Privacy notice

Your details stay purposeful.

Last updated: 1 September 2026

This notice explains how EasyTrades handles personal information when you visit the website, submit or manage a job, create a homeowner or trade account, publish a trade profile, purchase a lead, confirm job completion, leave a review, use EasyTrades through an approved AI assistant or MCP client, or contact us.

1. Who is responsible for your information?

Yellow Mango Consultancy Services LTD, trading as Easy Trades, is the controller of the personal information described in this notice. We are registered in England and Wales under company number 09014055.

Registered office: Swift Accountants, 3 Chowley Court, Chowley Oak Business Park, Bolesworth Estates, United Kingdom, CH3 9GA.

Email: hello@easytrades.co.uk.

2. Information we collect

Homeowners and job contacts

We collect your name, email address, phone number, postcode, approximate area, job description, property type, urgency, preferred timing, answers given during qualification, whether you can make decisions about the work, job status and communications about completion. If you choose to add job photos, we collect those images and basic file information. We resize photos and remove embedded JPEG metadata, including location metadata, before storage. If you review a trade, we collect the rating, selected review tags and any written comments.

Tradespeople and trade businesses

We collect account and business-contact information including business and contact names, email, phone number, postcode, trade, service radius, profile description, website, logo, qualifications, insurance details, listing preference and email-verification status. We also hold lead views and purchases, completion requests, payment references, account status and profile updates.

Payments

Stripe processes card and payment information. EasyTrades receives transaction details such as the Checkout session, payment reference, amount, status and refund information, but does not receive or store your full card number or security code.

Technical and usage information

When you use the service, we and our infrastructure providers may receive IP address, device and browser information, requested pages, timestamps, diagnostic logs, approximate location derived from network or postcode data, cookie choices, security events and session identifiers. If you accept analytics, Google Analytics also collects usage and device information as described below.

Information from other people

A business representative may provide details about colleagues, and a homeowner or trade may provide information about another person involved in a job. If you give us another person’s information, you must have a lawful reason to do so and should tell them about this notice where appropriate. We may also receive payment status from Stripe and publicly available business information where needed to verify or administer a listing.

3. Please avoid sensitive information

Job descriptions and photos should not include payment-card details, passwords, identity documents, medical information or other special-category or highly sensitive information. Avoid including faces, children, vehicle number plates, documents or anything that reveals your full address unless genuinely necessary for the job. If safety or accessibility information is needed, provide only what is necessary. We may remove or restrict information that is not needed to operate the service.

4. How and why we use information

We use personal information to:

• receive, qualify, categorise and publish job opportunities;
• match jobs with relevant trades based on trade, location, distance, availability and other job details;
• create and secure passwordless homeowner and trade accounts;
• share a homeowner’s contact details with eligible trades that purchase that specific lead;
• operate free public trade listings where a trade has chosen to publish one;
• process lead payments, fulfil purchases, issue applicable refunds and maintain transaction records;
• send requested sign-in links, job updates, completion requests and essential service messages;
• enable job management, completion confirmation and genuine reviews;
• prevent fraud, spam, duplicate accounts, misuse and security incidents;
• support users, investigate complaints, resolve disputes and enforce our Terms and conditions;
• measure and improve performance, usability and marketplace quality; and
• meet accounting, tax, regulatory and legal obligations and establish or defend legal claims.

5. Our lawful bases

UK data-protection law requires a lawful basis for each use:

• Contract: to provide the service you request, administer accounts, deliver purchased leads and manage payments.
• Legitimate interests: to operate and improve a safe, useful marketplace; route suitable work; communicate essential updates; protect accounts; prevent misuse; maintain records; support users; and manage legal claims. We consider the impact on individuals before relying on this basis.
• Consent: for optional Google Analytics cookies and for optional public trade-profile choices where consent is the appropriate basis. You may withdraw consent at any time without affecting earlier lawful processing.
• Legal obligation: where records or disclosures are required by tax, accounting, consumer, fraud-prevention, court or regulatory rules.

You are not legally required to give us information, but we cannot submit a usable job, create an account, provide a listing or complete a lead purchase without the fields marked as required.

6. Automated classification and matching

EasyTrades uses rules and, where enabled, Cloudflare-hosted artificial intelligence to interpret job descriptions, suggest a trade category, ask relevant qualification questions and estimate lead characteristics such as likely value or price. Matching may also use postcode, trade and service radius.

These tools organise marketplace information; they do not diagnose a fault or decide your legal rights. We do not use them to make solely automated decisions that have legal or similarly significant effects on individuals. You may contact us if you believe a job or profile has been classified incorrectly or want a human review.

7. Who receives information?

We share only what is reasonably needed with:

• Relevant tradespeople: public job cards show limited job and area information. Optional job photos are available only to authenticated tradespeople matched to that job and trades that have purchased it; they are not placed in a public bucket. Full homeowner contact details and the full postcode are released only to a limited number of eligible trades who purchase that lead. Those trades become independently responsible for how they use the details.
• Homeowners: homeowners can see businesses that unlocked their job and information made available through trade profiles and completion or review flows.
• Cloudflare: for website delivery, security, Worker execution, database hosting, transactional email and optional AI processing.
• Stripe: for Checkout, payment processing, fraud prevention, refunds and payment records.
• Google Analytics: only after you accept analytics cookies, to measure site usage.
• hCaptcha: to distinguish genuine users from automated abuse when jobs, sign-in requests or registrations are submitted. hCaptcha may process IP address, device, browser, interaction and challenge information for this security purpose.
• AI assistants and approved MCP clients: when you intentionally connect to or invoke EasyTrades through an AI product, that provider may receive your instructions, the tool request and the response returned by EasyTrades. The provider processes that information under its own terms and privacy notice.
• Technical service providers: such as postcode or geocoding services, used to calculate approximate areas and distances without intentionally sending names or contact details.
• Professional advisers and authorities: including accountants, insurers, legal advisers, courts, regulators, law enforcement or tax authorities where reasonably necessary or legally required.
• A buyer or successor: if the business or service is reorganised, sold or transferred, subject to appropriate confidentiality and data-protection safeguards.

We do not sell homeowner contact lists or share your details for unrelated third-party advertising.

8. OpenAI app, MCP and API access

EasyTrades offers an API and Model Context Protocol (MCP) service that approved clients, including compatible OpenAI products, can use to perform defined marketplace actions. Public tools are limited to information that is already suitable for public display, such as public trade listings, general supplier coverage and jobs with private homeowner details removed.

Public job and search responses are designed not to disclose a homeowner’s name, email, phone number, full postcode or exact address, private job photos, authentication secrets or internal diagnostic data. Authenticated clients may carry out additional actions only within their granted permissions, such as importing a sourced public business listing, updating an authorised supplier record or queueing permitted outreach.

When an API or MCP tool is used, we may process the authenticated client identity, IP address, user agent, request time, tool or endpoint, request identifier, supplied marketplace fields and the outcome or error. We use this information to provide the requested action, enforce permissions and rate limits, prevent abuse, troubleshoot problems and maintain an audit trail. EasyTrades normally receives the structured tool request rather than the entire conversation you have with the AI provider.

Do not put passwords, sign-in links, payment-card details, private homeowner information or other unnecessary sensitive information into an AI instruction or MCP tool input. You can disconnect the integration through the relevant client and contact support about an EasyTrades record or privacy request.

9. Public information

If a trade enables a public listing, its business name, trade, general service area, service radius, description, logo, website, phone number and supplied qualification or insurance statements may be visible publicly and indexed by search engines. Do not publish private residential information in a business profile. A trade may turn off its public listing or ask us to remove it, although cached search results may take time to disappear.

Reviews may be associated with the reviewed business. We do not intend to publish a homeowner’s phone number, email address or full postcode as part of a review.

10. Cookies and analytics

Essential cookies support passwordless sessions, account security and storage of your cookie preference. Supplier and homeowner session cookies are HTTP-only and are used to keep you signed in. The cookie-choice cookie lasts for up to 12 months; account sessions currently expire after up to 90 days unless you sign out earlier.

Google Analytics is loaded only if you select “Accept analytics”. It helps us understand page usage and service performance, and EasyTrades requests IP anonymisation. Google may still process device, browser, interaction and approximate-location information under its own terms. Select “Cookies” in the footer at any time to reject or accept analytics. Rejecting analytics does not prevent you using EasyTrades.

hCaptcha is used as an essential security measure on selected forms to prevent bots, spam and automated account abuse. It runs when a protected action is submitted and is not controlled by the optional analytics-cookie setting. See the hCaptcha Privacy Policy for more information.

11. International transfers

Some providers operate internationally, so information may be processed outside the United Kingdom. Where UK personal information is transferred to a country without UK adequacy regulations, we require an appropriate safeguard such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism, together with supplementary protections where appropriate. Contact us if you would like more information about the safeguards relevant to your data.

12. How long we keep information

We keep information only for as long as reasonably needed for the purpose collected, including to provide the marketplace, maintain security and audit trails, meet tax and accounting duties, handle disputes and establish or defend legal claims. In general:

• active account, profile, job and purchase records are kept while the relationship or job remains active;
• job photos are normally retained with the associated job and removed when the job record is deleted, unless a shorter period is appropriate; incomplete upload drafts expire after 30 minutes and are removed automatically;
• core account, contractual, lead and transaction records may then be kept for up to six years to deal with complaints, tax, accounting and legal claims;
• passwordless links expire after 30 minutes and completion links after 30 days; session tokens expire after up to 90 days, although hashed security and audit records may be retained for longer where necessary to prevent misuse;
• public listings are removed from EasyTrades when disabled or the relevant account is closed, subject to backup, legal and dispute-retention needs;
• analytics information is retained according to our Google Analytics configuration and is deleted or aggregated when no longer needed; and
• backups and security logs are retained on limited operational cycles and then overwritten or deleted unless needed to investigate an incident.

We may retain anonymised statistics that no longer identify anyone.

13. Security

We use proportionate technical and organisational measures, including encrypted HTTPS connections, restricted database access, private object storage, server-side image verification and metadata removal, hashed one-time sign-in and session tokens, limited contact-detail disclosure, signed Stripe webhooks, access controls and service monitoring. No online service can promise absolute security. You should protect sign-in links and tell us promptly if you suspect unauthorised access.

14. Your rights

Depending on the circumstances, you may have the right to:

• ask for a copy of your personal information;
• correct inaccurate or incomplete information;
• ask us to delete information;
• restrict how we use information;
• object to processing based on legitimate interests;
• receive certain information in a portable format;
• withdraw consent at any time; and
• raise concerns about automated processing and request human review.

You have the right to object at any time to processing based on our legitimate interests and to any use of your information for direct marketing. EasyTrades does not currently send unrelated promotional marketing, but we will honour this right if that changes.

To exercise a right, email hello@easytrades.co.uk. We may need to verify your identity. Rights are not absolute, and we may retain information where the law permits or requires it; if so, we will explain why.

15. Complaints

Please contact us first so we can investigate. You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
ico.org.uk/make-a-complaint

16. Children

EasyTrades is intended for people aged 18 or over. We do not knowingly provide accounts or lead-purchase services to children. Contact us if you believe a child has supplied personal information.

17. Changes to this notice

We may update this notice when the service, providers or law changes. The latest version will appear here with its updated date. We will provide an additional notice where a change materially affects how we use personal information.