Privacy Policy

• We don't sell your data. Ever.

• Stripe handles payments — we never see your full card number.

• Plausible Analytics — cookie-free, privacy-first. No personal tracking.

• Call tracking is transparent — we track phone clicks and call duration to prove our value.

• You can request deletion of your data anytime.

• Essential cookies only — auth/session, no advertising.

Melling Web Studios Ltd trading as GetMyTradeOnline ("GMTO", "we", "us", or "our") is the data controller for the personal data we collect to run our own business — prospects, account holders, billing contacts, support enquiries, and visitors to getmytradeonline.co.uk.

Two roles, kept clear: for personal data submitted by your own customers through the website we build and host for you (enquiry-form details, phone calls, WhatsApp messages, and the leads in your dashboard), your business is the data controller and GMTO acts as your processor. We handle that data only to deliver the service to you — hosting, call tracking, notifications, reporting, and support — never for our own purposes. We do not sell it, and we never route or resell your enquiries to other trades.

Contact email: hello@getmytradeonline.co.uk. Phone: 0330 111 8759.

Company registered in England and Wales.

Information you provide:

• Account info — name, email, phone, business name

• Business details — services, areas covered, certifications (e.g. Gas Safe number)

• Payment info — processed by Stripe, we don't store card numbers

• Communications — messages via forms, email, WhatsApp

Collected automatically:

• Usage data — pages visited, time spent, clicks

• Device info — browser type, OS, IP address

• Analytics — via Plausible (no cookies, no personal tracking)

• Phone clicks — which CTAs generate calls (via GA4 events)

We track and verify calls to show you your results, and to support any trial we've agreed with you in writing. This is how we prove the value of your website.

What we track (phone click method):

• Phone click events — which page, which button, timestamp

• Source attribution — did they come from Google, direct, etc.

• No call content — we don't record or listen to calls

What we track (Twilio tracking number method) — if you opt for a Twilio tracking number that forwards to your real number:

• Call duration — how long the call lasted (20+ seconds = "verified")

• Call timestamp — when the call occurred

• Caller number — for attribution only (not shared)

• Call recordings — only if you explicitly opt in (disabled by default)

Why we track calls:

• Performance — to track your monthly call average (50/75/100+ bands)

• ROI — to show you which pages generate calls

• Optimisation — to improve your site over time

You choose the tracking method. Twilio gives more data; phone clicks are simpler and keep your branded number.

• Build and host your trade website

• Track calls/enquiries to prove ROI and support any agreed trial

• Process payments and manage subscriptions

• Communicate about your account and support

• Improve and optimise our platform

• Send marketing (only with consent — opt-out anytime)

• Comply with legal obligations

Contract — processing necessary to provide our services (building your website, tracking calls for proof, hosting, support).

Legitimate Interests — analytics to improve our services, fraud prevention, security measures, call tracking for ROI demonstration.

Consent — marketing emails (you can withdraw consent anytime via the unsubscribe link). Call recordings, if enabled, require explicit opt-in.

Legal Obligation — keeping records for tax/accounting purposes, responding to lawful requests.

We use these third-party services to operate our platform:

• Stripe — payment processing (US, SCCs)

• Fly.io — hosting & database (UK/EU)

• Plausible — privacy-first analytics (EU)

• Twilio — call tracking & forwarding (US, SCCs)

• Google — GA4, GBP integration (US, SCCs)

• Cloudflare — CDN & security (Global, SCCs)

We never sell your personal data.

We may share data with:

• Service providers — as listed above, under contract

• Your dashboard — you see your own call/analytics data

• Legal requirements — when required by law or court order

• Business transfers — in connection with a merger or acquisition

• HTTPS/TLS — all data encrypted in transit

• Encrypted database — PostgreSQL with encryption at rest

• Access controls — role-based access, authenticated endpoints

• Regular backups — daily automated backups

• Security updates — dependencies regularly patched

We keep your data for as long as your account is active or as needed to provide services.

• Account data — kept while subscription active + 30 days after cancellation

• Call tracking data — kept for 2 years for analytics, then aggregated/anonymised

• Financial records — kept 7 years (UK tax requirements)

• Call recordings — if enabled: 90 days, then auto-deleted

• Access — get a copy of your data

• Rectification — correct inaccurate data

• Erasure — request deletion

• Restriction — limit how we process

• Portability — export your data

• Object — object to processing

• Withdraw consent — for marketing anytime

To exercise any right, email hello@getmytradeonline.co.uk. We'll respond within 30 days.

We use minimal, essential cookies only:

• next-auth.session-token — authentication — session

• __cf_bm — Cloudflare bot protection — 30 min

We don't use advertising or third-party tracking cookies.

Plausible Analytics is cookie-free and does not track individuals.

Some of our processors are based outside the UK (primarily US). We ensure transfers are protected by:

• Standard Contractual Clauses (SCCs) — EU-approved data transfer mechanisms

• UK International Data Transfer Agreement (UK IDTA) addendum where required

• Processors with SOC 2 / ISO 27001 certifications (Stripe, Twilio, Cloudflare)

If you're unhappy with how we handle your data, please contact us first at hello@getmytradeonline.co.uk.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint. Helpline: 0303 123 1113.

**What we collect, and why.** Your business's public Google listing (name, address, phone, opening hours, rating, reviews, photos), to build your website. Your name and mobile number, a text code to prove the mobile is yours, and a record of the time you agreed to our terms and the wording you saw, to check the business is yours and run your website. For all of these the legal basis is our agreement with you.

**Texts.** We text you about your website (enquiries, changes, updates) under our agreement with you. Marketing texts only if you've said yes. Reply STOP to any text to stop them, START to turn them back on.

**Visitors to your site.** We record pages viewed and taps on call, WhatsApp and directions, and pass on the messages visitors send through your contact form. No cookies are used; visitors' IP addresses are not stored; visits are counted with a code that changes every day.

**Who else sees it.** Google (to look up your listing), Twilio (to send texts), Resend (email), Anthropic (the software that writes your site's words), and Fly.io and Cloudflare (hosting). Each only for that purpose.

**How long.** A site you build but don't keep is deleted after 7 days. A kept site and your details stay while the site is live; ask and we'll delete them. Visitor counts are kept for 400 days.

**Your rights.** Ask for a copy of your data, to correct it, or to delete it: call 0330 111 8759 or email hello@getmytradeonline.co.uk. You can also complain to the ICO at ico.org.uk.

For questions about this policy or your data, email hello@getmytradeonline.co.uk, call 0330 111 8759, or message us on WhatsApp.

Children: our services are not directed to individuals under 18. We do not knowingly collect data from children.

Changes: we may update this policy. We'll notify you of significant changes by email or through the platform.