Privacy policy

1. Data controller

Trade Accelerate is operated by Newton & Sinclair Ltd, a company registered in England and Wales. For privacy enquiries, contact us at privacy@tradeaccelerate.co.uk.

2. What we collect

We collect the following categories of personal data:

• Lead data — name, email address, and telephone number submitted via QR-code landing pages or contact forms.
• Trade account data — business name, contact name, email address, Companies House number, and payment information (processed by Stripe — we do not store card details).
• EPC data — Energy Performance Certificate data sourced from the public MHCLG EPC register. This is publicly available data relating to properties, not individuals.
• Usage data — page views, QR scan events, campaign performance metrics, and IP addresses collected via standard web server logs and analytics.
• Communications — emails and SMS messages sent through our platform (via Resend and Twilio respectively).

3. How we use your data

• Service delivery — operating your trade account, processing credit purchases, generating campaigns, and routing leads.
• Letter campaigns — property address data from the EPC register is used to target direct mail campaigns on behalf of trade customers. No personal data about occupants is used without consent.
• Review automation — after a job is marked complete, an automated review request may be sent to the customer's email or phone number, where that contact was collected with appropriate consent.
• Platform communications — transactional emails (account confirmations, invoices) and service notifications.
• Fraud prevention and security — detecting and preventing misuse of the platform.

4. Third parties

We share data with the following sub-processors as necessary to operate the service:

• Supabase — hosted Postgres database and authentication
• Stripe — payment processing
• Stannp — direct mail printing and posting
• Twilio — SMS delivery
• Resend — transactional email delivery
• Google — Google Business Profile API for review management

We do not sell personal data to third parties.

5. Retention

Financial records (invoices, credit transactions) are retained for 6 years in accordance with HMRC requirements. Other personal data is retained for as long as your account is active. On account deletion or on a verified erasure request, personal data is deleted within 30 days unless a legal retention obligation applies.

6. Your rights

Under UK GDPR you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Deletion (right to erasure) — request that we delete your personal data. Submit a request at /legal/data-deletion.
• Portability — request your data in a structured, machine-readable format.
• Rectification — request correction of inaccurate personal data.
• Objection — object to processing based on legitimate interests.

To exercise any right, email privacy@tradeaccelerate.co.uk. We will respond within 30 days.

7. Contact

For all privacy-related enquiries: privacy@tradeaccelerate.co.uk.