Privacy Notice — D3M Trades

1. Contact Details

For any questions about this privacy notice or to exercise your data rights, contact us at:

2. What Information We Collect, Use, and Why

To provide services and goods, including delivery:

Names and contact details
Addresses
Purchase or account history
Payment details — processed securely by Stripe; we do not store card data on our servers
Health and safety information
Account information
Website and app user journey information (including cookie tracking)
Photographs or video recordings
Records of meetings and decisions
Information relating to compliments or complaints

Our system infrastructure is powered by Supabase. Data is stored on secure, encrypted servers within the UK/EEA to ensure your data remains protected under UK data protection standards.

For the operation of customer accounts and guarantees:

Names and contact details
Addresses
Payment details
Purchase history
Account information, including registration details
Information used for security purposes
Marketing preferences

To prevent, detect, investigate or prosecute crimes:

Names and contact information
Customer or client accounts and records
Financial transaction information
Information relating to health and safety

For service updates or marketing purposes:

Names and contact details
Addresses
Location data
Purchase or viewing history
IP addresses
Website and app user journey information
Records of consent, where appropriate

To comply with legal requirements:

Name
Contact information
Financial transaction information
Health and safety information

For dealing with queries, complaints or claims:

Names and contact details
Address
Payment details
Account information
Purchase or service history
Relevant information from previous investigations
Financial transaction information
Correspondence

3. Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. You can find out more about lawful bases on the ICO's website.

Your data protection rights:

Right of access — Request copies of your personal information and details of how we use it.
Right to rectification — Ask us to correct or delete information you believe is inaccurate or incomplete.
Right to erasure — Ask us to delete your personal information.
Right to restriction of processing — Ask us to limit how we use your personal information.
Right to object to processing — Object to the processing of your personal data.
Right to data portability — Ask that we transfer your personal information to another organisation or to you.
Right to withdraw consent — Where we use consent as our lawful basis, you can withdraw it at any time.

We must respond to any data protection rights request within one month. To make a request, contact us at support@d3mtrades.com.

Our lawful bases for providing services and goods:

Consent, Contract, Legal obligation, and Legitimate interests — including operating a functional job management platform (scheduling, site notes, accounting integration) and providing our Shared Intelligence Engine for industry-specific pricing insights. Users may opt out of intelligence sharing via account settings.

For platform security and crime prevention:

Legitimate interests — We have a legitimate interest in maintaining a secure platform and preventing fraud and unauthorised access. Under the Data (Use and Access) Act 2025, these activities are considered recognised legitimate interests.

For legal requirements and complaints handling:

Legal obligation and Legitimate interests — To comply with the Data (Use and Access) Act 2025 and to respond to support requests, formal complaints, and legal claims, using only the minimum data required.

4. Where We Get Personal Information From

Directly from you when you use the app
Publicly available sources
Third-party services: Supabase (cloud hosting), Stripe (payments), Google Maps (location features), and email delivery providers

5. How Long We Keep Information

Type of Data	Retention Period
Client and contact records	6 years from date of last activity (Limitation Act 1980)
Job, quote and invoice records	6 years from the transaction date (HMRC / Companies Act 2006)
Financial transaction records	6 years from end of the accounting period
Subcontractor and worker records	6 years from end of engagement
Health & safety incident records	40 years where personal injury is involved (RIDDOR 2013); otherwise 3 years
Marketing consent records	Duration of relationship plus 1 year after consent is withdrawn
Support, complaints and queries	3 years from date of resolution
Photographs and video recordings	Up to 30 days unless required for an ongoing investigation

For questions about specific retention periods, contact us using the details in section 1.

6. Who We Share Information With

Data processors:

Supabase — Cloud Infrastructure & Database

Provides the secure cloud database where we store all application data, including user accounts, job information, site notes, and photographs. Data is encrypted at rest and in transit. Servers are located within the UK/EEA.

Stripe — Payment Processing

Processes subscription payments and manages billing. We do not store your card details. Their privacy policy is available at stripe.com/gb/privacy.

Google Maps Platform

Used for job address lookup, map display in the Scheduler, and distance/travel cost calculation. Job addresses are shared with Google to provide these features.

Email Delivery Services (e.g. Resend / AWS SES)

Used to send system notifications, job updates, and reports on your behalf.

Others we may share information with:

HMRC — To comply with tax and business reporting requirements
Professional advisors — External accountants and legal advisors for business audit and compliance
Regulatory authorities — Where required by law
Safeguarding organisations — Where there is a safeguarding obligation
Financial or fraud investigation authorities — Where legally required

7. How to Complain

If you have any concerns about our use of your personal data, please contact us first:

support@d3mtrades.com

If you remain unhappy after raising a complaint with us, you can also complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113

Website: ico.org.uk/make-a-complaint

Your Data Rights — Self-Service

Sign in to D3M Trades to download a copy of your data or submit an account deletion request. Both actions are available under Company Settings → Privacy & Data, or use the buttons below if you are already signed in on this device.

Checking sign-in status…