Privacy
What TradeCore processes, why it is needed, who can see it and how to ask for help with your data.
Last updated 19 September 2026
TradeCore is operated by Stuart Marshall, a sole trader trading as TradeCore, at 48 Glyn Road, Birmingham, B32 2TA, United Kingdom. For privacy enquiries, email support@tradecore.ltd.
We act as controller for account administration, subscriptions, support and platform security. Your employer or contracting company generally controls the workforce and job information it places in its workspace; we process that information on its behalf. Its own privacy notice should explain its decisions about workforce monitoring and record keeping.
Account and contact details, company branding, user roles, login and security records, chosen plans, trial and subscription dates, billing records and support messages. Operational records can include sites, plots or rooms, allocations, time entries, pay rates, worker invoices, notes, photographs, issues and audit history.
Holiday and sickness records may also be processed when those features are used. Sickness information can be health data. Avoid unnecessary medical details; your company must identify an appropriate lawful basis and, where required, a special-category condition for processing it.
We use account, subscription and support information to provide and administer the service under our contract. Where you act for a company rather than contract personally, our legitimate interests include administering that business relationship and assisting its authorised users.
Our legitimate interests also include protecting accounts, preventing abuse, investigating faults and maintaining reliable service. We retain records where necessary to comply with legal obligations. Where consent is required for an optional activity, you can withdraw it without affecting processing already carried out lawfully. Registering for a trial does not by itself subscribe you to promotional emails.
When a company enables location checks, the app requests a location reading during a start or finish action. The reading, accuracy and distance from the site may be stored as work evidence; this is not continuous background tracking. Device permission can be declined or revoked, although your company may need to resolve attendance exceptions.
Work photographs are private by default. An authorised administrator can share selected photographs through a revocable gallery link; anyone holding that link can view its contents. Avoid sharing links or images containing unnecessary personal information.
Push notifications require your device permission. We store the subscription information needed to send them, and you can disable them through your browser or device settings.
Authorised users can access information according to their company roles and permissions. TradeCore may access records where needed for support, administration, security or legal obligations. We do not sell personal information for advertising.
Supabase provides authentication, database and storage services; Vercel hosts the app; Resend delivers service emails; Stripe processes subscription payments. Full card numbers are handled by Stripe, not stored in TradeCore. Suppliers may use infrastructure or personnel outside the UK. Where restricted international transfers take place, applicable data-protection safeguards are required.
We may disclose information if legally required or reasonably necessary to investigate fraud, protect rights or address a security incident.
With your permission, we count visits to our public website using a random browser identifier stored for up to six months. We record its first and most recent visit times, without attaching your name, email, page history or IP address to the visitor record. This measures traffic from any source. We remove visitor records after 90 days without activity when the next visit is recorded. The figures estimate browsers, not individual people. You can decline or withdraw permission through Website privacy choices in the footer; this removes the measurement identifier from your browser and stops future measurement. Previously recorded data remains subject to the retention period. Your permission choice is stored so we can respect it.
The service uses browser storage and cookies where needed to keep you signed in, preserve settings and support the installed app. Clearing browser data can sign you out or remove saved preferences. Google Search Console and Bing Webmaster Tools provide search-performance information; their search reporting is separate from your private company records.
Our scheduled retention process removes read notifications after 30 days, work photographs after 2 years, and location checks, time entries, invoices and audit records after 6 years. Removal occurs through scheduled processing rather than precisely on the anniversary. Backups and legally required records may have different retention periods.
Other account, company, subscription and support information is kept for as long as necessary for the service, legal obligations, security and resolving disputes. Cancelling billing does not immediately delete company records. Contact us about closure or deletion; we will explain what can be removed and any reason for retaining information. Your company remains responsible for retaining records it is legally required to keep.
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing, including processing based on legitimate interests. These rights are subject to legal conditions and are not absolute. We may need to verify your identity before responding.
For workforce records, contact your company administrator first, or contact us and we will help direct the request. For TradeCore account, billing or privacy matters, email support@tradecore.ltd. You can complain to the UK Information Commissioner’s Office if you are unhappy with how your information is handled.
TradeCore may hold business prospect details including company name, business type, contact name, work email, trade, website, publicly available source links and contact history. Information may come from you, your business website or other recorded public business sources. We use relevant corporate business contacts on a legitimate-interests basis where permitted; where electronic-marketing consent is required, we require that consent. A public email address alone is not treated as consent.
Marketing emails may be sent through IONOS using our TradeCore mailbox. Unsubscribe using the link in an email or contact tradecore@tradecore.ltd. We retain a minimal suppression record to honour your objection and prevent future imports from resubscribing you. Opting out of marketing does not stop essential account messages.
For contacts with recorded tracking consent, emails may include an open-measurement image and a tagged trial link. These record whether an email image was requested or a link followed; automated scanners and privacy services can make those measurements inaccurate. A tagged website visit is recorded only if you allow campaign measurement on arrival. We also match verified trial signup emails to recent campaign contacts and record associated subscription conversions to assess the effectiveness of our business marketing. No advertising profiles are sold.
Prospect information is reviewed for relevance and kept only as necessary for business contact, compliance and resolving queries. You can ask for its source, access, correction or deletion, and can object to direct marketing at any time. Where a minimal suppression record remains necessary to honour an objection, we explain this when responding.
We will update this notice when our processing changes and bring material changes to your attention where appropriate. The date above identifies the current version.