Privacy Policy

Last updated: 9 June 2026

This Privacy Policy explains how Ridiculous Corporation Limited ("Tradeline", "we", "us") collects and uses personal data when you visit tradeline.me or use the Tradeline service. We are the data controller for that data. We are registered in England & Wales under company number 16493949, with our registered address at 1 Bentham House, Renfields, Haywards Heath, West Sussex, RH16 4WG. You can contact us at privacy@tradeline.me, or by post at the address above. We are registered with the UK Information Commissioner's Office under registration number ZC170744.

1. Who this policy covers

This policy applies to:

• Visitors to our website;
• Account holders — the builders and tradespeople who sign up to use Tradeline.

It also explains our role in handling data about your clients. When you, as an account holder, enter information about your own clients into Tradeline, you are the data controller for that information and we act as your data processor — we only process it on your instructions to provide the Service. Our handling of that data is governed by our Terms of Service and, where required, a data processing agreement. If you are a client of a Tradeline customer and have a question about your data, please contact that builder directly, as they decide how your data is used.

2. What personal data we collect

Account and contact data you give us: your name, business name, email address, trade type, and similar details you enter in onboarding and settings.

Authentication data: we use email "magic-link" sign-in, so we process your email address to send and verify sign-in links.

Usage and technical data: information about how you use the Service and basic technical data such as IP address, device, and browser type, used to operate, secure, and improve the Service.

Payment data: when you subscribe, payment is handled by our payment provider, Stripe. We receive limited information such as your subscription and payment status; we do not receive or store your full card details — those are handled by Stripe.

Client data you enter: information you choose to record about your projects and clients (see clause 1 on roles).

3. Why we use your data, and our lawful bases

Where we rely on legitimate interests, we have considered that this is not overridden by your rights. You can object to processing based on legitimate interests (see clause 8).

4. Who we share data with (sub-processors)

We use a small number of trusted providers to run the Service. They process data on our behalf under contract.

• Supabase — database hosting and authentication.
• Vercel — application and website hosting.
• Resend — sending transactional emails (e.g. sign-in links, notifications).
• Stripe — payment processing.

We do not sell personal data. We may disclose data where required by law, or to protect our rights, users, or the Service.

5. International transfers

Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards recognised under UK data protection law (such as UK adequacy/"data bridge" arrangements or the International Data Transfer Agreement / Addendum) to ensure your data remains protected.

6. Cookies and similar technologies

We use cookies and similar technologies that are strictly necessary to run the Service — for example to keep you signed in and to keep the Service secure. These do not require consent.

We also use Vercel Web Analytics to understand how the Service is used and to improve it. It does not use cookies: visitors are measured using aggregated data derived from a hashed version of the incoming request, it does not identify you individually, and it does not track you across other websites.

If we use any other non-essential cookies, we will ask for your consent first and you can change your choice at any time.

7. How long we keep data

We keep account and client data for as long as your account is active. After your account closes, we keep data only as long as needed to provide any wind-down (such as a data export), to comply with legal and tax obligations, and to resolve disputes — after which it is deleted in the ordinary course. Some records, such as our immutable sign-off ledger, are designed to be append-only; we will explain on request how this interacts with deletion requests.

8. Your rights

Under UK data protection law you have the right to: access your data; have inaccurate data corrected; have data erased; restrict or object to processing; data portability; and to withdraw consent where we rely on it. To exercise any of these, contact us at privacy@tradeline.me. We will respond within the time required by law (generally one month).

9. Complaints

If you are unhappy with how we have handled your personal data, you can complain to us at privacy@tradeline.me. We will acknowledge your complaint within 30 days and respond as soon as we can. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, by phone on 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would, however, appreciate the chance to address your concerns first.

10. Children

The Service is intended for use by businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "last updated" date, and tell you about material changes by email or in-app where appropriate.

12. Contact

Ridiculous Corporation Limited 1 Bentham House, Renfields, Haywards Heath, West Sussex, RH16 4WG Company number: 16493949 · VAT: GB 505185017 privacy@tradeline.me ICO registration number: ZC170744