YourTradeQuotes

Privacy Policy

How we collect, use and protect your personal data.

Last updated: 15 October 2026

1. Who We Are

YourTradeQuotes.com (“we”, “us”, “our”) is a quoting and job management platform built for UK tradespeople. YourTradeQuotes.com is a trading name of Cumulus Digital Ltd. We are the data controller responsible for your personal data.

Contact email: hello@yourtradequotes.com

2. What Data We Collect

We may collect and process the following personal data:

  • Identity & contact data – your name, email address, phone number and business name, provided when you register for an account or submit an enquiry form.
  • Account data – login credentials (email and encrypted password), subscription plan, and account preferences.
  • Business data – customer records, job details, quotes, invoices and payment information that you enter into the platform as part of using our service.
  • Financial data – payment card details processed securely via Stripe. We do not store full card numbers on our servers.
  • Technical data – IP address, browser type and version, operating system, time zone and pages visited, collected automatically when you use our platform or website.
  • Usage data – information about how you use our platform, including page views, feature usage and session duration.
  • Communication data – any information you include in messages sent to us via our forms, email or support channels.

3. How We Use Your Data

We use your personal data for the following purposes, each with a lawful basis under UK GDPR:

  • To provide our service (lawful basis: contract) – to create and manage your account, process quotes and jobs, send invoices and accept payments on your behalf.
  • To respond to your enquiries (lawful basis: legitimate interest) – when you submit a form or contact us, we use your details to get back to you.
  • To process payments (lawful basis: contract) – to collect subscription fees and facilitate payments via Stripe.
  • To improve our platform (lawful basis: legitimate interest) – we use anonymised analytics data to understand how users interact with our platform so we can make it better.
  • To send service communications (lawful basis: contract / legitimate interest) – account confirmations, billing notifications and important platform updates.
  • To comply with legal obligations (lawful basis: legal obligation) – for example, keeping financial records as required by law.
  • To support you and to operate and improve the platform (lawful basis: legitimate interest) – a small number of authorised staff at Cumulus Digital Ltd can open a business report for your account in our administration tools, to support you when you ask for help and to operate and improve the platform, including checking that figures are calculated correctly. The report shows monthly and yearly totals. It never includes your customers’ names, contact details, addresses, job descriptions or notes. Each time it is opened we keep a record of who opened it and when. Section 9 has the detail.

4. Cookies

Our website and platform use cookies and similar technologies to improve your experience and analyse usage. The cookies we use include:

  • Essential cookies – required for the platform to function correctly, including session management and authentication. These cannot be disabled.
  • Analytics cookies – set by Google Analytics to help us understand how visitors interact with our site. These collect anonymised data such as pages visited, session duration and referral source.
  • Heatmap and session replay cookies – set by TruConversion on our public marketing website only. These record how visitors move around our pages (mouse movement, scrolling and clicks) so we can improve the site. TruConversion is not used inside the YourTradeQuotes app, and no account or customer data is sent to it.
  • Support chat storage – the ElevenLabs chat on our marketing website keeps a few small preferences in your browser, such as the chat’s language and whether you have accepted its terms. It is not used for advertising.
  • Payment cookies – set by Stripe when processing payments to help detect fraud and ensure transaction security.

You can control and delete cookies through your browser settings. Disabling certain cookies may affect platform functionality. For full details, see our Cookie Policy.

5. Third-Party Services

We use a small number of trusted third-party services to operate our platform. These may process your data as described below:

  • Stripe – processes subscription payments and, optionally, customer payments made through the platform. Stripe Privacy Policy.
  • Google Analytics – collects anonymised usage data to help us understand website traffic and user behaviour. Google Privacy Policy.
  • TruConversion – provides heatmaps and session replays of visits to our public marketing website (never the app itself), so we can see how the site is used and improve it. TruConversion Privacy Policy.
  • ElevenLabs – runs our AI support assistant: the chat on this website and our support phone line (01932 507575). What you type or say to it is processed and stored by ElevenLabs so the assistant can answer, and a summary with any contact details you give is emailed to our support team so someone can follow up. Please do not share passwords or card details with it. ElevenLabs Privacy Policy.
  • Formspree – processes contact and enquiry form submissions on our behalf. Formspree Privacy Policy.
  • Google Firebase – Google Cloud’s Firebase services host the YourTradeQuotes app, store its data (including your account and business data) and handle sign-in (authentication). Firebase Privacy and Security.
  • QuickBooks / Xero (optional integrations) – if you connect your accounting software, invoice and payment data may be shared with these providers as directed by you.

We do not sell, rent or share your personal data with any other third parties for marketing purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Account data – retained for the duration of your subscription and for up to 6 years afterwards to comply with legal and accounting obligations.
  • Enquiry and contact form data – retained for up to 24 months from your last communication.
  • Financial records – retained for 6 years in accordance with HMRC requirements.
  • Analytics data – anonymised and retained in accordance with Google Analytics’ data retention settings.
  • Staff access records – the record we keep each time our staff open your business report (see section 9) is kept for 2 years and then deleted.

7. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights regarding your personal data:

  • Right of access – you can request a copy of the personal data we hold about you.
  • Right to rectification – you can ask us to correct any inaccurate or incomplete data.
  • Right to erasure – you can request that we delete your personal data, subject to any legal obligations we may have.
  • Right to restrict processing – you can ask us to limit how we use your data.
  • Right to data portability – you can request your data in a structured, commonly used, machine-readable format.
  • Right to object – you can object to processing based on legitimate interest.
  • Right to withdraw consent – where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at hello@yourtradequotes.com. We aim to respond to all requests within 30 days.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. Our platform uses SSL/TLS encryption to secure data transmitted between your browser and our servers. All passwords are stored in encrypted form and payment card data is handled exclusively by Stripe’s PCI-DSS compliant infrastructure.

9. Access to Your Account by Our Staff

A small number of authorised staff at Cumulus Digital Ltd can look at your account from our administration tools. This section explains what they can see, why, and how that access is controlled. Staff with this access are bound by a duty of confidentiality.

Account details. Staff can see the details you gave us when you registered, your subscription and your account settings, so that we can support you and operate the platform, including managing your subscription.

Business report. Staff can open a report of your account’s monthly and yearly totals: enquiries received, quotes sent and won, jobs booked and their value, the value invoiced, money received, and an estimate of profit worked out the same way as your own Reports page. The report is built from the amounts, dates and statuses on your enquiries, quotes, jobs, invoices and payments. It does not include your customers’ names, email addresses, phone numbers, addresses, job descriptions, internal notes, photographs, documents or signatures, and none of those are sent to the staff member’s screen when the report is opened. The report is shown on screen only: it cannot be downloaded or exported, and nothing from it is kept apart from the access record described below.

Why. We use the report for two purposes only: to support you when you ask for help, and to operate and improve the platform, including checking that figures are calculated correctly. We rely on our legitimate interest in running the platform well. We have weighed that against your interests: the report holds business totals rather than details about you or your customers, we only open it for one of those two purposes, and every opening is recorded. You can object to this (see section 7). If you do, we will stop opening your report unless we need it to resolve a problem you have raised with us, or to meet a legal obligation.

Record of access. Every time the business report is opened, we record which staff member opened it, which account it was for, when, and whether it loaded. If that record cannot be written, the report does not open. These records are kept for 2 years (see section 6). You can ask us whether your report has been opened and when, by emailing hello@yourtradequotes.com.

Your customers’ data. Where the information in your account is about your customers, you are the controller and we process it on your instructions under our Terms of Service (section 8, Your Data). The business report is one of those instructions, and it uses totals, amounts, dates and statuses only. We will not access individual customer records unless you ask us to, or the law requires it.

10. Children’s Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

12. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: hello@yourtradequotes.com