Privacy

Version: 1 November 2026. Controller: Skythorn Digital Ltd. Contact Skythorndigital@gmail.com.

Information used

Account email and authentication information; business names, trades, working areas, company logos, business contact and registration details, and membership roles; job/customer records, photos, quotes, invoices, reminders and payment records you enter; posts, replies, private messages, reviews, blocks and reports; check status and supporting business evidence. The full business postcode and precise geocoded business-base coordinates are private and used for radius searches. Public job coordinates are rounded to two decimal places and labelled as approximate straight-line distances. Customer street addresses remain separate private job data. Portfolio images are deliberately selected for sharing, resized and re-encoded before upload; do not include identifying details in the photograph itself.

Purpose and access

We use these records to run your account and requested services, protect the community and respond to support or deletion requests. Private jobs are restricted to the business and relevant staff assignments. Supporting evidence is private to its business owner and authorised reviewers. Public posts are visible to signed-in community members. Avoid uploading unnecessary personal or sensitive information and obtain customer permission before sharing their details or photos.

Company logos and paperwork details are stored with your private business settings. They appear on quotes and invoices you choose to share. Questions, part requests and photos selected for a community post are shared with community members; private job photos are not attached automatically.

Free customer job requests (pilot)

Customers can create a free account using their email and a confirmed sign-in link or app sign-in. We hold the customer name, email, general area, requested trade, job description, timing, optional budget range, and the record of which businesses responded. A job request is reviewed before appearing to trade businesses. Approved businesses see the job summary and general area, not the customer’s email or house address.

When a customer explicitly selects a business (up to three per request), that business can access the customer’s name and email only to discuss the requested job. Customers can close requests. Businesses must not use enquiry contact details for unrelated marketing. No customer lead fee is charged during this pilot.

Customer requests, trade responses and the record of contact sharing are held to deliver the service and help prevent scams. Closing a request stops new responses and contact lookups, but does not immediately erase earlier communications. Customers can request account/data deletion or make a privacy enquiry through the support information below. Do not include private street addresses or sensitive personal information in job descriptions. Website email-link sign-in requires a working verified redirect to the customer request page.

Providers and permissions

Private job photos stay within your business unless you choose to share them. “Share this photo” exports the selected image through your phone’s share menu. It does not include the job record, customer address or private notes. The exported image is re-encoded to remove original location metadata; check the image itself for identifying details. If you choose Facebook or another app, that service receives the image under its own terms and privacy policy. Obtain permission before sharing identifiable people or customer work.

Supabase supplies authentication, database and file storage. Expo supports native builds, distribution and opt-in push notifications. Push registration stores a device token bound to your signed-in session. Notification payloads contain an update type and record reference, not private message text or customer details. Postcodes.io processes postcode lookups. Companies House supplies public company records when configured. Apple and Google handle their sign-in and app stores. RevenueCat verifies app-store subscriptions using a TradeScot business identifier, product identifiers, store transaction and subscription status, and SDK diagnostics. Apple or Google handles subscription checkout; TradeScot does not receive your card number. Live subscription billing is not yet enabled. Electronic handover payment providers require separate activation before live use. Photos, camera, calendar and notifications are requested in context. You can enter a postcode without granting location permission. If you choose “Use my current location”, your phone requests foreground location access and uses its location and geocoding services to suggest a nearby postcode. You check that postcode and choose a working radius before saving. TradeScot sends the confirmed postcode to its postcode lookup service; it does not store the raw device GPS fix or continuously track your movements. Other businesses see your general area, not your full postcode. We do not upload address books or sell personal data.

Retention and rights

Private work remains available to read and export after a subscription expires. Account deletion removes personal account information and sole-owned business work, subject to shared ownership, open disputes and justified financial/legal retention. Supporting evidence is reviewed for deletion after the check is complete; unresolved cases are kept only while needed. The beta must not accept unnecessary identity documents while retention automation is awaiting operational review.

You may request access, correction, deletion, restriction or portability where applicable, object to processing based on legitimate interests, and withdraw optional consent. Contact support to exercise these rights or complain to the UK Information Commissioner. A business is responsible for its own lawful use of customer records. No marketing consent is bundled with account terms.

Website early access and customer requests

Who's responsible?

Skythorn Digital Ltd, a company registered in Scotland (SC898900), runs TradeScot and is responsible for the information collected on this website. Email: skythorndigital@gmail.com.

What we collect

When you register interest, we collect your name, email address, town or area and your business name and main trade. This form collects early-access registrations from trade businesses. We record whether you volunteered for iPhone or Android early testing (or both), asked us to contact you about a future directory listing, or opted in to optional marketing updates, and how you reached the site. We record the privacy-notice version and registration time, and ask you to confirm your Scottish location or service area. We also record whether a launch notification has been sent and whether you've asked to stop it.

What we use it for

When you join the launch list, we'll use your email to tell you once when TradeScot is live on iPhone and Android. This is the update you've asked us for by registering. We also use the information to handle testing requests, understand interest by area and trade, and prepare the directory. Occasional additional promotional emails are separate and are sent only if you opt in. An early-access request does not create a mobile app account. You can ask us to stop emailing you at any time by contacting us.

Customer job requests

We store your account email, name, job description, trade, general area, optional photos, preferred dates, rounded area coordinates, timing, budget choice and the businesses responding. Requests wait for moderation. Trade businesses see the approved job summary, not your email or name. You deliberately choose which responding businesses may receive your contact details, up to three per request. Closing a request removes further contact access through TradeScot. A business may already have retained information you previously shared.

Customer account and request data are used to provide the service you request and to prevent abuse. Authentication emails are transactional and separate from launch announcements and marketing. Signing in uses essential browser storage. Customer requests do not add you to the launch or marketing list. To request deletion or report abuse, contact skythorndigital@gmail.com. We review closed requests for removal when no longer needed, retaining only records needed for disputes or legal obligations.

Legal basis

We rely on your specific request to send the one-off app-launch email, and consent for optional marketing, tester contact and any eventual public directory listing. Our legitimate interests in operating and protecting the service support registration handling, security checks and fraud prevention. You can withdraw that consent or ask to be removed from the launch list at any time by emailing us.

Where information is stored

Registration details are stored in our existing TradeScot Supabase database, hosted in its London region (eu-west-2). Access to the registration list is restricted. The website retrieves only business profiles that have been individually approved and expressly cleared for publication. We do not publish your contact email or personal registration details. Asking about a directory listing does not itself publish your business. We obtain separate approval for the specific public profile and complete company or sole trader checks first. Test accounts never appear. A details check is not an endorsement or guarantee of work.

Service providers and security

ChatGPT Sites provides website hosting and Supabase processes registration information for us. Resend processes the email addresses and subscription preferences needed to deliver requested launch notices and any separately consented email news. We use delivery, bounce, complaint and unsubscribe information to manage delivery and respect your choices. We use encrypted HTTPS connections. The signup list is unavailable to public visitors; only the restricted registration service and authorised operators can write to it. Short-lived, signed form checks, a hidden spam field and rate limits help reduce automated submissions. We use a daily keyed hash of technical network information for rate limiting, rather than storing a raw IP address in the signup table. Security records expire within two days and are removed on the next registration request. Hosting providers may also keep their own security logs.

Providers may process information outside the UK. Where international transfers require safeguards, those are covered by the providers’ applicable data processing terms and transfer mechanisms. Contact us for details.

How long we keep it

We review launch registrations within three months after both apps launch and at least every 12 months while we prepare the launch. Details no longer needed for a requested listing, testing or separately consented marketing are deleted. We retain only the minimum suppression and consent records needed to respect opt-outs and demonstrate your choices. You can ask us to remove your details sooner.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or a copy of your personal information, or object to certain processing. Contact skythorndigital@gmail.com. You may also complain to the Information Commissioner's Office.

Analytics and cookies

This initial registration site does not set marketing or analytics cookies. We use session storage to remember that you dismissed the signup invitation during your current browser session. The font files are hosted with the website, so loading them does not contact a separate font provider. Basic hosting and security technologies may process technical request information needed to deliver and protect the site. This notice will be updated before adding any non-essential analytics or advertising cookies.

Email choices

Joining the list requests one email once both apps are publicly available. Ongoing marketing is optional and its box is not preselected. Volunteering for early testing allows us to use your name and email to contact you about testing and arrange invitations for the platforms you selected. Where needed to issue your invitation, your name and email may be shared with Apple TestFlight or Google Play testing. Testing is optional and separate from marketing. Private operational signup reports may include new registrants’ email address, trade/category and chosen testing platforms, alongside aggregate counts. They are sent only to Skythorn Digital’s authorised internal mailbox to manage registrations and invitations. They do not authorise promotional outreach. To stop the launch email, withdraw any optional consent, correct your information or request deletion, email skythorndigital@gmail.com. We act on these requests before sending. Registering again does not change an existing preference or reverse an opt-out.