Privacy notice
How we handle personal data under UK GDPR.
This notice explains how Aidan Stevenson trading as Trade Window (“we”, “us”) handles personal data when you use our site or buy our services. We follow UK GDPR and the Data Protection Act 2018.
Who we are
Controller: Aidan Stevenson trading as Trade Window.
Contact: Tradewindowgb@gmail.com
What we collect
- Identity and contact details you give us (name, email, business name, town, trade, optional Google profile link)
- Payment and billing details processed by Stripe (we do not store full card numbers)
- Messages you send us by email
- For Rex and related services: public Google review text, reviewer display names, star ratings, reply history and related Google Business Profile information needed to monitor and reply
- Basic technical data such as IP address and browser type if our hosting provider logs it for security
Why we use it
- To send your free snapshot and deliver paid audits or review reply packs (contract / steps to enter a contract)
- To provide Rex, Webster, Atlas and memberships you have bought — including processing reviewer names and review text so we can draft and post replies you have authorised (contract)
- To email occasional tips if you opted in (consent — you can withdraw anytime)
- To keep records needed for tax and accounting (legal obligation)
- To protect the site against spam and abuse (legitimate interests)
Who we share it with
- MailerLite — email list and snapshot sign-ups (processor)
- Stripe — payment processing
- Netlify — website hosting
- Google — when you grant us Manager access, we use Google’s Business Profile tools to read reviews and post replies you have authorised
We do not sell your data. Providers may process data outside the UK under appropriate safeguards.
How long we keep it
Marketing contacts: until you unsubscribe, then we suppress the email so we don’t contact you again. Customer and payment records: normally up to 6 years for accounting. Snapshot requests that never become customers: up to 24 months unless you ask us to delete sooner. Rex working copies of review text: while your subscription is active and for a short period after cancellation for handover and dispute handling, then deleted or minimised unless we must keep them for legal reasons.
Your rights
You can ask for access, correction, deletion, restriction, objection, or a copy of your data (portability where it applies). Email Tradewindowgb@gmail.com. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Children
Our services are for businesses. We do not knowingly collect data from children.
Last updated 2 November 2026