Privacy Policy

TradeMargin — Last updated: 30 July 2026

Who we are

TradeMargin is a job costing and margin visibility tool for trade contractors, operated by Riley Smith, trading as TradeMargin, based in the United Kingdom. For your account data, we are the data controller.

Questions or requests: hello@trademargin.app

What we collect, why, and our lawful basis

Account data — email address and business name. Collected at signup to create and operate your account and send essential service emails (email confirmation, password reset). Lawful basis: performance of a contract — we cannot provide the service without it.

Job data — jobs, trades, budgets, cost entries, and any customer names or details you enter. Stored so the service can do what you signed up for. Lawful basis: performance of a contract.

A note on your customers’ details. Names you enter against jobs are your clients’ personal data. For that data, you are the data controller and TradeMargin is your data processor — we store and display it on your instructions and use it for nothing else. You are responsible for having a lawful basis to record it.

Service logs. Our hosting providers keep short-lived technical logs (such as IP addresses in server logs) for security and to keep the service running. Lawful basis: legitimate interests in securing and operating the service. We do not use these to profile you.

We do not use analytics scripts, advertising pixels, or tracking cookies. We do not sell your data or share it with anyone for marketing. We do not send marketing emails.

Where your data lives

  • Supabase (database, authentication) — hosted on Amazon Web Services in London, UK (eu-west-2). AWS acts as Supabase’s infrastructure provider.
  • Resend (transactional email) — email is sent from infrastructure in the EU (Ireland). Resend, Inc. is a US company; where any data is transferred outside the UK, it is protected by safeguards recognised under UK GDPR (such as Standard Contractual Clauses / the UK Addendum).
  • Vercel (application hosting) — serves the app and holds no database of your content.

These are our only processors. Nobody else has access to your data.

How long we keep it

For as long as your account exists. Delete your account (Settings → Delete account) and everything — profile, jobs, trade budgets, cost entries — is permanently deleted from the database immediately. There is no recovery. Residual copies in our providers’ short-term backups expire on their standard cycles.

Your rights under UK GDPR

You have the right to: access your data; correct it; delete it (self-serve in Settings, or by email); restrict or object to processing; data portability (a copy of data you provided, in a machine-readable format — the app has no export button yet, so email us and we will provide it); and to complain to the ICO at ico.org.uk.

Email hello@trademargin.app and we will respond within one month, as UK GDPR requires.

Automated decision-making

None. The green/amber/red margin status is simple arithmetic on figures you enter. No profiling, no automated decisions with legal or significant effects.

Cookies

Only strictly necessary session cookies that keep you signed in. No tracking or advertising cookies, so no consent banner is required.

Children

TradeMargin is a business tool and not intended for anyone under 18.

Changes

Material changes will be reflected in the date above. We will not retroactively weaken your rights without telling you.

Contact