This Privacy Policy explains what personal data Pinnacle of All Trades Ltd collects when you use pinnacleofalltrades.co.uk, why we collect it, and what we do with it. It also tells you your rights and how to exercise them.
If anything is unclear, email privacy@pinnacleofalltrades.co.uk.
1. Who we are
The data controller for the personal data described in this policy is:
Pinnacle of All Trades Ltd
A private limited company registered in England & Wales,
company number 17195157.
Contact: hello@pinnacleofalltrades.co.uk
Privacy and data-subject requests: privacy@pinnacleofalltrades.co.uk
2. What personal data we collect
The site collects personal data when you fill in one of our registration forms, and afterwards through your account: the photos, documents, insurance certificates, trade scheme registrations and trade body memberships (such as Gas Safe or the Federation of Master Builders) you upload, which can include the name, photo and licence number of the engineer, architect or surveyor a registration belongs to, the notes and reports you send us, the steps you and your tradesperson record on a job, and any you tell us aren't right, and the login you set up. We don't build advertising profiles about you or track you across other sites; the only advertising-related data we hold is described below, and it's used solely to measure our own ad campaigns. We don't sell your data. We pass it to the sub-processors listed in section 5, and to the other party when we match you, list you or introduce you to a trade supplier. When we ask a tradesperson whether they can take your project, they see your postcode, the type of work and anything you wrote in the "any other details" box, whether or not they go on to accept; when they accept, they receive your name, your address (which we take from your call with us), phone number, email address, project details and the photos and documents you attached, and you receive their name, trading name, phone number and email. Once you've been introduced, you and your tradesperson can each add notes to the record of the job in the portal: a note either of you chooses to share is read by the other, and a note you don't share is read only by you and our team. A listed trade supplier's contact details are shown to tradespeople with a portal login, and to homeowners with one; a member trade supplier's public profile, which anyone can see, is described below. We may also introduce you to a trade supplier who can help with your project or your work: when we do, the supplier receives your name, phone number and email address, the postcode and type of your project if you are a homeowner or your trading name if you are a tradesperson, and any note we add (never your address, photos or documents), and you receive the supplier's company name, contact name, phone number, email and website. After an introduction you deal with the supplier directly, and the details we sent are held by them: closing your account with us does not recall them. We keep a record of each introduction we make, and we may tell a supplier how many introductions we have made to it. About two weeks after an introduction we may email you once to ask whether it helped. Your answer is kept with our record of the introduction, and a supplier is only ever told totals, never your answer beside your name, and no total below 5 is shown. When you search the supplier directory in your portal, we record the category you searched for, the first part of the postcode the search was made from (the one you typed, or your own) and when, against your login, so we can see which trade suppliers people look for and where. We also record, against your login and with when it happened, each trade supplier the directory shows you and each whose contact details you open there, so we can count how many different people see each supplier; a supplier is told totals only, never who. These records are deleted with your login when we erase your account; if the same login also serves your other account with us, they are kept with it. We may count your project, or a search you make in the supplier directory in your portal, in the figures we send member trade suppliers about demand near them: these never name you or your project, and no figure below 5 is shown. If you are a trade supplier, an introduction sends your company name, contact name, phone number, email and website to the homeowner or tradesperson, and you receive theirs as described above. A tradesperson who prints their verification link shows their trading name, the trades they work in, insurance status and verified trade scheme registrations and memberships (naming the trade body for a membership) to anyone who scans it, and, if they add them, photos of the people who work with them, each with a first name and role; a trade supplier's shows their company name and logo.
If you work with a member tradesperson. They can add your photo, first name and role to their verification page, so a homeowner can check who is at the door. They may only do this with your agreement, and we check each photo before it shows. A photo may also be screened automatically when it is added or replaced (section 3). Photos must show only the named adult. We do not show photos of children. To have yours taken down, ask them or email privacy@pinnacleofalltrades.co.uk and we will remove it within 2 working days.
If you are a member trade supplier. Your business has a public profile page and can appear in our public directory of trade suppliers, which anyone can see without logging in. Both show business details only. Your profile shows your company name, logo and banner, the categories you supply (including any you describe yourself), the brands you stock, your accreditations, your description, your opening hours, website and social links, the year your company was incorporated if we have it, a public phone number and address if we have entered them for you with your agreement (they need not be the ones you registered with), and your working area, shown as "up to" a number of miles from your council district, or as nationwide. The directory shows your company name, logo and categories (including any you describe yourself) and the council district you are based in. That council district comes from the postcode you registered with; the postcode itself is never shown. Neither page ever shows your contact person's name, the email address you registered with, or a pin on a map, and neither takes a phone number or address from your registration: only the public ones we have entered with your agreement. We count how often your profile is viewed, how often people click through to your website or phone number from it, and how often your business is listed in the directory (see "Trade supplier profile and directory counts" below).
Drafting a member trade supplier's profile. We may draft parts of your profile, such as its description, the brands you stock, your opening hours, your social links and the year your company was incorporated, from two public sources: what Companies House holds about your company (its registered address, when it was incorporated and its business activity codes) and the home page of your own website. We never use other directories or listings. OpenAI's model writes the draft from your company name, when it was incorporated, its business activity codes and the text of that page. We never send the contact details you registered with us, but the page text includes whatever your website itself shows. Our team checks the draft and sends it to you, and nothing in it is published until you approve it. We keep a note of where the draft came from and when we fetched it, and any note you add if you decline it. If you would rather we did not draft your profile, tell us and we won't.
Your monthly totals, if you are a member trade supplier. We may email you your own totals each month, such as how often your profile was viewed, clicks through to your website or phone number, how often you appeared in our directories, and the introductions we made to you. The email can also show demand near you, such as how many projects of a type were registered or how many directory searches were made nearby. These are counts only: the email never names, or holds any detail about, the people behind them, and a demand figure below 5 is not shown.
Contacting a trade supplier. Pinnacle does not provide an enquiry form on supplier profiles. Use the public website or phone number the supplier has chosen to publish. We may still deliver an enquiry submitted before the form was retired to the email address the supplier registered with us, under the notice in force when it was sent. Otherwise, that address is for managing its Pinnacle account. It is not published on its public profile or used for the retired public enquiry form. Logged-in tradespeople and homeowners can still reveal it in the member supplier directory, as described above.
Supplier offers, if you are a member tradesperson. A trade supplier may make an offer to member tradespeople, which we show in the trade portal. Each offer is run by the supplier, not by Pinnacle. If an offer is shown to you, we record that and whether you claim it, so we can count them, and we tell a supplier only how many times its offers were seen and claimed, never which tradespeople saw or claimed them.
Referral links. If you have a login with us, we may give you a personal link to our registration forms, which you send yourself from your own phone, email or messaging app. We never send anything to the people you send it to, and beyond the server logs every visit to the site leaves, we keep no record of who a link was sent to: someone who is sent a link but does not register is, to us, like any other visitor to the site. If someone registers through your link, we record on their registration that it was your link. Our team can see your name on that registration. You see only how many people have registered through your link, never who they are, and we never show them your name as the person who shared the link. If you register through someone else's link, the same applies the other way round: our team can see on your registration whose link it was, and that person sees only their count go up, which can tell them that someone they sent it to has registered. When a registration comes through a link, we tell Google Analytics only that it did and which kind of user shared it, such as a tradesperson or a homeowner. We never send the link's code to Google or Meta, or tell them who anyone is. The record of whose link it was is kept with the registration, and cleared when either your record or theirs is erased or anonymised. When you press Share on the Share Pinnacle card in your portal, we also tell Google Analytics, under the choice you made in the cookie banner, how you shared it (WhatsApp, text, email, your phone's share sheet or copying the link) and which kind of user you are sending it to, and never the link, its code or what you sent. We offer no reward for sharing a link.
Tradesperson form
- Your full name
- Email address
- Phone number
- Trading name and registered address
- Optional company / office address (if different)
- How you heard about us, if you tell us
Homeowner form
- Your full name
- Email address
- Phone number
- Postcode
- Details of your project, anything you write in the "any other details" box, and any photos and documents you attach
- How you heard about us, if you tell us
Trade Supplier form
- Your full name and job title
- Email address
- Phone number
- Company name and registered address
- The categories you supply, including any you describe yourself
- How you heard about us, if you tell us
Reviews
After a job arranged through Pinnacle is finished (confirmed by our team, or marked finished by one of you without the other saying otherwise within 14 days), the homeowner and the tradesperson can each leave a review of the other: a star rating and, if they choose, a few words. We keep the rating, the words, who wrote them and when. A homeowner's review of a tradesperson is published on that tradesperson's verification page under the homeowner's first name only, with the month and year and the type of project, never an address or a postcode. The star rating also counts towards that tradesperson's average, which we show to other homeowners when they are choosing between the tradespeople we introduced to them. That average is a number and a count of reviews and nothing else: it carries no words, no name, no date and nothing else about whoever wrote a review. A tradesperson's review of a homeowner is never published: the homeowner sees it in their own account, and we do. You can withdraw a review you wrote, once it is published, from your account. We may also take a review down, in either direction, if it breaks our review rules; we tell whoever wrote it, and we keep a record.
A tradesperson can reply once to a homeowner's published review of them. Once we have checked it, the reply is published under that review on their verification page, under their company name with the month and year, and the homeowner who wrote the review can read it in their account and, if they can open their review page there, is emailed that it is there. We keep the reply and when it was written. The tradesperson can withdraw their reply, and we may take one down if it breaks our review rules.
Screening records
When text you write is screened (section 3), including the names you type when you register, we keep a record of that screening: a copy of the text as screened, the categories and scores the screening returned, and, where a person on our team made a decision about it, who decided, when and why. The copy of the text is deleted 90 days after the record is settled; the rest stays with the record's history. When a photo or logo you upload, or a photo of you that a member tradesperson adds, is screened, the record keeps a reference to the stored image and the result, not a copy of the image.
Automatic data
- IP address: captured on form submission for spam and fraud protection. Stored alongside the submission record. Never displayed publicly.
- Ad click reference: if you arrived by clicking one of our Google ads, we store a short code from that click (Google calls it a "Click ID") alongside your form submission, so we can measure whether the ad led to a genuine registration. Not present if you found us another way.
- Your cookie-banner choice: whether you accepted or declined non-essential cookies is also stored alongside your form submission, not just remembered in your browser. This is so that, if we build a way to report ad performance back to Google in future, that report can correctly reflect your choice rather than treating everyone the same.
- Analytics ID: if you accept the cookie banner and fill in our tradesperson registration form, we also store the unique ID from our analytics cookie alongside your form submission. This is so that, if you go on to become a paying member, we can privately tell Google that a specific earlier ad click led to that outcome. Not present if you decline the cookie banner (the analytics cookie is never set, so there's nothing to store), or if you registered as a homeowner or trade supplier instead (we don't collect this for those forms).
- Remembered login: if you tick "Keep me logged in on this device", your browser keeps your email address for up to a year so the login form can fill it in, and keeps you logged in for up to 90 days (30 days without a visit). Leave it unticked on a shared computer. See our Cookie Policy.
- Trade supplier profile and directory counts: when you view a member trade supplier's public profile, click through to its website or phone number, or open a page of our public directory of trade suppliers that lists it, we record that view or click, with its date and time, against that trade supplier, not against you. So that several views from one person on one day count once, we keep with each record a one-way code made from your IP address and the date, using a secret key that only we hold. Because the date is part of it, the code cannot link your visits on different days, and we delete it the next day. We do not keep your IP address with these records, and no cookie is set for this counting.
- Cookie / analytics data: only when you accept the cookie banner. See our Cookie Policy for the full list.
3. Why we collect it (lawful basis)
| Activity | Lawful basis (UK GDPR Article 6) |
|---|---|
| Sending you a confirmation email after you complete a form | Article 6(1)(b): necessary for taking steps at your request before entering into a contract |
| Emailing and texting you when we match you with a tradesperson or a job, and at key stages of your registration (when your project is qualified, when you are approved, and when you subscribe) | Article 6(1)(b): necessary to perform the matching service you registered for |
| Passing your details to the other party: a homeowner's to the tradespeople we ask and match, a tradesperson's to the homeowner, a trade supplier's to the tradespeople and homeowners who look them up, and, when we introduce a homeowner or a tradesperson to a trade supplier, each one's to the other (section 2 lists what each receives) | Article 6(1)(b): necessary to perform the matching and listing service you registered for |
| Showing a member trade supplier's business details on its public profile page and in our public directory of trade suppliers (section 2 lists what is shown and what never is) | Article 6(1)(b): necessary to perform the listing service the supplier registered for |
| Counting views of a member trade supplier's public profile, clicks through to its website or phone number, and the times it is listed in our public directory, using a one-way code that changes every day (section 2) | Article 6(1)(f): our legitimate interest, and the supplier's, in knowing how much attention a listing gets. No cookie is set for the counting, the code is made with a secret key only we hold, cannot link your visits on different days and is deleted the next day, and the records are held against the trade supplier. |
| Drafting parts of a member trade supplier's profile with an AI model, from what Companies House holds about its company and the home page of its own website, for our team to check and the supplier to approve before anything is published (section 2) | Article 6(1)(f): our legitimate interest, and the supplier's, in a full and accurate profile without the supplier having to type it all in. It uses only those two public sources, the supplier can ask us not to, and nothing is published until the supplier approves it. |
| Emailing a member trade supplier its own totals each month, with figures about demand near it (section 2) | Article 6(1)(b): necessary to perform the listing service the supplier registered for. The figures are counts that name nobody, and a demand figure below 5 is not shown. |
| Recording the searches you make in the supplier directory in your portal (the category, the first part of the postcode the search was made from, and when), and each trade supplier it shows you and each whose contact details you open (section 2) | Article 6(1)(f): our legitimate interest in knowing which trade suppliers people look for and where, so we can find suppliers where they are missing, and in telling a supplier how many different people saw it. Nothing more precise than the first part of a postcode is recorded, and a supplier is never told who. |
| Counting homeowners' projects, and the searches homeowners and tradespeople make in the supplier directory in their portal, in the figures about demand we send member trade suppliers (section 2) | Article 6(1)(f): our legitimate interest, and the suppliers', in knowing where their services are wanted. The figures never name a person, a project, a postcode or an outcode, and no figure below 5 is shown. |
| Completing or retaining an enquiry submitted through a supplier's profile before the form was retired (section 2) | Article 6(1)(f): the sender's and our legitimate interest in completing the enquiry they asked us to pass on, and our legitimate interest in retaining the record for the limited period disclosed when it was submitted. No new enquiries are accepted. |
| Recording when a trade supplier's offer is shown to a member tradesperson and when they claim it (section 2) | Article 6(1)(f): our legitimate interest, and the supplier's, in knowing whether offers are used. A supplier is only told totals, never who. |
| Emailing you once after we introduce you to a trade supplier, to ask whether the introduction helped, and keeping your answer with our record of it (section 2) | Article 6(1)(f): our legitimate interest in knowing whether our introductions help the people we make them for. Answering is optional, and a supplier is only told totals, none below 5. |
| Recording, when you register through a link someone shared with you, whose link it was, and showing the person who shared it how many people have registered through their link (section 2) | Article 6(1)(f): our legitimate interest in knowing how people find us and in growing the service by word of mouth. The person who shared the link sends it themselves and sees only a count, never who; we never show the person who registered the sharer's name; and we never contact anyone a link is sent to. |
| Asking how you heard about us, so we know which of our signs, adverts and introductions work | Article 6(1)(f): our legitimate interest in knowing where to spend our marketing effort. Entirely optional. The answer you pick (not anything you type under Other) is also sent to Google Analytics with your registration, under the choice you made in the cookie banner, as for the rest of our analytics. |
| Sending you notices about your account and about changes to the service that affect it, whether you registered as a homeowner, a tradesperson or a trade supplier | Article 6(1)(b): necessary to keep you informed about the service you registered for |
| Internal admin notifications to our team about new registrations | Article 6(1)(f): our legitimate interest in running the registration process |
| Spam / fraud protection (honeypot, rate limiting, IP capture) | Article 6(1)(f): legitimate interest in protecting the service |
| If you are a member and you choose to tell us, roughly what a job you were matched with came to, recorded against that job | Article 6(1)(f): our legitimate interest in understanding and describing what the platform delivers for the tradespeople who pay for it. Entirely optional, you can change or remove it at any time from your portal, and it is never shown to the homeowner. Removing it takes the figure off the job; we keep an internal record that it changed. We use these figures added together to state what the platform has delivered; we never publish an individual figure. |
| Storing the ad click reference and your cookie-banner choice alongside your registration, so we can measure and later report on ad-campaign effectiveness | Article 6(1)(f): our legitimate interest in understanding whether our advertising spend is working. This is different from the analytics/marketing cookies below: it doesn't place any tracking cookie on your device, it simply saves the two values (like any other form field) alongside the registration data you already gave us, so it happens whether or not you accept the cookie banner |
| For our tradesperson registration form only: storing an analytics ID alongside your registration when you accept the cookie banner, and later matching a paying membership back to it so we can report that outcome to Google | Article 6(1)(a): your consent, given via the cookie banner. This only happens at all if you've consented to the underlying analytics cookie, and you can withdraw consent at any time. |
| Screening the text you write on Pinnacle (a project description, a note you share with the other party on a job, a review or a reply to one, or the other categories a trade supplier describes, or the company and person names and the other types of trade you type when you register) for abuse, threats or harassment, so that our team is warned before reading it and, where a feature says so (a review before it is published, a note you share with the other party on a job before they see it, your project description or your own description of the type of work before the tradespeople matched to your project see it, or a trade supplier's other categories before they appear in our member supplier directory, on its public profile or in our public directory of trade suppliers), a flagged text waits for a person's decision. A shared note, a project description, your own description of the type of work, or a trade supplier's other categories that we cannot check within two hours are shown anyway and checked by our team afterwards. The names and other types of trade you type when you register are only ever flagged for our team: a flag never holds up your registration. Your contact details are never screened. Photos and logos you upload may also be screened, for sexual, violent or self-harm content: only the image itself is sent, never anything else about your record. A photo you add to your project may be screened this way, and one that is flagged waits for a person's decision before the tradespeople we introduce to your project see it; one we cannot check within two hours is shown anyway and checked by our team afterwards. You always see your own photos, and the photos you add to a problem report are never screened. A photo of a person who works with a member tradesperson may be screened this way when it is added or replaced: only the image is sent, never the person's name or role, and a flag is only shown to our team and never delays its check of the photo. A historical message submitted through the retired supplier profile form may still be screened: one that is flagged waits for a person's decision before it is sent, and one we cannot check within two hours is sent anyway and checked by our team afterwards (section 2). The text of a member trade supplier's profile is screened if the supplier approves a draft of it, and is only ever flagged for our team | Article 6(1)(f): our legitimate interest in keeping the platform safe for the homeowners, tradespeople and trade suppliers who use it. The screening flags; a person on our team decides. A flag on its own never rejects a registration, removes a review or changes anything about your record. |
| Reading the details printed on an insurance certificate, trade scheme registration or membership you upload (who issued it, its policy or registration number and its expiry date) with an AI model, so that the form our team fills in to check the document starts with those details. A person on our team checks every detail against the document itself, and nothing is saved until they have confirmed it | Article 6(1)(f): our legitimate interest in checking your documents quickly and accurately and, where the document names someone other than you, such as an engineer you employ, in checking the competence you tell us about before homeowners rely on it |
| Publishing your review of a tradesperson on their verification page, with any reply they write to it, counting your star rating towards the average we show other homeowners when they are choosing between tradespeople, and showing a tradesperson's review of you in your own account | Article 6(1)(f): our legitimate interest, and the interest of the people choosing a tradesperson, in honest reviews of jobs that really happened. You can withdraw a review you wrote once it is published, you can object to one written about you through the contact details in section 11, and we may take down one that breaks our review rules. |
| Analytics and marketing cookies | Article 6(1)(a): your consent, given via the cookie banner. You can withdraw this consent at any time. |
4. How long we keep it
We keep your registration data for as long as we need it for the purpose you gave it to us: to vet you, to match homeowners with tradespeople, to list trade suppliers and introduce people to them, and to run your account. Your registration is your account on the platform, whether or not you have set up a login for it.
- While you use the platform: we keep your data. Where you have a login you can update some of your details through your account, and we update the rest for you when you ask.
- If your registration is not accepted, or we archive it (for example as a duplicate): we keep the record for 12 months from that decision, so we can answer a question about it or recognise a repeat registration, and then delete or anonymise it.
- If you ask us to close your account: we act on your request within one month, delete or anonymise your data, and tell you when it's done, except where the law requires us to keep it (see below).
- If the platform closes: we delete or anonymise your data within 30 days of that decision and notify you.
A screening record (section 2) keeps its copy of the text for 90 days after the record is settled and then deletes it; the flags and any decision stay with the record's history. A screening record for a photo or logo keeps no copy of the image, only a reference to where the photo or logo is stored. If you remove a photo from your project, its screening record is deleted too. When a photo of a person who works with a member tradesperson is taken down, any of its screening records our screening service has not yet answered are deleted with it; records already with our team stay until they decide them, or until the photo itself is deleted, when all its screening records are deleted with it. A review you withdraw, or one we take down, leaves every page at once; the record that it was written, and why it came down, is kept.
The records of views, clicks and directory listings for a member trade supplier are kept with the trade supplier's record and deleted when that record is erased or anonymised. They are held against the trade supplier, and once the one-way code is deleted the next day they say nothing about who viewed it. The records of each time the supplier directory in a portal showed a member trade supplier to a logged-in tradesperson or homeowner, or they opened its contact details, are also deleted when that trade supplier's record is erased or anonymised.
For an enquiry sent through the supplier-profile form before it was retired, our record and its screening records are deleted 12 months after submission; the email the supplier received is held by them. If we record which offers were shown to a member tradesperson and which they claimed, that record is kept until the tradesperson is erased, or the supplier is erased or anonymised. If you answer our email after an introduction, your answer is kept with our record of that introduction and deleted with it. If we draft a trade supplier's profile, the draft is deleted when the supplier's record is erased or anonymised. The records of your searches in the supplier directory in your portal, and of the suppliers it shows you and whose contact details you open, are deleted with your login when we erase your account; if the same login also serves your other account with us, they are kept with it. If you register through someone's link, the record of whose link it was is kept with your registration and cleared when either your record or theirs is erased or anonymised.
You can ask us to update or delete your data at any time by emailing privacy@pinnacleofalltrades.co.uk. See section 7 for the full list of your rights and how to exercise them.
We can keep some information longer where required by law (for example, accounting records).
5. Who else processes your data (sub-processors)
We use a small number of trusted third parties to host the site, send email, and (with your consent) analyse traffic. None of them sell your data.
| Sub-processor | Purpose | Location | Safeguards |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Application hosting and data storage | UK (London region) | EU SCCs, UK SCC Addendum where applicable |
| Amazon Web Services EMEA SARL (Amazon Bedrock) | Reading the details printed on an insurance certificate, trade scheme registration or membership you upload, when our team checks it (section 3), using Anthropic's Claude model run by AWS. Only the document itself is sent, with nothing else from your record. Bedrock does not store the document or what it reads by default, and Anthropic has no access to either. | UK and EU: the request is sent from London and may be processed in another AWS region in the EU | UK adequacy regulations for the EEA; EU SCCs, UK SCC Addendum where applicable. Amazon Bedrock data protection. |
| Resend, Inc. | Transactional email sending (your confirmation email, admin notifications, and an enquiry submitted before the supplier-profile form was retired that is still awaiting delivery). Until 22 September 2026 Resend also held a contact list of the name and email address of every registrant, kept for launch updates; no update was ever sent, and on that date we deleted every contact from it | EU sending region (Ireland); company is US-based | EU-US Data Privacy Framework certification; EU SCCs; UK SCC Addendum. Resend DPA. Sub-processor list. |
| Twilio Inc. | Transactional text messages (SMS), for example when we match you with a tradesperson or a job | US-based; messages to UK numbers are delivered via UK carriers | Approved Binding Corporate Rules; EU SCCs; UK SCC Addendum. Twilio DPA. Binding Corporate Rules. |
| Google LLC | Google Workspace (inbound mail to the
@pinnacleofalltrades.co.uk domain);
Google Analytics 4 (with your consent only).
We're also planning to send Google Ads the ad
click reference and cookie-banner choice
described in section 2, to report ad-campaign
performance. That reporting isn't built yet,
so no data has been sent for this purpose so
far. Separately, we've built (but not yet
switched on) a way to tell Google Analytics
when a registration turns into a paying
membership, using the analytics ID described
in section 2; no report has been sent for
this either, until we turn it on. |
Workspace mail data is stored at rest in EU data centres (Workspace data region set to Europe). Some metadata (e.g. spam and abuse detection, search indexing) may be processed globally. Google Analytics 4 traffic is processed globally. | EU-US Data Privacy Framework; EU SCCs. Google Privacy Policy. |
| OpenAI, L.L.C. | Automated moderation screening of text you write on Pinnacle (a project description, a note a homeowner or a tradesperson shares with the other on a job, a review or a reply to one, a historical message submitted through the retired supplier profile form, a trade supplier's other categories or the text of its profile when it approves a draft, or the company and person names and other types of trade typed when registering) for abuse, threats or harassment, using OpenAI's moderation model. Only the text itself is sent, one piece at a time: the names you type when you register are screened, but never your contact details or anything else about your record. Photos and logos you upload may also be screened, for sexual, violent or self-harm content: only the image is sent, as data rather than a link, one image at a time, and nothing else about your record goes with it. A photo of you that a member tradesperson adds may be screened the same way. The result is a flag that a person on our team then reads and decides on. OpenAI's model may also draft parts of a member trade supplier's profile (section 2) from its company name, when it was incorporated, its business activity codes and the text of its website's home page, never the contact details it registered with us, though the page text includes whatever its website shows. Under OpenAI's API terms, text and images sent through the API are not used to train its models; the DPA linked here is what that rests on. | US-based | EU SCCs; UK SCC Addendum. OpenAI DPA. OpenAI Privacy Policy. |
| Meta Platforms Ireland Ltd. | Facebook Pixel: conversion tracking (with your consent only) | Ireland; data may be transferred to Meta in the US | EU-US Data Privacy Framework; EU SCCs. Meta Privacy Policy. |
6. International transfers
Your data is hosted in the UK and EU. A document our team checks with Amazon Bedrock (section 5) may be processed in an AWS region in the EU rather than in London; it never leaves the UK and the EU, and the UK's adequacy regulations cover the transfer. Some of our sub-processors (Resend, Twilio, Google, Meta, OpenAI) may transfer data to the United States. We rely on the following safeguards for these transfers:
- The EU-US Data Privacy Framework (DPF) where the recipient is certified under it
- Standard Contractual Clauses (the EU SCCs, with the UK Addendum where the transfer involves UK personal data)
7. Your rights
Under UK GDPR you have the following rights about your personal data:
- Access: get a copy of the data we hold about you
- Rectification: correct inaccurate or incomplete data
- Erasure ("right to be forgotten"): ask us to delete your data
- Restriction: limit how we use your data while we work through a complaint
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: for activities that rely on consent (analytics and marketing cookies). Use the cookie banner or clear browser storage to revoke.
- Complain to the regulator: the UK Information Commissioner's Office at ico.org.uk. You can also contact the ICO without telling us first, but we'd appreciate the chance to address your concerns directly.
To exercise any of these rights, email privacy@pinnacleofalltrades.co.uk. We respond within one calendar month.
8. Security
We protect your data with industry-standard measures including HTTPS encryption in transit, encrypted storage at rest, a database that is not directly accessible from the public internet, secrets held in a dedicated secret-management system, and least-privilege access controls on our infrastructure.
If a personal data breach occurs that's likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it, and notify you directly when the breach is likely to result in high risk.
9. Children
The site is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has registered, email us and we'll delete the record.
10. Changes to this policy
We update this policy when our processing changes (for example, adding a sub-processor or a new feature). The "Last updated" date at the bottom reflects the most recent change. Where a change affects how we use data you have already given us, we email everyone it affects, using the addresses on our own records.
We record when you accepted this policy and our Terms of Use. If you have a login and a change needs your agreement, we ask you to accept the new version the next time you use your account. If you decline, you are logged out, and we record that you declined.
11. Contact
Email privacy@pinnacleofalltrades.co.uk for any privacy question, whether you're exercising a right, reporting a concern, or just asking how something works.
Last updated: 14 October 2026