← BACK

Privacy Policy

Last updated: 3 July 2026

This page describes what TradeTake collects and why. It is written to reflect UK GDPR and the Data Protection Act 2018. It is not legal advice and does not replace a solicitor-reviewed policy.

1. Who we are

TradeTake ("we", "us") operates the TRADE marketplace for surplus building materials in the Bristol & Bath area. For UK GDPR purposes we are the data controller for personal data you provide through the app. You can contact us at info@trade-app-uk.com.

2. What we collect

  • Account: name, email, phone, avatar, postcode.
  • Seller verification: business name, Companies House number, or a document you upload (UTR / insurance) if you sell as a sole trader.
  • Listings: photos, description, price, location (approximate lat/lng for the "near me" search).
  • Transactions: orders, offers, and payment metadata handled by Stripe. We do not see or store your full card number.
  • Messaging: direct messages you exchange with other users on a listing.
  • Technical: device / browser identifiers used to keep you signed in and prevent abuse.

3. Why we use it (lawful basis)

  • Contract — to run your account, listings, offers and orders.
  • Legitimate interest — fraud prevention, verifying sellers, showing distance to listings.
  • Legal obligation — retaining order/invoice records for UK tax law (typically 6 years).
  • Consent — optional analytics or marketing cookies (see our cookie policy).

4. Who we share it with

We share the minimum necessary data with:

  • Supabase / Lovable Cloud — database and authentication hosting (EU).
  • Stripe — payment processing and seller payouts.
  • Companies House — for looking up your registered company during verification.
  • Apple / Google — if you install the app from their stores.

We do not sell your personal data.

5. How long we keep it

  • Active accounts: for as long as you use TradeTake.
  • Completed orders & invoices: up to 6 years (UK tax law).
  • Direct messages: 2 years after your last activity in the thread.
  • Unverified accounts with no activity: 12 months, then deleted.

6. Your rights

Under UK GDPR you can:

  • Access a copy of your data (in-app: Profile → Account → Download my data).
  • Correct inaccurate data (edit fields on your profile).
  • Delete your account (in-app: Profile → Account → Delete account).
  • Object to processing or restrict it — email us.
  • Complain to the ICO at ico.org.uk.

Some data (completed orders) may be retained after account deletion where the law requires it. All personally identifying fields are anonymised.

7. Security

Data is encrypted in transit (HTTPS) and at rest by our hosting provider. Access is protected by row-level security so users only see rows they are entitled to.

8. Changes

If we update this policy we will change the date at the top and notify signed-in users in-app.

TermsCookiesContact