This Privacy Policy explains what personal data Pinnacle of All Trades Ltd collects when you use pinnacleofalltrades.co.uk, why we collect it, and what we do with it. It also tells you your rights and how to exercise them.
If anything is unclear, email privacy@pinnacleofalltrades.co.uk.
1. Who we are
The data controller for the personal data described in this policy is:
Pinnacle of All Trades Ltd
A private limited company registered in England & Wales,
company number 17195157.
Contact: hello@pinnacleofalltrades.co.uk
Privacy and data-subject requests: privacy@pinnacleofalltrades.co.uk
2. What personal data we collect
The site collects personal data only when you choose to fill in one of our interest-capture forms. We don't track you for advertising, sell your data, or pass it to anyone outside the sub-processors listed in section 5.
Tradesperson form
- Your full name
- Email address
- Phone number
- Trading name and registered address
- Optional company / office address (if different)
Homeowner form
- Your full name
- Email address
- Phone number
- Postcode
Trade Supplier form
- Your full name and job title
- Email address
- Phone number
- Company name and registered address
Automatic data
- IP address: captured on form submission for spam and fraud protection. Stored alongside the submission record. Never displayed publicly.
- Cookie / analytics data: only when you accept the cookie banner. See our Cookie Policy for the full list.
3. Why we collect it (lawful basis)
| Activity | Lawful basis (UK GDPR Article 6) |
|---|---|
| Sending you a confirmation email after you complete a form | Article 6(1)(b): necessary for taking steps at your request before entering into a contract |
| Sending you launch updates about Pinnacle of All Trades | Article 6(1)(b): same; this is what you registered interest for |
| Internal admin notifications to our team about new registrations | Article 6(1)(f): our legitimate interest in running the registration process |
| Spam / fraud protection (honeypot, rate limiting, IP capture) | Article 6(1)(f): legitimate interest in protecting the service |
| Analytics and marketing cookies | Article 6(1)(a): your consent, given via the cookie banner. You can withdraw this consent at any time. |
4. How long we keep it
This site is the pre-launch interest registration for Pinnacle of All Trades. We keep your registration data for as long as we need it for the purpose you gave it to us: to let you know when the platform is ready to launch.
In the next few months we will decide either to build the full platform or to stop the project. There are two outcomes:
- If the platform launches: your registration data is transferred to the platform, where you'll have your own account. From that point you can update or delete your data directly through your account at any time, and retention is governed by the platform's own privacy policy.
- If we decide not to proceed: we delete or anonymise your registration data within 30 days of that decision and notify you that we've done so.
You can ask us to update or delete your data at any time in the meantime by emailing privacy@pinnacleofalltrades.co.uk. See section 7 for the full list of your rights and how to exercise them.
We can keep some information longer where required by law (for example, accounting records).
5. Who else processes your data (sub-processors)
We use a small number of trusted third parties to host the site, send email, and (with your consent) analyse traffic. None of them sell your data.
| Sub-processor | Purpose | Location | Safeguards |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Application hosting and data storage | UK (London region) | EU SCCs, UK SCC Addendum where applicable |
| Resend, Inc. | Transactional email sending (your confirmation email and admin notifications) | EU sending region (Ireland); company is US-based | EU-US Data Privacy Framework certification; EU SCCs; UK SCC Addendum. Resend DPA. Sub-processor list. |
| Google LLC | Google Workspace (inbound mail to the
@pinnacleofalltrades.co.uk domain);
Google Analytics 4 (with your consent only) |
Workspace mail data is stored at rest in EU data centres (Workspace data region set to Europe). Some metadata (e.g. spam and abuse detection, search indexing) may be processed globally. Google Analytics 4 traffic is processed globally. | EU-US Data Privacy Framework; EU SCCs. Google Privacy Policy. |
| Meta Platforms Ireland Ltd. | Facebook Pixel: conversion tracking (with your consent only) | Ireland; data may be transferred to Meta in the US | EU-US Data Privacy Framework; EU SCCs. Meta Privacy Policy. |
6. International transfers
Your data is hosted in the UK and EU. Some of our sub-processors (Resend, Google, Meta) may transfer data to the United States. We rely on the following safeguards for these transfers:
- The EU-US Data Privacy Framework (DPF) where the recipient is certified under it
- Standard Contractual Clauses (the EU SCCs, with the UK Addendum where the transfer involves UK personal data)
7. Your rights
Under UK GDPR you have the following rights about your personal data:
- Access: get a copy of the data we hold about you
- Rectification: correct inaccurate or incomplete data
- Erasure ("right to be forgotten"): ask us to delete your data
- Restriction: limit how we use your data while we work through a complaint
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: for activities that rely on consent (analytics and marketing cookies). Use the cookie banner or clear browser storage to revoke.
- Complain to the regulator: the UK Information Commissioner's Office at ico.org.uk. You can also contact the ICO without telling us first, but we'd appreciate the chance to address your concerns directly.
To exercise any of these rights, email privacy@pinnacleofalltrades.co.uk. We respond within one calendar month.
8. Security
We protect your data with industry-standard measures including HTTPS encryption in transit, encrypted storage at rest, a database that is not directly accessible from the public internet, secrets held in a dedicated secret-management system, and least-privilege access controls on our infrastructure.
If a personal data breach occurs that's likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it, and notify you directly when the breach is likely to result in high risk.
9. Children
The site is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has registered, email us and we'll delete the record.
10. Changes to this policy
We update this policy when our processing changes (for example, adding a sub-processor or a new feature). The "Last updated" date at the bottom reflects the most recent change. Material changes are flagged on the home page for at least 30 days.
11. Contact
Email privacy@pinnacleofalltrades.co.uk for any privacy question, whether you're exercising a right, reporting a concern, or just asking how something works.
Last updated: 3 May 2026