In short: we use your data to connect customers with local professionals, to run and improve the marketplace, and to keep it safe. We never sell your personal data. You can access, correct or delete your data at any time from your account settings or by contacting us.
1. Who we are
Quoteland Ltd ("Quoteland", "we", "us") operates the Quoteland marketplace at quoteland.co.uk, which connects customers seeking local services with professionals who can provide them. For the purposes of UK data protection law, Quoteland Ltd is the data controller of the personal data described in this policy.
Registered office: [Company address], United Kingdom. Company number: [00000000]. ICO registration: [ZA000000].
2. Data we collect
We collect the following categories of personal data:
- Account data — name, email address, phone number, password, and (for professionals) business name, address and website.
- Request data — the details you provide when you post a request, including the service needed, location (postcode), timing, photos and any answers to service-specific questions.
- Communications — messages you send us, contact form submissions, and reviews you write.
- Usage data — how you interact with the site, device and browser information, and approximate location derived from your IP address.
- Payment data (professionals) — billing details for credit purchases, processed by our payment provider. We do not store full card numbers.
3. How we use your data
We use your personal data to:
- Create and manage your account.
- Match customer requests with relevant local professionals.
- Share a customer's contact details with professionals so they can quote and get in touch directly.
- Send transactional notifications (new quotes, request expiry, account and billing emails).
- Provide customer support and respond to your enquiries.
- Prevent fraud, abuse and spam, and keep the marketplace safe.
- Improve our services and, where you have consented, send you marketing.
- Measure how our marketing emails perform: marketing emails (never account or request emails) contain a small invisible image and tracked links, so we can see, per email, whether it was opened and which links were clicked. Every marketing email has an unsubscribe link.
4. Legal bases for processing
Under UK GDPR, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the marketplace and matching requests | Performance of a contract |
| Transactional notifications | Performance of a contract |
| Fraud prevention and safety | Legitimate interests |
| Service improvement and analytics | Legitimate interests / consent (see our Cookie Policy) |
| Marketing emails and marketing cookies | Consent |
| Measuring opens and clicks of marketing emails | Consent / legitimate interests (business contacts); you can object at any time by unsubscribing |
| Legal and accounting obligations | Legal obligation |
5. How we share your data
We share personal data with:
- Professionals — when you post a request, we share your request details and contact information with matched professionals so they can quote and contact you.
- Service providers — hosting, email delivery (Amazon SES), analytics, and payment processing, acting as our processors under contract.
- Authorities — where required by law, or to protect our rights, users or the public.
We do not sell your personal data to third parties.
6. Customers and professionals
If you are a customer: the contact details you provide are shared with professionals you are matched with so they can respond to your request directly by phone or WhatsApp. Requests stay live for 7 days.
If you are a professional: your public business profile — including business name, reviews and the services you offer — is visible to customers. Your billing information is used to process credit purchases.
7. Data retention
We keep your personal data for as long as your account is active. Requests are retained for a limited period after they expire to support reviews and dispute resolution. Billing records are kept for as long as required by law (typically six years). When you close your account, we delete or anonymise your data except where we must retain it for legal reasons.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten").
- Restrict or object to certain processing.
- Data portability — receive your data in a portable format.
- Withdraw consent at any time (e.g. unsubscribe from marketing, or change your cookie preferences).
You can exercise many of these rights directly from your account settings, including downloading your data and deleting your account. To make any other request, contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and regular security reviews. No system is completely secure, so we encourage you to use a strong, unique password.
10. International transfers
Some of our service providers process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or adequacy regulations.
11. Children
Quoteland is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "last updated" date and, where appropriate, notify you by email or in the app.
13. Contact us
For any privacy question or to exercise your rights, contact our Data Protection team:
Email: privacy@quoteland.co.uk
Post: Data Protection, Quoteland Ltd, [Company address], United Kingdom
See also our Cookie Policy and Terms of Service.