GDPR Compliance
Last updated: 14 June 2026
Our Commitment to GDPR
TradesMan Quote is operated by Coral Services LTD and is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to data protection, your rights as a data subject, and how to exercise those rights.
Data Controller Details
Your Rights as a Data Subject
Under UK GDPR, you have the following rights with respect to your personal data:
How to Submit a Data Rights Request
To exercise any of your rights, email us at contact@tradesmanquote.co.uk with the subject line "Data Rights Request" and include:
- Your full name and registered email address
- The specific right you wish to exercise
- Any additional context to help us locate your data
We will acknowledge your request within 72 hours and respond within 30 calendar days. We may ask you to verify your identity before fulfilling the request.
International Data Transfers
Some of our data processors operate outside the UK. Where personal data is transferred internationally, we ensure adequate safeguards are in place:
Supabase: Hosted on AWS EU West 1 (Ireland). Covered by UK-EU adequacy decision.
Cloudflare R2: EU-based storage. Covered by Standard Contractual Clauses (SCCs).
Stripe: US-based. Covered by SCCs and Stripe's participation in the UK-US Data Bridge.
Smart Media Analysis Service: US-based processing partner. Covered by applicable SCCs. Job files sent for analysis are deleted from the service servers immediately after processing.
Intelligent Quote Structuring Service: US-based processing partner. Covered by applicable data processing agreements and SCCs.
Data Minimisation and Purpose Limitation
We collect only the personal data necessary for the provision of the TradesMan Quote service. Data is processed only for the purposes for which it was collected. We do not use your data for advertising profiling, sell data to third parties, or use your content to improve our systems.
Data Breach Notification
In the event of a personal data breach, we will notify the ICO within 72 hours where the breach is likely to result in a risk to individuals' rights and freedoms. If the breach is likely to result in high risk to you, we will notify you directly without undue delay.
Complaints
If you are not satisfied with our response to a data rights request, or if you believe we are processing your data in a manner that infringes UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.