Privacy Policy

Last updated: March 1, 2026

1. Introduction

Welcome to Service Trade. We are committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, process, and disclose your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal data is Service Trade. You can contact our Data Protection Officer at [email protected].

3. Information We Collect

We collect the following types of personal data:

3.1 Account Information

  • Email address - for account creation and communication
  • Phone number - for verification and two-factor authentication
  • Password - for authentication (stored securely hashed)

3.2 Profile Information (Optional)

  • Name (first name, middle name, last name)
  • Photo/avatar
  • Date of birth
  • Nationality/Cultural background (with explicit consent)
  • Location (country, city, region, postal code)
  • Social media links (Telegram, WhatsApp, LinkedIn, Facebook, Instagram)

3.3 Verification Documents (for verified accounts)

  • Photo ID (passport, driving licence)
  • Selfie holding ID (for identity verification)
  • DBS check documents (for safeguarding)
  • Visa or work permit
  • Utility bills or bank statements (for address verification)
  • Business documents (company registration, tax returns)

3.4 Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Usage data (pages visited, actions taken)

4. How We Use Your Data

We process your personal data for the following purposes:

  • To create and manage your account
  • To verify your identity (where required for certain services)
  • To facilitate communication between users
  • To provide customer support
  • To send service-related notifications (email, SMS)
  • To detect and prevent fraud
  • To comply with legal obligations
  • To send marketing communications (only with your explicit consent)

5. Lawful Basis for Processing

Under UK GDPR, we process your data based on the following lawful bases:

Data Type Purpose Lawful Basis
Email, Phone Account creation, communication Contract (Art. 6(1)(b))
Password Authentication Contract (Art. 6(1)(b))
Photo, ID documents Identity verification Legal obligation (Art. 6(1)(c)) / Consent (Art. 6(1)(a))
Name, Location Profile, verification Contract (Art. 6(1)(b))
Cultural background Personalization Explicit Consent (Art. 6(1)(a) + Art. 9(2)(a))
Social media links Profile (optional) Consent (Art. 6(1)(a))
Marketing preferences Communications Consent (Art. 6(1)(a))

6. Special Category Data

Some data we collect may be classified as "special category data" under UK GDPR Art. 9:

  • Biometric data (photos for identity verification)
  • Racial or ethnic origin (cultural background/nationality - only with explicit consent)
  • Criminal offence data (DBS checks - for safeguarding purposes)

We only process special category data with your explicit consent or where required by law.

7. Data Retention

We retain your personal data for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes

Specific retention periods:

  • Account data: Retained while your account is active + 7 years after closure
  • Verification documents: Retained for 3 years after last verification
  • Marketing data: Retained until you withdraw consent

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right to access: Request a copy of your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your data ("right to be forgotten")
  • Right to restrict processing: Limit how we use your data
  • Right to data portability: Receive your data in a structured, machine-readable format
  • Right to object: Object to processing of your data
  • Right to withdraw consent: Withdraw consent at any time (where processing is based on consent)

To exercise these rights, please visit Settings → Privacy or contact us at [email protected].

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password storage using industry-standard hashing
  • Access controls and authentication
  • Regular security audits and updates

10. International Data Transfers

Your data is primarily stored within the UK. If we transfer data outside the UK, we ensure appropriate safeguards are in place (e.g., adequacy decisions, standard contractual clauses).

11. Cookies

We use cookies to enhance your experience. You can control cookie settings through your browser.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

This Privacy Policy is designed to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).