Privacy Notice
Last updated: 26 July 2026
This notice explains how Contractor Community Ltd ("Contractor Community", "we", "us", "our") collects and uses your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
1. Who we are
Contractor Community Ltd, a company incorporated in England and Wales, is the data controller for personal data collected through this platform. To contact us about privacy, email privacy@contractorcommunity.co.uk.
2. Data we collect
- Account data: name, email, password (hashed), role, phone number, business details.
- Profile & content: profile information, posts, reviews, messages, quotes, job applications, listings.
- Transactional data: subscription status and billing metadata. Payments are processed by Paddle acting as Merchant of Record; we do not store card numbers.
- Technical data: IP address, device, browser, cookies, usage logs — used for security and service integrity.
3. Lawful bases (UK GDPR Article 6)
- Contract — providing the platform to signed-in users.
- Legitimate interests — service security, fraud prevention, and product improvement (balanced against your rights).
- Consent — non-essential cookies, marketing emails. Withdraw at any time via or by unsubscribing.
- Legal obligation — accounting, tax and law enforcement requests.
4. Sharing (categories of recipients)
We share limited data with processors and partners acting under contractual safeguards:
- Merchant of Record — Paddle.com Market Ltd: for the sale of subscriptions, payment processing, subscription management, tax compliance, invoicing and refund handling. Paddle is the seller of record for all paid subscriptions.
- Hosting & database: our cloud infrastructure provider (auth, database, storage).
- AI features: Lovable AI Gateway for AI coaching and quote assistance.
- Authentication: Google (OAuth) where you choose to sign in with Google.
- Analytics: only where you have consented.
- Professional advisers: legal, accounting, and audit.
- Authorities: where required by law.
We do not sell personal data.
5. International transfers
Where data leaves the UK/EEA we rely on adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
6. Retention
Account data is kept while your account is active and for up to 6 years after closure to meet legal/tax obligations. Marketing preferences: until withdrawn. Server logs: up to 12 months. Cookie consent records: 24 months for audit. Data is deleted or anonymised when no longer needed.
7. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing, and to data portability, and to withdraw consent at any time. You can exercise these rights from your dashboard or by emailing privacy@contractorcommunity.co.uk. We aim to respond within one month. You can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We apply appropriate technical and organisational measures. Data is encrypted in transit (TLS) and at rest. Access is restricted via row-level security and least-privilege roles. Passwords are hashed. Payments are processed via Paddle (PCI-DSS).
9. Cookies
See our Cookie Policy for the categories we use and how to manage preferences.
10. Automated decisions
We do not make solely automated decisions with legal or similarly significant effects.
11. Changes
We will notify you of material changes via email or in-app.