Privacy Policy

Last updated: May 2026

TradesSite ("we", "us", "our") is committed to protecting your personal data. This policy explains what we collect, how we use it, and your rights under UK GDPR.

Who we are

TradesSite is operated by Websites Built Fast. If you have any privacy questions, contact us at [email protected].

What data we collect

• Account data — email address and password (stored as a secure hash) when you register.
• Business profile data — business name, phone number, email address, trade type, address, and images you upload to build your site.
• Contact form submissions — when a visitor uses the contact form on your TradesSite page, their name, email, phone, and message are forwarded to you by email and are not stored in our database.
• Usage data — standard server access logs (IP address, browser, pages visited) retained for up to 30 days for security purposes.

How we use your data

• To create and host your TradesSite website.
• To send password reset emails when requested.
• To forward contact form enquiries to the email address on your account.
• To manage your account and provide support.

We do not sell your data to third parties. We do not use your data for advertising.

Cookies

We use one session cookie to keep you logged in to your dashboard. This cookie is strictly necessary for the service to function and is deleted when you log out or close your browser. We do not use tracking or advertising cookies.

Our pages load fonts from Google Fonts, which may set its own cookies subject to Google's privacy policy.

Data storage and security

Your data is stored on servers located in the UK/EU. Passwords are hashed using bcrypt and never stored in plain text. File uploads are stored in an isolated directory with PHP execution disabled.

How long we keep your data

We retain your account data for as long as your account is active. If you delete your account, your data is removed within 30 days. Server access logs are retained for up to 30 days.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Receive your data in a portable format.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the latest revision. Continued use of the service after changes constitutes acceptance.