Privacy policy

When you create or manage a listing we collect:

• your email address, which is how you sign in;
• the details you add to your listing: business name, trade, base town and the areas you cover, services, working hours, languages, photos, logo, a description of your business, and the contact methods you choose to publish (for example phone, WhatsApp, email or website);
• records of your sign-ins, so that your session stays secure;
• the confirmation requests you send, including the name and email address of the customer you ask to confirm a job, and the job details you describe.

Your listing is public once you publish it. Anything you put on it can be seen by anyone visiting the site.

Job confirmations. If a tradesperson asks you to confirm a job, they give us your name and email address so we can send you a link. If you answer, we keep your answer: whether the job happened, your rating, the tags you choose, your written review, the language you used with the business, and your view on any price or duration they stated. If you say the job did not happen, your reason and note are seen only by our staff.

Reviews left on a business’s review link. When you leave a review using a link a business shared with you, we collect it directly from you: your star rating, your written review, your name if you give it, the type of work if you select it, and the date and time you submitted it. We do not ask for your email address or require an account.

Reviews given to our staff. If you give a review to a member of our team directly, we record your name, rating and review as you give them, with your agreement to publish them.

Reviews are published on the business’s profile under your first name and the initial of your surname only.

To grow the directory, we look for tradespeople who are publicly recommended in local community groups and may contact them to invite them to list. For this we keep the business or trading name, trade and area, links to the public posts where they were recommended, and a record of any contact we make. We do not store the text of those posts or the names of the people who made the recommendations. Evidence from posts is deleted after 12 months. If you would rather not be contacted, tell us and we will delete your details, keeping only the minimum needed to make sure we do not contact you again.

We do not use advertising or analytics cookies, and we do not track you across other websites. We use three cookies, all needed for the service to work:

• tts_session, which keeps a tradesperson signed in, for up to 30 days;
• lang, which remembers whether you read the site in English or Spanish, for up to a year;
• tts_google_oauth_state, a short-lived security check set for 10 minutes only while a tradesperson connects an external account.

Like most websites, our servers log basic technical information about each request (such as IP address, the page requested, browser type and time) to keep the service secure and to diagnose faults.

To understand how the site is used, we count visits with Umami, which we run on our own servers in the EU. It sets no cookies and does not store your IP address. It records the page you visited (with any private link codes removed), the site that sent you, your browser, device type and country, and a few actions such as revealing a business's contact details. We use it only as totals, never to identify anyone; it is not shared, and nothing is recorded at all if your browser sends a “Do Not Track” signal.

Some listings show ratings or reviews from other platforms, always labelled with their source. Where a tradesperson has connected their Google Business Profile, the star rating and reviews shown from Google are displayed unedited, refreshed daily, and not retained beyond 30 days.

• to run the directory and show listings and reviews to visitors;
• to create and secure tradesperson accounts and send sign-in links;
• to send job confirmation requests on a tradesperson’s behalf;
• to prevent spam, fake reviews and other abuse of the service;
• to invite recommended tradespeople to list;
• to respond when you contact us, and to meet our legal obligations.

We rely on the performance of our agreement with tradespeople who create an account; on our legitimate interests in running a reliable, trustworthy directory, protecting it from abuse and growing it; and on your choice to submit a review. We do not sell personal data and do not use it for advertising.

We use a small number of service providers who process data on our behalf under contract: a hosting provider that runs our servers and database in the European Union, and an email delivery provider that sends sign-in and confirmation emails. Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses. We may also disclose data where the law requires it.

• Sign-in links expire after 15 minutes; sessions after 30 days.
• Job confirmation links expire after 14 days. Confirmed reviews stay on the listing while it exists.
• Reviews left on a review link stay on the listing while it exists, unless removed for breaking our rules.
• Tradesperson account and listing data is kept while the account is open, and deleted when you ask us to close it, except where we must keep something to meet a legal obligation or to resolve a dispute.
• Recruitment evidence is deleted after 12 months. Links to public requests for recommendations are deleted after 30 days, or after 12 months if we replied to them.
• Encrypted database backups are kept for 30 days.
• Server logs are kept only as long as needed for security and troubleshooting.

Under data protection law you can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Tradespeople can correct most of their details themselves from their dashboard. For anything else, including removing a review you left or your details from our recruitment records, email [email protected]. We will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).

All traffic to the site is encrypted. Sign-in and confirmation links are single-purpose and stored only in a form that cannot be reused. Backups are encrypted before they are stored. No system is perfectly secure, but we limit what we collect and who can see it.

We will update this policy when our practices change and show the date at the top of the page. Questions about privacy: [email protected].