Privacy Policy

Trade Data Systems (TDS) is operated by Sherburn DIY Ltd, a company registered in the United Kingdom.

Our address is:

Depending on how you use TDS, the information we may collect or process includes:

• name
• business or company name
• postal or business address
• telephone number
• email address
• account and login information
• information about authorised users on your account
• subscription and plan information
• customer records you enter into TDS
• quote information
• invoice information
• job or work information
• expense information
• other business information entered by you or your users
• technical information such as browser and device information, IP address, security logs and usage information where applicable
• communications you have with us

You are responsible for ensuring you have a lawful basis for entering personal information about your own customers, employees, contractors or other individuals into TDS.

We may process information to:

• create and administer TDS accounts
• provide the TDS service
• provide features requested by customers
• manage subscriptions
• authenticate users
• maintain security
• prevent fraud and abuse
• provide support
• improve TDS
• comply with legal obligations
• maintain business and financial records

TDS subscriptions are processed using Stripe, our payment provider. Stripe handles your payment card information directly — TDS does not store your full payment card details. Stripe processes payment information in accordance with its own privacy terms, which are available on Stripe's website.

Where the UK GDPR applies, we rely on the following legal bases to process personal information:

Performance of a contract

Processing that is necessary to provide the TDS service you have requested, such as creating your account and managing your subscription.

Legitimate interests

Processing that is in our legitimate interests, such as maintaining security, preventing fraud, and improving TDS — provided these interests are not overridden by your rights and interests.

Compliance with legal obligations

Processing that is necessary to comply with legal obligations, such as maintaining business and financial records.

Consent

Where consent is required, we will ask for your consent before processing your information. You can withdraw consent at any time, though this will not affect processing that has already taken place.

It is important to distinguish between two types of information:

A. Information we use to operate your TDS account

This includes information such as your name, email address, business details and subscription information, which Sherburn DIY Ltd uses to provide and administer the TDS service to you.

B. Information you enter into TDS about others

This includes personal or business information that you or your users enter into TDS about your own customers, employees, contractors or other people — for example, customer contact details, quote and invoice information, and job records.

You remain responsible for the information you choose to enter into TDS and for ensuring your use of that information complies with applicable data protection law. Sherburn DIY Ltd processes this information on your behalf as part of providing the TDS service, but the responsibility for ensuring a lawful basis and compliance with data protection obligations for that information rests with you.

We use trusted service providers to help operate TDS, which may include:

• website and application hosting and infrastructure providers
• payment processors such as Stripe
• authentication and security providers
• communications providers where applicable
• analytics or technical service providers where applicable

These providers process information on our behalf in accordance with appropriate agreements and only for the purposes of providing their services to us.

Some of our service providers may process information outside the United Kingdom. Where this occurs, we will use appropriate safeguards as required by applicable data protection law, such as standard contractual clauses or other recognised transfer mechanisms.

We retain information only for as long as reasonably necessary for the purposes for which it was collected, including providing the service, maintaining required business records, resolving disputes, maintaining security, preventing fraud, and complying with legal obligations. When information is no longer needed, we will take reasonable steps to delete or anonymise it.

We use reasonable technical and organisational safeguards to protect the information we hold. However, no system can be guaranteed to be completely secure, and we cannot guarantee the absolute security of your information.

Depending on the circumstances, you may have the following rights under UK data protection law:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — ask us to delete your personal information in certain circumstances
• Restriction — ask us to restrict processing of your information in certain circumstances
• Objection — object to processing based on legitimate interests or for direct marketing
• Data portability — receive certain information in a structured, machine-readable format
• Withdrawal of consent — withdraw consent at any time where processing relies on consent

Some of these rights are subject to legal exceptions. To exercise any of these rights, please contact us using the details in section 14 below.

If you have a concern about how we handle your personal information, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

The TDS website may use cookies or similar technologies that are required for the website to function, for authentication, security, and to remember your preferences. Where analytics are used, this will be done with appropriate consent where required.

You can control cookies through your browser settings. Disabling cookies that are required for the website to function may affect your ability to use TDS.

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. We encourage you to review this page periodically.

For privacy enquiries, please contact: