Privacy notice
Template: Ben to review. This is a starting template, not legal advice.
Last updated: 1 November 2026
Who we are
The data controller is Ben Borseth trading as Trade Fit Out Direct, Forres, Moray, Scotland. Information Commissioner's Office (ICO): Registration applied for and data protection fee paid (application reference C2074745). Registration number to follow. Contact: hello@tradefitoutdirect.co.uk.
What we collect
- Quote requests: company name, contact name, work email and phone, site postcode, premises and job details, budget band, and your consent choices.
- Contractor registrations: business and contact details, services, coverage areas, accreditations and, optionally, a Companies House number.
- Contractor outreach: business contact details that contractors publish themselves (for example on their website, business listings or Companies House), used to invite them to join.
- Technical data: the IP address and browser details sent with a form. We store these with the submission as a record of consent and to prevent fraud and spam.
Please don't include sensitive personal information (such as health information) in the free-text box.
How we use it and our lawful basis
- Sharing your quote request with up to three suitable contractors: consent, which you give when you submit the form.
- Checking requests, preventing spam and fraud, running and improving the service, and contacting contractors about joining: legitimate interests, namely running a business-to-business introduction service. You can object at any time.
- Managing contractor accounts, sending leads and billing: contract.
- Optional marketing emails: consent, given only by ticking the box. You can unsubscribe at any time.
- Keeping accounting and tax records: legal obligation.
We don't make decisions about you based solely on automated processing.
Who we share it with
- Contractors: up to three contractors matched to your request, and only after we've checked it. Each contractor becomes a separate (independent) controller of your data, responsible for how they use it under their own privacy notice.
- Service providers acting for us: Cloudflare (website hosting, database, email routing) and Google (email).
- Others, only where required: professional advisers, or authorities where the law requires it.
We don't sell your data or share it with anyone else for their marketing.
International transfers
Our service providers may process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK-US data bridge where the provider is certified) or on the UK International Data Transfer Addendum.
How long we keep it
- Quote requests: 24 months after submission, then deleted or anonymised.
- Contractor records: while the account is active, then 6 years for accounting records.
- Marketing preferences: until you unsubscribe. We keep a suppression record so that we don't email you again.
Security
Data is sent over HTTPS and stored with access limited to the site operator.
Your rights
You have the right to access your data, correct it, have it erased, restrict its processing, object to processing based on legitimate interests or used for direct marketing, and have it transferred to you or another organisation (data portability). Where we rely on consent, you can withdraw it at any time. Withdrawing doesn't affect what we did before, and contractors who already received your request hold their own copy, so contact them as well. Email hello@tradefitoutdirect.co.uk to use any of these rights. We'll reply within one month.
Complaints
Please contact us first. You have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.
Changes
We'll update this notice when our practices change and show the date at the top.