Draft. This page is a starting point, not a final legal document — have a solicitor review it before relying on it in production, particularly the data processor relationship and retention commitments described below.

Privacy Policy

Last updated: 30 July 2026

Data processor relationship

When a tradesperson uses TradeTestimonials to request a testimonial, the tradesperson is the data controller for their customer's information and TradeTestimonials acts as their data processor — we process that information on the tradesperson's instructions, for the purpose they submitted it: sending a testimonial request and publishing the resulting testimonial if approved.

What we collect

Customer name, and a phone number and/or email address, submitted by the tradesperson when creating a testimonial request
A short job description submitted by the tradesperson
The customer's ratings, comments, and before/after photos submitted through the feedback form
The tradesperson's own account details (business name, email, profile information)

Why we collect it

Solely to operate the testimonial request and publishing flow: sending the feedback request, presenting it for the customer to complete, and — once the tradesperson approves it — publishing the resulting testimonial on their public page.

Retention

A customer's phone number and email address are automatically deleted from our systems 14 days after their testimonial request is closed (published or declined). Requests that are never responded to are not currently covered by an automatic deletion schedule. Published testimonials themselves don't include a customer's phone number or email address — only their first name, optional location, and their testimonial text and photos.

Separately, when a customer approves a testimonial we keep a permanent record of exactly what they approved — their name, the job description, the approved wording, and the approval date — as evidence that the testimonial is genuine and was published with their permission (required under UK advertising standards for testimonials). This record never includes a phone number or email address and is not used to contact the customer; it exists solely to demonstrate, if ever asked, that a real customer approved the wording shown. It's deleted if the tradesperson deletes the underlying request or their account.

Third parties we use

Twilio — sends testimonial-request SMS messages
SendGrid — sends testimonial-request emails
Stripe — processes tradesperson subscription payments
Anthropic — drafts testimonial text from a customer's ratings and comments. Anthropic never receives the customer's name, phone number, or email address — only the job description, ratings, and free-text comments.
Google Ads — measures visits and conversions on our public pages using cookies, so we can tell how visitors found us and improve our advertising.

These providers only receive the information needed to perform their specific function (e.g. Twilio receives a phone number and message text to send an SMS).

Account deletion

A tradesperson can permanently delete their account at any time from their dashboard's "Danger zone" section. This immediately deletes their account, every testimonial request and testimonial (published or not), and every uploaded photo — it is not the same as simply cancelling a subscription, which only locks dashboard access and leaves published testimonials live. This is available regardless of subscription status; you do not need an active subscription to delete your account.

Your rights

If you're a customer who received a testimonial request and want your information deleted sooner than the automatic schedule above, or a tradesperson with questions about your account data, email support@tradetestimonials.com.