GraftSource Privacy Policy

Last updated: 24 August 2026

GraftSource is a local job-matching service connecting homeowners with tradespeople. This policy explains how GraftSource collects and uses personal information when you use the website, submit a job, apply as a trade member or purchase a trade membership.

Information we collect

We may collect:

• Homeowner information: name, email, phone number, postcode, job details, budget, timescale, preferred contact method and other information you provide.
• Trade information: business and contact details, trade, postcode, coverage area, availability, job preferences, insurance information, company information and other application details you provide.
• Membership and transaction information: information relating to trade membership, subscription status and payments. Payment information is processed through Shopify and relevant payment providers.
• Technical information: device, browser, IP address, cookies and website usage information collected through Shopify and website technologies.

How we use information

We use personal information to:

• Review homeowner enquiries and trade applications.
• Manually select suitable trades for jobs.
• Administer trade memberships.
• Communicate with homeowners and tradespeople.
• Provide customer service.
• Prevent misuse or fraudulent activity.
• Maintain business records.
• Meet legal and regulatory obligations.

Sharing homeowner job information

When a homeowner submits a job and agrees to sharing, GraftSource may manually provide the job information and homeowner contact details to up to five suitable tradespeople selected for that enquiry.

We may share the enquiry with fewer than five tradespeople where fewer trades are considered suitable.

The purpose of sharing this information is to allow those tradespeople to contact the homeowner regarding the job.

Legal bases for processing

Depending on the activity, we process personal information because:

• It is necessary to provide a service you requested.
• It is necessary to take steps before entering into or performing a contract.
• You have given your consent.
• We have a legitimate business interest that is not overridden by your rights.
• Processing is required by law.

Service providers

We use third-party service providers, including Shopify and relevant payment providers, to host and operate the website, process membership transactions and support the GraftSource service.

Information may also be disclosed where required by law, to protect users or the service, or in connection with a business reorganisation.

Data retention

We keep personal information only for as long as reasonably necessary for:

• Job matching.
• Membership administration.
• Customer service.
• Record keeping.
• Handling disputes.
• Fraud prevention.
• Legal, tax or accounting obligations.

Your rights

Subject to applicable UK data protection law, you may have the right to:

• Be informed about how your information is used.
• Request access to your personal information.
• Correct inaccurate information.
• Request deletion of your information.
• Request restriction of certain processing.
• Object to certain uses of your information.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent.

Manual decision-making

GraftSource's initial job matching is carried out manually.

We do not rely on solely automated decision-making to decide which tradespeople receive a homeowner enquiry.

Contact and complaints

For privacy questions, requests or concerns, contact GraftSource at:

chris20james02@gmail.com

If you are unhappy with how your personal information has been handled, you may also raise a complaint with the UK Information Commissioner's Office (ICO).

Changes to this policy

We may update this Privacy Policy as GraftSource develops.

The latest version will always be published on the GraftSource website.