Privacy Policy
Last Updated: · Compliant with UK GDPR & DPA 2018
1. Who We Are and Core Principles
TradePact is operated by Curious House Design Limited (Company Registration No: 16600459), referred to as "we", "us", or "our" in this policy. Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), we act as the data controller for personal data collected through our services.
We are registered with the Information Commissioner's Office (ICO) under registration number pending.
2. Personal Data We Collect
We collect and process personal data in compliance with the UK GDPR. This includes:
- Identity Data: Name, trading name, and Company Registration Number (if applicable).
- Contact Data: UK billing address, email address, and phone numbers.
- Agreement Data: Client scopes, contract terms, signatures, and timestamps recorded via our online platform.
- Financial Data: Bank details, sort codes, and transaction histories processed through FCA-regulated payment gateways.
3. Lawful Basis for Processing
Under the UK GDPR, we rely on the following legal bases to process your personal data:
- Performance of a Contract: To supply quoting, scoping, and e-signing software services to you.
- Legitimate Interests: To run our business efficiently, secure our network, and improve our services.
- Legal Obligation: To maintain tax, corporate, and accounting records as mandated by HMRC and UK company laws.
4. Data Security and Hosting
Your data is securely hosted on servers located within the United Kingdom / EEA (utilising AWS London Region). We implement rigorous physical, technical, and administrative safeguards to prevent unauthorised access, loss, or alteration. Financial details are processed through secure APIs and are never stored on TradePact's own database servers.
5. Your UK Data Protection Rights
Under the DPA 2018 and UK GDPR, you have the right to request access to your personal data, request correction or erasure, restrict processing, object to processing, request data portability, and withdraw consent at any time.
If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.