1. Data controller
Trade Accelerate is operated by Newton & Sinclair Ltd, a company registered in England and Wales. For privacy enquiries, contact us at privacy@tradeaccelerate.co.uk.
2. What we collect
We collect the following categories of personal data:
- Lead data:name, email address, and telephone number submitted via QR-code landing pages or contact forms.
- Trade account data:business name, contact name, email address, Companies House number, and payment information (processed by Stripe — we do not store card details).
- EPC data:Energy Performance Certificate data sourced from the public MHCLG EPC register. This is publicly available data relating to properties, not individuals.
- Usage data:page views, QR scan events, campaign performance metrics, and IP addresses collected via standard web server logs and analytics.
- Communications:emails and SMS messages sent through our platform (via Resend and Twilio respectively).
3. How we use your data
- Service delivery:operating your trade account, processing credit purchases, generating campaigns, and routing leads.
- Letter campaigns:property address data from the EPC register is used to target direct mail campaigns on behalf of trade customers. No personal data about occupants is used without consent.
- Review automation:after a job is marked complete, an automated review request may be sent to the customer's email or phone number, where that contact was collected with appropriate consent.
- Platform communications:transactional emails (account confirmations, invoices) and service notifications.
- Fraud prevention and security:detecting and preventing misuse of the platform.
4. Third parties
We share data with the following sub-processors as necessary to operate the service:
- Supabase—hosted Postgres database and authentication
- Stripe—payment processing
- Stannp—direct mail printing and posting
- Twilio—SMS delivery
- Resend—transactional email delivery
- Google—Google Business Profile API for review management
We do not sell personal data to third parties.
5. Retention
Financial records (invoices, credit transactions) are retained for 6 years in accordance with HMRC requirements. Other personal data is retained for as long as your account is active. On account deletion or on a verified erasure request, personal data is deleted within 30 days unless a legal retention obligation applies.
6. Your rights
Under UK GDPR you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Deletion (right to erasure): request that we delete your personal data. Submit a request at /legal/data-deletion.
- Portability: request your data in a structured, machine-readable format.
- Rectification: request correction of inaccurate personal data.
- Objection: object to processing based on legitimate interests.
To exercise any right, email privacy@tradeaccelerate.co.uk. We will respond within 30 days.