What we hold, and why.

The short version

We hold your account details, the business details you put on your letterhead, and the searches and leads you save. We do not sell any of it, we do not track you around the internet, and there is no analytics or advertising code on this site at all. Planning data comes from public registers and is not about you.

Who we are

Tradecue is the data controller for the personal data described here. Write to support@tradecue.co.uk about anything on this page, including a request to see or delete what we hold.

What we hold, and why

• Your account. Email address, a hashed password, optionally your name, and if you turn on two-step verification, its secret and recovery codes. Needed to give you an account at all. Lawful basis: performance of a contract.
• Sessions. A hash of your session token, the time, your browser’s user agent and your IP address. Needed to keep you signed in and to let you recognise and revoke a session that is not yours. Lawful basis: legitimate interests in securing accounts.
• Your business details. Company name, contact name, address, phone, reply address, website, a short trade summary and your logo. These exist to fill the letterhead on letters you write.
• What you save. Alerts and the places they watch, the applications you track and the tags you put on them, your pipeline and its contact notes, and the letters you write.
• Alert destinations. Any extra email address or mobile number you add for alerts, and whether it has been confirmed. Nothing is sent to either until you confirm it.
• Messages you send. If you write from the contact form, we see what you typed and the address you send from. That is how we reply.

Cookies

This marketing site does not set an account cookie. The app, where you sign in, uses two:

• gw_session keeps you signed in. It holds a random token, not your details, and deleting it signs you out.
• gw_searches counts how many searches you have run, up to three, so we can wait before asking you to sign up. It is a small number — no identifier, and no record of what you searched for. It expires after 30 days.

There is no analytics, no advertising and no third-party tracking. Nothing here follows you elsewhere.

Who else sees it

• Zoho Mail sends product email (alerts, sign-in) and receives website enquiries to hello@tradecue.co.uk. An address we email or that writes to us is processed by them.
• Stannp prints, stamps and posts a letter if you ask us to send it for you. They see the letter and the postal address, not a phone number or email for the household.
• Cloudflare runs the check on the sign-up and sign-in forms that tells a person from a script. It sees the request, not the password.
• postcodes.io resolves place and postcode searches. What you type in a search box goes to them; who you are does not.
• Google Fonts and the Tailwind CSS CDN serve type and styles on this marketing site, so those requests go to them. The app does not load those CDNs.

That is the full list. We do not sell personal data and we do not share it for anyone else’s marketing.

Planning data is not personal data about you

Applications, addresses and decisions come from public planning registers, the Planning London Datahub and planning.data.gov.uk. Sold prices come from HM Land Registry; domestic EPCs from the official register. Councils and those registers publish them, and councils redact homeowners’ phone numbers and email addresses before doing so. We hold no extra contact details for the people on those applications.

How long we keep it

Account data for as long as you have an account, and until you ask us to delete it. Sessions expire after 30 days. Messages to us are kept while we are dealing with them and for a reasonable period afterwards.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Email support@tradecue.co.uk and we will answer within a month. If you are not satisfied you can complain to the Information Commissioner’s Office.

Where it is held

On servers in the EU. Our email and text providers may process data outside the UK under their own transfer safeguards.

This notice describes the product as it runs. It has not been signed off by a solicitor. The terms of use cover the service itself.