Privacy Policy

Last updated: 26 May 2026

This Privacy Policy explains how Semir Kahrimanovic("we", "us", "our") collects and uses personal data when you use the TradeLinkers tradesperson portal at tradelinkers.co.uk/tradesperson (the "Portal"). It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

Data controller: Semir Kahrimanovic
Trading as: TradeLinkers
Business address: United Kingdom (full address supplied on request)
Contact for privacy questions: semir@bozmaps.com

2. Two roles we play

TradeLinkers is a tool used by tradespeople to manage their business, including information about their own customers. That means we play two roles, and the rules differ for each:

Controller (for your own data). When you sign up, log in, or use the Portal, we decide how to use your personal data. This Privacy Policy applies in full to that data.
Processor (for your customers' data). When you add a customer, a job, an invoice, or a photo of your work, you remain the data controller of that information. We process it on your behalf, under the terms of our Data Processing Addendum (part of our Terms). Your customers should direct privacy requests about their data to you.

3. What we collect

About you, as a tradesperson using the Portal:

Account data: your name, email address, password (stored as a one-way hash).
Business profile: trade type, service area, business name, business address, phone, logo or avatar.
Usage data: pages visited, actions taken inside the Portal, device and browser info, IP address.
Communications: messages you send to support, in-app feedback.

About your customers (processed on your behalf):

Customer contact details you record (name, email, phone, address).
Job, quote, estimate, and invoice records you create.
Property addresses and notes.
Photos you upload to your portfolio, including any photos of customer properties.
Sub-contractors you add to your team.

We do not collect special-category data (health, religion, biometrics, sexuality) and ask that you do not upload it through the Portal.

4. Why we collect it (legal basis)

Data	Purpose	Legal basis (UK GDPR)
Account data	Authenticate and provide access	Contract
Business profile	Operate the Portal, populate quotes and invoices	Contract
Usage data	Diagnose issues, prevent abuse, improve the service	Legitimate interest
IP address (server logs)	Security, fraud prevention	Legitimate interest
Communications with support	Respond to your questions	Legitimate interest
Customer data you upload	Provide the service to you	Contract (you are controller)

5. How long we keep it

Account data: while your account is active, plus up to 90 days after closure to handle billing disputes.
Customer and job records you uploaded: while your account is active. On account closure we delete or return them per our DPA.
Invoices and financial records: 6 years, as required by HMRC.
Server logs: 30 days.
Anonymised usage analytics: indefinitely (no longer identifies you).

We share data only with the third parties on our Sub-Processors page. In summary:

Supabase Inc. — database, authentication, and storage.
Vercel Inc. — hosting and edge compute.
Vercel Analytics — cookieless visit counts.

We do not sell your personal data. We do not share it with advertisers. The TradeLinkers mobile app uses additional services (such as Stripe for subscription payments and Google Play / Apple App Store for distribution) which are listed on the Sub-Processors page.

7. International transfers

Some processors are based outside the UK. When data leaves the UK we rely on UK adequacy decisions or the UK International Data Transfer Agreement (IDTA), as listed on our Sub-Processors page.

8. Your rights

Under UK GDPR you have the right to:

Be informed about how we use your data (this policy).
Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data (the "right to be forgotten"), subject to limited exceptions.
Restrict processing in certain circumstances.
Object to processing based on legitimate interests.
Data portability — receive your data in a machine-readable format.
Withdraw consent at any time where we rely on consent.

To exercise any of these rights, email semir@bozmaps.comwith the subject line "Data request". We will respond within one calendar month. We may ask you to verify your identity first.

If your request is about a customer'sdata that a tradesperson has uploaded, contact that tradesperson directly — they are the controller.

9. Cookies

The Portal uses only essential cookies for keeping you logged in and remembering your preferences. It does not use advertising, marketing, or cross-site-tracking cookies. See our Cookie Policy for details.

10. Security

We protect data with HTTPS everywhere, encrypted storage at the database layer, row-level security on every multi-tenant table, restricted access by role, regular dependency updates, and audit logging of administrative actions. No system is perfectly secure. If a breach affects your data and creates a real risk to you, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware.

11. Children

The Portal is intended for tradespeople aged 18 or over. We do not knowingly collect data from children. If you believe we have, contact semir@bozmaps.com and we will delete it.

12. Complaints

If you are unhappy with how we handle your data, please tell us first at semir@bozmaps.com so we can put it right. You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
ico.org.uk/make-a-complaint

13. Changes to this policy

We may update this policy when our practices or the law changes. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated by email to registered users and by a notice in the Portal.