Privacy Policy
Last updated: 1 May 2026
1. Who we are
besttrades.wales is operated by Choros Ltd. We are the data controller for personal data processed through this website. Contact us at hello@besttrades.wales.
2. What data we collect
Consumers (people looking for a tradesperson)
- Name, email address, phone number
- Postcode and job description
- Urgency and trade category selected
- IP address, browser type, and referrer URL (automatically)
- Review content, if you submit a review
- GDPR consent timestamp
Trade businesses
- Publicly available information from Companies House (business name, registered address, company number, incorporation date, SIC codes)
- Contact details you provide if you claim or register your listing
- Profile information you add (description, photos, accreditations)
- Lead notification preferences and billing details (premium subscribers)
3. How we use your data
Consumers
| Purpose | Lawful basis |
|---|---|
| Routing your enquiry to one or more local tradespeople | Consent (collected at form submission) |
| Sending you a review request 45 days after job completion | Legitimate interest (improving the directory) |
| Fraud prevention and legal compliance | Legal obligation / Legitimate interest |
Trade businesses
| Purpose | Lawful basis |
|---|---|
| Displaying your publicly available information in the directory | Legitimate interest (public register data) |
| Sending lead notifications (claimed/premium listings) | Contract performance / Consent |
| Billing and subscription management | Contract performance |
4. Third-party sharing
We share consumer personal data (name, phone, email, postcode, job description) with trade businesses for the sole purpose of responding to your enquiry. By submitting a lead request, you consent to this sharing. We do not sell your data to third parties.
We also use the following sub-processors:
- GoHighLevel — CRM and email/SMS delivery (US, EU-US Data Privacy Framework)
- Supabase — Database hosting (EU region)
- Vercel — Website hosting and edge delivery (EU region)
- Stripe — Payment processing for premium subscribers (US, EU-US DPF)
5. Retention
- Consumer enquiry data: retained for 12 months from submission, then deleted from our systems. You may request earlier deletion at any time.
- Reviews: retained indefinitely while published. Deleted on request.
- Business listing data (from public records): retained while the business is listed. Removed within 5 business days of a removal request.
- Billing records (premium subscribers): retained for 7 years as required by HMRC.
6. Your rights (UK GDPR)
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your personal data ("right to be forgotten")
- Object — object to processing based on legitimate interest
- Restrict — ask us to restrict processing in certain circumstances
- Portability — receive your data in a machine-readable format
- Withdraw consent — at any time, for processing based on consent
To exercise any right, email hello@besttrades.wales. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
7. Cookies
We use only essential cookies required for the site to function (session management). We do not use analytics cookies or advertising cookies. No cookie consent banner is required.
8. Changes to this policy
We will update this page when our practices change and update the "last updated" date above. Material changes will be notified to registered business accounts by email.