the product evolves and show the latest revision date at the top. Significant changes will be flagged in the app or by email.

15. Contact

Tapatradie Limited, Fitzroy House, Crown Street, Ipswich, Suffolk, IP1 3LG · support@tapatradie.app