Privacy Policy

1. Who We Are

TradeFix is an online marketplace connecting homeowners with tradespeople in Ireland. TradeFix is the data controller responsible for your personal data under the GDPR. To contact us about your data, use the in-app support channel or our support page. For data protection complaints, you can also contact the Data Protection Commission at dataprotection.ie.

2. Data We Collect, Why, and Legal Basis

• Account data

  Name, email address, hashed password, role and profile picture. Why: to create and manage your account. Basis: contract (to provide the service) and legitimate interests (account security).

• Profile data

  Business name, location, phone, bio, categories, qualifications, insurance documents and registration numbers (tradespeople). Why: to display profiles and verify tradespeople. Basis: contract and legitimate interests (trust and safety on the marketplace).

• Job data

  Job title, description, photos, location and budget (homeowners). Why: to show jobs to tradespeople and enable quotes. Basis: contract.

• Messages

  Content of in-app messages between users. Why: to enable communication and to investigate reports. Basis: contract and legitimate interests (safety, fraud prevention, dispute resolution).

• Reviews

  Ratings and review text. Why: to build trust on the marketplace. Basis: legitimate interests. Reviews may be public; anonymous posting is available.

• Payment data

  Subscription payments are processed by Stripe. We do not store full card numbers. We store your Stripe customer/subscription ID and subscription status. Why: to manage tradesperson subscriptions. Basis: contract.

• Usage and device data

  Device type, interaction data and logs. Why: to operate, secure and improve the platform. Basis: legitimate interests.

• Reports and moderation data

  Report reasons, details and outcomes. Why: to handle reports and enforce our Terms. Basis: legitimate interests and legal obligation.

3. Who Receives Your Data

We do not sell your personal data. We share it with the following categories of recipient:

• Base44

  Our backend-as-a-service provider. Base44 stores app data, including your personal data, on our behalf as a processor. Data is stored in the United States by default. This involves a transfer of personal data outside the European Economic Area. Base44 relies on Standard Contractual Clauses and its GDPR Data Processing Addendum for such transfers. EU/UK data residency is available on certain Base44 plans; where we have enabled it, your data is stored within the EU/UK.

• Stripe

  Our payment processor for tradesperson subscriptions. Stripe processes card data under its own PCI-DSS compliance. We receive your Stripe customer ID and subscription status, not your card details.

• Email provider

  Used to send transactional emails (verification codes, job alerts, notifications).

• Apple / Google

  If you sign in with Apple or Google, those providers share your name and email with us for account creation.

• Authorities

  Where required by law (e.g. An Garda Síochána, the CCPC, the DPC), we may disclose data.

• Other users

  Profile information, reviews and messages are visible to the other party in a conversation or job, as part of the service.

4. International Transfers

Because Base44 stores app data in the United States by default, your personal data is transferred outside the EEA. We rely on Standard Contractual Clauses approved by the European Commission to ensure appropriate safeguards for these transfers. Where EU/UK data residency is enabled, data is stored within the EU/UK and no such transfer occurs. Stripe and Apple/Google may also transfer data internationally under their own safeguards.

5. Data Retention

• Active accounts

  We keep your data for as long as your account is active.

• Deleted accounts

  When you delete your account, we remove or anonymise your personal data within 30 days, except where we are required to retain it for legal, accounting or fraud-prevention purposes (e.g. records of payments, reports of serious abuse).

• Messages

  Retained for the life of the account and for a reasonable period after deletion to handle disputes and reports.

• Payment records

  Retained for 6 years as required by Irish tax and accounting law.

6. Your Rights Under the GDPR

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (the "right to be forgotten"), subject to legal exceptions.
• Restrict or object to processing based on legitimate interests.
• Receive your data in a portable format.
• Withdraw consent for processing that relies on it (e.g. analytics).
• Lodge a complaint with the Data Protection Commission (Ireland).

To exercise any of these rights, contact us through the in-app support channel. We will respond within one month.

7. Children's Data

TradeFix is not directed at anyone under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

8. Security

We use reasonable technical and organisational measures to protect your data, including encrypted password hashing and access controls. No method of transmission or storage is completely secure, but we work with providers (Base44, Stripe) that maintain industry-standard security certifications.

9. Cookies

TradeFix uses essential cookies to keep you logged in and the app working. We do not use third-party advertising cookies. Analytics, where used, is anonymised and does not track you across other services.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be highlighted within the app or on this page. The "Last updated" date above reflects the most recent revision.

11. Contact

For privacy questions or to exercise your rights, contact TradeFix through the in-app support channel or our support page. You can also complain to the Data Protection Commission at dataprotection.ie. This policy is governed by the laws of Ireland.