Privacy Policy
Effective date: 17 September 2026
Aventura Labs Ltd (trading as TradesPlace) ("we", "us", "TradesPlace") respects your privacy. This policy explains how we collect, use, and protect personal data when you use https://tradesplace.co.uk or contact us about website design and hosting services.
Who we are
Data controller: Aventura Labs Ltd (trading as TradesPlace) Registered in England and Wales, company number 17437645 Registered office: 27 Old Gloucester Street, London, England, WC1N 3AX
Privacy contact: privacy@tradesplace.co.uk General contact: support@tradesplace.co.uk
What we collect
- Homepage concept requests: name, business name, email, optional phone and website URL, and the goal supplied in your brief.
- Client billing: name, business details, email, billing address, and payment records via Stripe.
- Admin CRM: prospect research data we collect for legitimate business outreach (business name, trade, public contact details).
- Outreach response data: if we wrote to your business and someone scanned the QR code or followed the link we sent, we record that scan, the pages opened on the demo site we built for you, the referring page, device type and a hashed IP address, against your business's record.
- Technical data: IP address (hashed for spam protection), browser type, and cookies (see our Cookie Policy).
We do not knowingly collect data from children under 16.
How we use your data
- Respond to enquiries and provide quotes
- Build, host and maintain your website under your plan
- Process invoices and subscriptions
- Send service-related emails (not marketing without consent)
- Protect our sites from spam and abuse
- Measure whether outreach we sent was received and acted on
- Meet legal and accounting obligations
Lawful bases (UK GDPR): contract, legitimate interests (B2B outreach to businesses with poor web presence), consent (where required), and legal obligation.
Measuring the response to that outreach runs on the same legitimate interest. You can object at any time by emailing privacy@tradesplace.co.uk: we will stop it and delete the visit records held for your business.
Who we share your data with
We use third-party services to host the application, take payments, send email, post letters, make and transcribe calls, register domains and monitor errors. Each one is bound by a written contract to process personal data only on our instructions.
We publish the full list — every processor, what it does, where it holds data and the safeguard that covers the transfer — and keep it current: Sub-processors .
Automated processing and AI
Where you use the AI Secretary or voicemail transcription, call audio is converted to text by a speech service and a language model writes the summary your client record shows. Both are named in the sub-processor list. No decision with a legal or similarly significant effect on anyone is made by these systems: they take a message and write it down.
When we act for our clients, not for ourselves
Much of what this system holds is not our data at all. When someone fills in an enquiry form on a client's website, rings a tracked number, leaves a voicemail, sends a review or uploads a job photo, that record belongs to our client. They decide why it is held and what happens to it; we hold it on their behalf and act on their instructions.
In data-protection terms the client is the controller and we are the processor. The terms governing that relationship are part of every plan agreement: Terms .
If you are a member of the public and want a record like that corrected or erased, the quickest route is the business you contacted. Ask us and we will tell you who that is and pass the request on.
| Provider | Purpose |
|---|---|
| Vonage | Telephony: call routing, recording, and SMS delivery |
| Railway | Application and database hosting |
| Cloudflare | DNS, CDN and edge hosting for client websites |
| Stripe | Payments, subscriptions and invoicing |
| Resend | Transactional email delivery |
| PostGrid | Printing and posting letters and postcards |
| Stannp | Printing and posting letters and postcards |
| Google Places | Business listing details and review content for the Reputation service |
| Google reCAPTCHA | Spam and abuse protection on public forms |
| Microsoft Clarity | Heatmaps and session replay on our public website, run in its cookie-less mode and never loaded on a signed-in page |
| Plausible Analytics | Cookie-free, aggregate analytics on our public website |
How long we keep things
The periods below are the settings in force on this deployment, read when this page was generated rather than written down separately, so they cannot drift from what actually happens.
| What | How long |
|---|---|
| Call and voicemail audio | 30 days |
| Call and voicemail transcripts | 90 days |
| Enquiries to us | Up to 24 months, unless you become a client |
| Enquiries to our clients, once the job closes | 90 days |
| Enquiries to our clients, if the job never closes | 730 days |
| Client and billing records | The contract, plus 6 years for tax and legal purposes |
| Prospect research | While relevant to an active sales pipeline |
| Outreach response records | 12 months from the last interaction |
| Internal assistant conversations | 90 days |
| Audit logs | 365 days |
| Everything held for a client, after they leave | 30 days |
Your rights
You may request access, correction, erasure, restriction, portability, or object to processing. Contact privacy@tradesplace.co.uk. You may complain to the ICO (ico.org.uk).
Where your data is held, and international transfers
The application and its database run in Amsterdam, Netherlands (EU). Encrypted backups and website assets are held in object storage in the European Union.
The UK's adequacy regulations cover the European Economic Area, so no further mechanism is needed for that. Some processors are established in the United States or Canada; those transfers are made under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or under an adequacy decision where one exists. The sub-processor list states which applies to each.
Changes
We may update this policy. The effective date above will change when we do.