1. Data Controller
Suddeco Limited is the data controller for personal data collected through the Suddeco Marketplace platform. We are registered in England and Wales with our registered office at 662 High Road, London N12 0NL.
For data protection enquiries, please contact us at [email protected].
2. Information We Collect
We collect the following categories of personal data:
Account Information
- Name, email address, and phone number
- Account type (homeowner, professional, service provider, subcontractor)
- Location and postcode
- Profile photograph
Project Data (Homeowners)
- Project details, descriptions, and specifications
- Uploaded drawings and photographs
- Property information and location
- Budget preferences and build quality selections
Professional Data
- Business name, qualifications, and certifications
- Portfolio images and project showcases
- Service areas and trade specialisations
- Insurance and accreditation details
Usage Data
- Pages visited and features used
- Search queries and browsing patterns
- Device information and IP address
- Communication logs between users
Payment Data
- Transaction history and credit purchases
- Payment card details are processed securely by Stripe and are not stored on our servers
3. How We Use Your Data
We use your personal data for the following purposes:
- Service delivery: To provide our platform services, including AI-powered scope generation, professional matching, and communication tools.
- Account management: To create and manage your account, process payments, and provide customer support.
- AI processing: To generate scopes of works, cost estimates, and professional recommendations using our AI systems.
- Communication: To send service-related notifications, including project updates, credit alerts, and showcase notifications.
- Improvement: To analyse usage patterns and improve our platform, services, and AI algorithms.
- Safety: To detect and prevent fraud, abuse, and security incidents.
- Legal compliance: To comply with applicable laws and regulations.
4. Legal Basis for Processing
We process your personal data under the following legal bases (UK GDPR):
- Contract performance: Processing necessary to provide our services to you.
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and preventing fraud.
- Consent: Where you have given consent for specific processing, such as marketing communications.
- Legal obligation: Processing necessary to comply with legal requirements.
5. Data Sharing
We may share your personal data with:
- Other users: Your profile information is visible to other platform users as necessary for the service (e.g., homeowners can see professional profiles, professionals can see project details for jobs they're invited to).
- Payment processors: Stripe processes payments on our behalf.
- Cloud providers: We use secure cloud infrastructure to host our platform and store data.
- AI service providers: Project data may be processed by AI systems to generate scopes and estimates.
- Legal authorities: When required by law or to protect our rights.
We do not sell your personal data to third parties.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal or regulatory purposes.
7. Your Rights
Under UK GDPR, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate personal data.
- Erasure: Request deletion of your personal data ("right to be forgotten").
- Restriction: Request restriction of processing of your personal data.
- Portability: Request transfer of your data in a machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
8. Cookies
We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand how users interact with our Platform. You can manage cookie preferences through your browser settings.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.
10. Children
Our Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Platform.
12. Complaints
If you have concerns about how we handle your personal data, please contact us first at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
