Data Protection Notice

This Data Protection Notice supplements our Privacy Policy. It explains your specific rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and sets out exactly how to exercise them when using TradeHub Local.

TradeHub Local is the data controller for personal data you provide through the Platform. We are responsible for ensuring your data is processed lawfully, fairly, and transparently.

We process your personal data in accordance with the principles that it must be:

• Processed lawfully, fairly, and in a transparent manner.
• Collected for specified, explicit, and legitimate purposes.
• Adequate, relevant, and limited to what is necessary.
• Accurate and kept up to date.
• Kept no longer than is necessary.
• Processed securely, with appropriate protection against loss or misuse.

We rely on the following legal bases to process your personal data:

• Contract — to set up and manage your account and deliver the services you sign up for.
• Legal obligation — where we are required to keep records or disclose data to authorities.
• Legitimate interests — to operate, secure, and improve the Platform, and to prevent fraud and abuse.
• Consent — for optional activities such as marketing communications, where you have explicitly opted in.

You have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — ask us to delete your data in certain circumstances (also known as the "right to be forgotten").
• Right to restriction — ask us to limit how we use your data while a request is being handled.
• Right to data portability — receive your data in a structured, machine-readable format and reuse it elsewhere.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — withdraw consent at any time where processing relies on it, without affecting the lawfulness of prior processing.
• Right to lodge a complaint — complain to the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.

To exercise any of the rights above, please contact TradeHub. We will respond within one month of receiving your request. For identity verification we may ask for reasonable information to confirm who you are before acting on a request.

Most rights can also be exercised directly within the Platform — for example, you can edit your Trade Profile, delete projects, or close your account from your settings.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection authority. You can contact the ICO at ico.org.uk or by calling their helpline. We encourage you to contact us first so we can try to resolve your concerns.

We do not knowingly collect special category data (such as health, ethnicity, religion, or biometric data) through the Platform, nor criminal-conviction data. If you include such information in portfolio descriptions or vouches, please contact us so we can remove it.

We do not currently appoint a dedicated Data Protection Officer. All data protection matters are handled by our team via our contact form. We will respond promptly and in accordance with UK GDPR timeframes.

We maintain security measures designed to prevent data breaches. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours where required, and notify affected users without undue delay where the risk is high.

We may update this Data Protection Notice from time to time to reflect changes in law or Platform practice. Material changes will be published on the Platform.