GDPR / Data Processing Statement

**Effective date:** 5 August 2026

TradesPlace processes personal data in accordance with UK GDPR and the Data Protection Act 2018.

## Data controller

TradesPlace Email: alex@tradesplace.co.uk Website: https://tradesplace.co.uk

## Categories of data subjects

- Website visitors and enquiry form submitters - Prospective business clients (B2B outreach) - Contracted clients

## Security measures

- HTTPS everywhere - Hashed session tokens and bcrypt password storage for admin access - Environment-based secrets (no default passwords in production) - Webhook signature verification for Stripe and Stannp - reCAPTCHA on public forms

## Data Protection Officer

We are not required to appoint a DPO. For privacy queries contact alex@tradesplace.co.uk.

## Sub-processors

A current list is maintained in our Privacy Policy. Clients may request notification of material changes.

## ICO registration

If required based on our processing activities, we will register with the Information Commissioner's Office (ico.org.uk).