Privacy Policy
Last updated: 6 July 2026
1. Introduction
TradesBook ("we", "us", "our") is operated by Axis Automations. This Privacy Policy explains how we collect, use, and protect your personal data when you use our Service. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data We Collect
Account Data: Your name, email address, and password (encrypted) when you register.
Business Data: Business name, trade type, contact details, and service information you provide during onboarding.
Customer Data: Lead and booking information (customer names, phone numbers, email addresses, job addresses) that you enter into the system on behalf of your customers.
Usage Data: Information about how you interact with the Service, including device type, browser, and activity logs.
Payment Data: Processed securely by Stripe; we do not store full card details.
3. How We Use Your Data
We process your data to: (a) provide and maintain the Service; (b) send SMS and email notifications on your behalf; (c) process subscription payments; (d) provide customer support; (e) send service updates and announcements; and (f) comply with legal obligations.
4. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases: (a) Contract — to deliver the Service you signed up for; (b) Consent — for marketing communications; (c) Legal Obligation — to comply with applicable laws; and (d) Legitimate Interests — for service improvement and security.
5. Data Sharing
We do not sell your data. We share data only with trusted third-party processors who help us operate the Service:
- Stripe — payment processing
- Twilio — SMS message delivery
- Resend — transactional email delivery
- Google — authentication and AI services
All processors are bound by data processing agreements and UK GDPR compliance.
6. Data Retention
We retain your account data for as long as your account is active. Customer data is retained until you delete it or close your account. After account closure, we retain data for up to 30 days for backup recovery, then permanently delete it.
7. Your Rights
Under UK GDPR, you have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your data; (d) restrict or object to processing; (e) data portability; and (f) withdraw consent at any time. To exercise these rights, contact us via our Support page.
8. Data Security
We use industry-standard security measures including encryption in transit (TLS) and at rest, secure password hashing, and role-based access controls. Despite these measures, no system is 100% secure, and we cannot guarantee absolute security.
9. International Transfers
Some of our processors operate outside the UK. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place for international data transfers.
10. Cookies
We use essential cookies to maintain your session and authentication. We do not use third-party advertising cookies. You can disable non-essential cookies in your browser settings.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.
12. Contact
If you have questions about your data or this policy, please visit our Support page or contact our Data Protection Officer.