Privacy Policy

Last updated: 21 February 2026

TL;DR — The Short Version
  • We don't sell your data. Ever.
  • Stripe handles payments — we never see your full card number.
  • Plausible Analytics — cookie-free, privacy-first. No personal tracking.
  • Call tracking is transparent — we track phone clicks and call duration to prove our value.
  • You can request deletion of your data anytime.
  • Essential cookies only — auth/session, no advertising.

Who We Are (Data Controller)

Melling Web Studios Ltd trading as GetMyTradeOnline ("GMTO", "we", "us", or "our") is the data controller for personal data collected through our website and services.

Company registered in England and Wales.

What We Collect

Information you provide

  • Account info: Name, email, phone, business name
  • Business details: Services, areas covered, certifications (e.g., Gas Safe number)
  • Payment info: Processed by Stripe — we don't store card numbers
  • Communications: Messages via forms, email, WhatsApp

Collected automatically

  • Usage data: Pages visited, time spent, clicks
  • Device info: Browser type, OS, IP address
  • Analytics: Via Plausible (no cookies, no personal tracking)
  • Phone clicks: Which CTAs generate calls (via GA4 events)

Call Tracking (The Full Stack Growth System)

Our 90-day proof guarantee requires us to track and verify calls. This is how we prove value before you pay.

What we track (phone click method)
  • Phone click events: Which page, which button, timestamp
  • Source attribution: Did they come from Google, direct, etc.
  • No call content: We don't record or listen to calls
What we track (Twilio tracking number method)

If you opt for a Twilio tracking number (forwards to your real number):

  • Call duration: How long the call lasted (20+ seconds = "verified")
  • Call timestamp: When the call occurred
  • Caller number: For attribution only (not shared)
  • Call recordings: Only if you explicitly opt in (disabled by default)
Why we track calls
  • Performance: To track your monthly call average (50/75/100+ bands)
  • ROI: To show you which pages generate calls
  • Optimisation: To improve your site over time

You choose the tracking method. Twilio gives more data; phone clicks are simpler and keep your branded number.

How We Use Your Data

  • Build and host your trade website
  • Track calls/enquiries to prove ROI (90-day guarantee)
  • Process payments and manage subscriptions
  • Communicate about your account and support
  • Improve and optimise our platform
  • Send marketing (only with consent — opt-out anytime)
  • Comply with legal obligations

Lawful Basis (UK GDPR)

Contract

Processing necessary to provide our services (building your website, tracking calls for proof, hosting, support).

Legitimate Interests

Analytics to improve our services, fraud prevention, security measures, call tracking for ROI demonstration.

Consent

Marketing emails — you can withdraw consent anytime via unsubscribe link. Call recordings (if enabled) require explicit opt-in.

Legal Obligation

Keeping records for tax/accounting purposes, responding to lawful requests.

Our Data Processors

We use these third-party services to operate our platform:

Stripe
Payment processing
US (SCCs)
Fly.io
Hosting & database
UK/EU
Plausible
Privacy-first analytics
EU
Twilio
Call tracking & forwarding
US (SCCs)
Google
GA4, GBP integration
US (SCCs)
Cloudflare
CDN & security
Global (SCCs)

Data Sharing

We never sell your personal data.

We may share data with:

  • Service providers: As listed above, under contract
  • Your dashboard: You see your own call/analytics data
  • Legal requirements: When required by law or court order
  • Business transfers: In connection with a merger or acquisition

Security Measures

  • HTTPS/TLS: All data encrypted in transit
  • Encrypted database: PostgreSQL with encryption at rest
  • Access controls: Role-based access, authenticated endpoints
  • Regular backups: Daily automated backups
  • Security updates: Dependencies regularly patched

Data Retention

We keep your data for as long as your account is active or as needed to provide services.

Account data

Kept while subscription active + 30 days after cancellation

Call tracking data

Kept for 2 years for analytics, then aggregated/anonymised

Financial records

Kept 7 years (UK tax requirements)

Call recordings

If enabled: 90 days, then auto-deleted

Your Rights (UK GDPR)

Access
Get a copy of your data
Rectification
Correct inaccurate data
Erasure
Request deletion
Restriction
Limit how we process
Portability
Export your data
Object
Object to processing
Withdraw consent
For marketing anytime

To exercise any right, email hello@getmytradeonline.co.uk. We'll respond within 30 days.

Cookies

We use minimal, essential cookies only:

CookiePurposeDuration
next-auth.session-tokenAuthenticationSession
__cf_bmCloudflare bot protection30 min

We don't use advertising or third-party tracking cookies.

Plausible Analytics is cookie-free and does not track individuals.

International Transfers

Some of our processors are based outside the UK (primarily US). We ensure transfers are protected by:

  • Standard Contractual Clauses (SCCs) — EU-approved data transfer mechanisms
  • UK International Data Transfer Agreement (UK IDTA) addendum where required
  • • Processors with SOC 2 / ISO 27001 certifications (Stripe, Twilio, Cloudflare)

Complaints

If you're unhappy with how we handle your data, please contact us first at hello@getmytradeonline.co.uk.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Helpline: 0303 123 1113

Contact Us

For questions about this policy or your data:

Children: Our services are not directed to individuals under 18. We do not knowingly collect data from children.

Changes: We may update this policy. We'll notify you of significant changes by email or through the platform.

Powered by GMTOGetMyTradeOnline.co.uk