Privacy Policy
Last updated 3 September 2026
Who we are
TradeZiller is job management software for UK trade businesses. It is operated by Great White Design Ltd, a company registered in England and Wales, company number 16725058, registered office Unit 5 Wareham Road, Blackpool, Lancashire, England, FY3 7XG.
“We” and “us” below mean Great White Design Ltd. This policy covers the TradeZiller website, the TradeZiller web application, and the TradeZiller mobile app for iPhone and Android.
Two different roles, and why it matters to you
TradeZiller is used by tradespeople to run their own businesses. That means we handle two kinds of personal data, and our responsibilities are different for each.
Account holders. If you sign up for TradeZiller, we are the data controller for your account. We decide what we collect about you and why, and this policy explains it.
Your customers. When an account holder records a customer, an address, an appointment or a certificate, that information belongs to their business. We are the data processor: we store and process it on their instructions and do not use it for our own purposes.
So if you are a homeowner whose details are in TradeZiller because a tradesperson worked on your property, the business you dealt with is the right people to ask about your data. If you contact us instead, we will point you to them — we are not permitted to change or delete their records on our own initiative.
What we collect, and why
| Account details | Your name, email address and password (stored only as a cryptographic hash, never as text). Needed to create your account and sign you in. |
| Business details | Your trading name, address, phone number, VAT number and any registration numbers you add to your certificates. Used to fill in the documents you produce. |
| Your business records | Customers, properties, appliances, appointments, quotes, invoices, certificates and notes that you enter. Stored so the software can do its job. |
| Photographs | Photos you take or choose for a job, an appliance or a receipt. Used on the documents you produce. Photos are shrunk on your device before being sent. |
| Payment details | Subscription and card payments are handled by Stripe. We receive confirmation that a payment succeeded and the last four digits of the card. We never see or store full card numbers. |
| Technical data | IP address, device type, app version and error reports. Used to keep the service working and to diagnose faults. |
| Notification token | If you allow notifications, an anonymous device token so we can send you alerts about your own jobs. |
What we do not do
We do not sell personal data. We do not share it with advertisers. We do not track you across other apps or websites, and there is no advertising identifier in the app.
The app does not collect your location. It does not use GPS and does not ask for location permission. Route planning works from the postcodes of the jobs in your diary, not from where your phone is.
The camera and photo library are used only when you choose to add a photo, and only for that photo.
Our legal grounds for using your data
Performance of a contract. Most processing exists because you asked us to run your business software. We cannot provide it without storing what you enter.
Legitimate interests. Keeping the service secure, diagnosing faults, preventing abuse, and contacting you about material changes.
Legal obligation. Keeping records of payments and invoices for the periods UK tax law requires.
Consent.Push notifications, and access to your camera or photos. You can withdraw either at any time in your phone’s settings.
Who else processes your data
We use the following providers. Each is bound by contract to process data only on our instructions.
| Google Firebase | Sign-in, database, file storage and push notifications. Data held in the EU or UK where the service allows. |
| Google Cloud Platform | Underlying hosting for the above. |
| Vercel | Hosting for the website and web application. |
| Stripe | Card payments and subscriptions. Stripe is the controller for card data it collects. |
| Google Maps Platform | Address lookup and travel times for route planning. |
| postcodes.io | Turning a postcode into approximate coordinates. Postcodes only — no names or addresses. |
| SparkPost | Sending transactional email, such as an invoice to your customer. |
| Expo | Delivering app updates and crash diagnostics. |
| QuickBooks, Xero, FreeAgent, HMRC | Only if you connect them yourself, and only the records needed to keep your books in step. |
We may also disclose data where the law requires it, or to establish or defend legal claims.
Where your data goes
We aim to keep data in the UK or the European Economic Area. Some providers above are based in the United States. Where data is transferred outside the UK, it is protected by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
How long we keep it
Your business records are kept for as long as your account is open, because they are the working records of your business.
If you close your account, we delete or anonymise your data within 90 days, except where we must keep it longer — invoices and payment records are retained for six years to meet UK tax requirements.
You can export your data before closing your account. Ask us and we will provide it in a machine-readable format.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete data, where we have no overriding reason to keep it;
- object to, or ask us to restrict, certain processing;
- receive your data in a portable format;
- withdraw consent where consent is what we relied on.
Write to luke@greatwhitedesign.co.uk. We will respond within one month.
If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first.
Security
Data is encrypted in transit and at rest. Passwords are stored only as hashes. Access to production systems is limited to people who need it, and every account’s data is separated so one business cannot read another’s.
No system is perfect. If a breach affects your rights, we will tell you and the ICO within the time limits the law sets.
Children
TradeZiller is business software and is not intended for anyone under 18. We do not knowingly collect data about children.
Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects you, we will tell you in the app or by email before it takes effect.
Contact
Great White Design Ltd
Unit 5 Wareham Road
Blackpool, Lancashire
England, FY3 7XG
Privacy enquiries: luke@greatwhitedesign.co.uk
App feedback and support: dev@greatwhitedesign.co.uk