TTP legal

Privacy notice

Version 2026-10-14 · How TTP uses personal information under UK data-protection law.

Data controller: TTP The Trade Professionals LTD, company number 17517289, registered in England and Wales. Registered office: Suite Ra01, 195–197 Wood Street, London, United Kingdom, E17 3NU.

1. Who controls your information

For account administration, membership, payments, security, support and marketing choices, TTP The Trade Professionals LTD is the controller. Contact: support@thetradeprofessionals.com.

For customer, landlord, tenant, property, appliance and job information entered by an engineer, the engineer or their business normally controls the information and TTP processes it on their instructions under the Data Processing Agreement.

2. Information collected

Account and profile details; contact information; Gas Safe registration details entered by users; authentication and consent records; membership and transaction references; support messages; device, security and audit data; documents, signatures and job/customer information; and service usage. TTP must not collect full bank-account or card details directly.

3. Why and lawful bases

Contract: create accounts, provide tools, store and export records, administer membership and support. Legal obligation: tax, accounting, fraud-prevention and lawful requests. Legitimate interests: security, abuse prevention, reliability, service improvement and business administration, balanced against individual rights. Consent: optional non-essential cookies or direct marketing where required. Consent can be withdrawn.

4. Sharing and processors

Information may be shared only as necessary with hosting/database and security providers, transactional-email providers, the selected payment/Direct Debit provider, professional advisers, authorities where legally required, and administrative reporting tools configured by TTP. Providers must be bound by suitable confidentiality, security and data-processing terms. Current principal subprocessors include Cloudflare (hosting, database, storage and security), Resend (transactional email), Google (restricted administrative reporting where configured), and the payment or Direct Debit provider identified at checkout. TTP reviews subprocessors and their data-processing terms.

5. International transfers

If a provider processes information outside the UK, TTP will use a lawful transfer mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement or UK Addendum, plus risk assessment and supplementary safeguards where required.

6. Retention

Information is kept only as long as needed for the purpose, legal obligations and claims. The operational schedule is: account and consent records for the account life plus six years; billing and transaction records for at least six years after the relevant financial period; issued professional records while the account is active and normally six years from issue or account closure; support records normally two years after closure; security and rate-limit logs normally up to 12 months; verification/reset tokens until used or expired and routine cleanup. Legal holds may extend retention. Backups expire through the normal backup cycle.

7. Security

TTP uses access controls, encrypted transport, password hashing, email verification, rate limiting, restricted administration, logging and provider security controls. No system is risk-free. Users must protect credentials, devices and downloaded records and report suspected incidents promptly.

8. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. Contact support. Identity may be verified and requests are normally answered within one month. For job records controlled by an engineer/business, contact that controller first; TTP will assist them.

You may complain to the UK Information Commissioner’s Office at ico.org.uk.

9. Automated decisions and children

TTP does not make solely automated decisions producing legal or similarly significant effects. TTP is for adults acting professionally and is not directed to children.

10. Cookies and communications

Essential storage is described in the Cookie Notice. Optional analytics or marketing technologies will not be enabled without the required choice mechanism. Service emails are necessary for account operation; optional marketing will include an unsubscribe route.

11. Changes and contact

Material changes will be notified in the service or by email. Contact support@thetradeprofessionals.com. Controller: TTP The Trade Professionals LTD, company number 17517289, registered in England and Wales. Registered office: Suite Ra01, 195–197 Wood Street, London, United Kingdom, E17 3NU.