1. Data controller
Trade Accelerate is operated by Newton & Sinclair Ltd (“we”, “us”), a company registered in England and Wales. For privacy enquiries, contact us at [email protected].
2. What we collect
We collect the following categories of personal data:
- Lead data — name, email address, and telephone number submitted via QR-code landing pages or contact forms.
- Trade account data — business name, contact name, email address, Companies House number, and payment information (processed by Stripe — we do not store card details).
- EPC data — Energy Performance Certificate data sourced from the public MHCLG EPC register. This is publicly available data relating to properties, not individuals.
- Usage data — page views, QR scan events, campaign performance metrics, and IP addresses collected via standard web server logs and analytics.
- Communications — emails and SMS messages sent through our platform (via Resend and Twilio respectively).
3. How we use your data
- Service delivery — operating your trade account, processing credit purchases, generating campaigns, and routing leads.
- Letter campaigns — property address data from the EPC register is used to target direct mail campaigns on behalf of trade customers. No personal data about occupants is used without consent.
- Review automation — after a job is marked complete, an automated review request may be sent to the customer's email or phone number, where that contact was collected with appropriate consent.
- Platform communications — transactional emails (account confirmations, invoices) and service notifications.
- Fraud prevention and security — detecting and preventing misuse of the platform.
4. Third parties
We share data with the following sub-processors as necessary to operate the service:
- Supabase — hosted Postgres database and authentication
- Stripe — payment processing
- Stannp — direct mail printing and posting
- Twilio — SMS delivery
- Resend — transactional email delivery
- Google — Google Business Profile API for review management
We do not sell personal data to third parties.
5. Retention
Financial records (invoices, credit transactions) are retained for 6 years in accordance with HMRC requirements. Other personal data is retained for as long as your account is active. On account deletion or on a verified erasure request, personal data is deleted within 30 days unless a legal retention obligation applies.
6. Your rights
Under UK GDPR you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Deletion (right to erasure) — request that we delete your personal data. Submit a request at /legal/data-deletion.
- Portability — request your data in a structured, machine-readable format.
- Rectification — request correction of inaccurate personal data.
- Objection — object to processing based on legitimate interests.
To exercise any right, email [email protected]. We will respond within 30 days.
7. Contact
For all privacy-related enquiries: [email protected].