Privacy policy

Last updated: 29 October 2026

This explains what personal information TradeSitePros collects, why, who it's shared with, how long it's kept, and what you can ask me to do with it. It's written for three groups of people: roofers and other tradespeople I contact about my service, people who fill in a form on this site, and my customers.

Who I am

Trade Site Pros (TradeSitePros) is part of All Sorted AI, the trading name of Kevin Sinfield, a sole trader, of The Mount Stables, East Street, Coggeshall, Essex, CO6 1SL. Emails about Trade Site Pros may come from an @allsortedai.co.uk address or a @tradesitepros.com address. Whichever name or address is used, it's the same business.

I'm the data controller for the information described here. You can contact me about anything in this policy at hello@tradesitepros.com.

If I've emailed you about your business

What I hold. Your name, business name, business email address, business phone number, town, website address, and public details about your business such as your Google review count and rating.

Where I got it. From public sources: your website, your Google Business listing, Companies House, and the business data providers Apollo and Hunter. I use Bouncer to check that email addresses are valid before I send anything. I also collect Google listing and review details through Outscraper, which also checks that email addresses are valid.

Why, and on what basis. To contact your business about a service I think is relevant to it. The legal basis is legitimate interests: I have a genuine business reason to contact companies in your trade, the contact is limited to your business details, and you can stop it at any time. I email the address a business publishes for itself, such as the one on its website. From public information I can't always tell whether a business is a limited company, a sole trader or a partnership.

Your mock-up. I may have built a mock-up website using your business name, town and phone number to show what I'd build for you. It's clearly marked as a mock-up, it isn't indexed by search engines, and I'll take it down as soon as you ask.

Stopping it. Reply "no" to any email, or email me at the address above, and I'll stop contacting you and take down your mock-up. I keep a short record of your email address marked "do not contact" so you don't get contacted again by mistake.

If you fill in a form on this site

What I collect. Your mobile number, and your name, business name and town, either from the form or from the mock-up I built for you. I also record which page or email the enquiry came from.

What happens next. You'll get one automatic text message confirming I've got your enquiry, straight away. That text is part of the service I'm showing you. After that I'll ring you about your enquiry. I won't add you to a marketing list or text you promotional messages without asking first.

Why, and on what basis. To respond to your enquiry and talk to you about becoming a customer. The legal basis is taking steps at your request before entering into a contract, and legitimate interests in responding to enquiries.

Stopping the form being abused. When you send the form I keep a scrambled, one-way copy of your mobile number and your IP address for up to 24 hours, so the form can't be used to fire unwanted text messages at other people. It can't be turned back into your number, and it isn't used for anything else. The legal basis is legitimate interests in keeping the service secure.

If you become a customer

I hold the details needed to build and run your website and enquiry system, bill you, and support you. That includes files you send me while I'm setting it up, such as photographs of your work, your logo and documents. It also includes your customers' enquiries that come through the system you use. For that customer data, you're the controller and I process it on your behalf under our agreement. What that means in practice is set out in section 9 of the founding customer terms.

The legal basis is performing our contract, and keeping financial records where the law requires it.

If you take part in a founding-rate testimonial video, it's published only with your agreement, and it says you received a discounted rate.

Who I share it with

I don't sell personal information. I use these services to run the business, and they only process it on my instructions:

HighLevel (GoHighLevel): stores enquiries and customer records and runs the automatic texts. USA. Covered by standard contractual clauses in its data processing agreement.
Twilio, directly or through HighLevel's LC Phone service: sends the text messages. USA. Certified under the UK Extension to the EU-US Data Privacy Framework.
Instantly (Foo Monk LLC): sends outreach emails. USA. Covered by its data processing agreement.
Apollo: business contact data. USA. Certified under the UK Extension to the EU-US Data Privacy Framework.
Hunter (Hunter Web Services, Inc.): business contact data and email checks. USA. Hunter relies on standard contractual clauses and the UK International Data Transfer Agreement.
Outscraper: collects Google listing and review details, and checks email addresses are valid. USA.
Google Workspace (Google Cloud EMEA Limited): hosts the @allsortedai.co.uk mailboxes that send outreach emails and receive replies. Ireland, with onward transfers to Google LLC in the USA, which is certified under the UK Extension to the EU-US Data Privacy Framework.
Composio (Sampark, Inc.): connects my systems to Instantly, Apollo and Google Maps, so it passes business contact details between them. USA.
Anthropic (Anthropic Ireland, Limited): an AI service I used once, on 24 October 2026, to test drafting one outreach email. For that one business it received the trading name, trade, Google review figures, the area searched and one short review excerpt without the reviewer's name. It received no email address or contact name. Ireland, with onward transfers covered by standard contractual clauses and the UK Addendum in its data processing terms.
Bouncer (Bouncer Sp. z o.o.): checks email addresses are valid. Poland, with data stored in the EU.
Eukhost: hosts this website, the mock-ups and my email. UK.
Cloudflare: sits in front of the website for security and performance, and sees visitors' IP addresses. USA. Certified under the UK Extension to the EU-US Data Privacy Framework.
Google (Google Analytics): counts visits to this website and the mock-ups, but only if you agree to it. USA. Certified under the UK Extension to the EU-US Data Privacy Framework.
Stripe: takes customer payments. For UK accounts, Stripe's companies in Ireland handle this, and Stripe is also responsible in its own right for some payment data, such as fraud checks.

Some of these services are based outside the UK. Bouncer and Stripe are in the EU, and Google Workspace and Anthropic are provided from Ireland, which UK law recognises as giving adequate protection. Hunter relies on standard contractual clauses and the UK International Data Transfer Agreement. Twilio, Apollo, Cloudflare and Google are certified under the UK Extension to the EU-US Data Privacy Framework. HighLevel is covered by standard contractual clauses in its data processing agreement.

How long I keep it

Outreach contacts who don't reply: up to 12 months after the last contact, then deleted.
People who ask me to stop: deleted, apart from the short "do not contact" record.
Enquiries that don't become customers: up to 12 months after the last contact, then deleted.
Abuse-prevention records from the form: up to 24 hours.
Web server logs: the server records each request to this site and to the mock-ups, including the IP address it came from. Kept for 12 months, then deleted. These are separate from Google Analytics and are kept whether or not you agree to analytics, because without them I can't keep the site running or secure. The legal basis is legitimate interests.
Customers: for as long as you're a customer, then 6 years for tax and accounting records.
Files you sent me during setup: for as long as you're a customer, then 90 days, then deleted. Ask me before then and I'll send them back or delete them sooner.

Your rights

You can ask me to:

give you a copy of the information I hold about you
correct anything that's wrong
delete your information
stop using it, or use it only in limited ways
give it to you in a format you can take elsewhere

You can object to direct marketing at any time, and I'll stop. Email me at the address above. I'll reply within one month.

If you're unhappy with how I've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I'd appreciate the chance to sort it out first.

Cookies and this website

This site uses Google Analytics to count visits and see which pages people look at. It only loads if you agree to it. You're asked the first time you arrive, and if you say no then nothing is loaded, no cookie is set and nothing is sent to Google. Saying no is as easy as saying yes.

If you agree, Google Analytics stores a cookie on your device and sends information about your visit to Google, including a shortened version of your IP address. The legal basis is your consent, and you can withdraw it at any time using the buttons below.

The mock-up websites at demo.tradesitepros.com ask in the same way. The address of a mock-up page contains a code identifying the business it was built for. That part is removed before anything reaches Google, so Google isn't told which business a mock-up belongs to, or which business an enquiry came from.

There are no advertising cookies, and nothing here is used to build a profile of you or to follow you to other websites.

The enquiry form stores nothing in your browser. The longer questionnaire that customers fill in during setup saves your answers in your own browser as you go, so you don't lose them if you close the tab. That stays on your device and I can't read it.

Change your mind. Whatever you chose, you can change it here:

Changes

If I change this policy, I'll update the date at the top.