Privacy policy
Last updated 4 November 2026
This policy explains what personal data Tape & Quote collects, why, who we share it with and the rights you have. It covers tradespeople who use Tape & Quote, the customers they send quotes to, and anyone who visits tapeandquote.co.uk.
1. Who we are
Tape & Quote is run by Stephen Polin (sole trader), of 17 Shimna Vale, Newcastle, Co. Down. You can contact us about privacy at hello@tapeandquote.co.uk.
2. Our two roles
The law treats us differently depending on whose data it is.
- Tradespeople's accounts, our interest list and website visitors. We decide how this data is used, so we are the controller.
- Customer data a tradesperson keeps in Tape & Quote, such as their customers' names, contact details, addresses, photos, answers, quotes and invoices. The tradesperson decides how it is used, so they are the controller and we are their processor. We only use it to run the service for them, under the data processing terms in our Terms of service.
If you are a customer of a tradesperson (for example you sent photos or accepted a quote), the tradesperson is responsible for your data and you should contact them first. If you contact us, we will pass your request on to them.
3. What we collect
If you use Tape & Quote for your business
- Your name, business name and email address, given when you sign up.
- Business details you add, such as your logo, phone number, address, VAT number, payment terms, trades and price list.
- Billing details: your subscription status and Stripe customer reference. Stripe holds your card details; we never see them.
- If you take deposits, your Stripe Connect account reference and whether payments are switched on. Stripe collects the identity and bank details it needs to pay you.
- Records of when you log in, to keep your account secure.
If you are a tradesperson's customer
What the tradesperson enters or asks you for: usually your name, phone number, email, address, photos of the job, your answers to their questions, quotes, invoices, notes and whether you have paid. When you accept a quote we record the name you typed and the time. If you pay a deposit or invoice, Stripe handles your card details; we only learn whether the payment went through.
If you register your interest
Your name, email, trade, business name, mobile number, area, how you heard about us and whether you would like to be a founding user. We also keep a scrambled (hashed) copy of your IP address for an hour or so, to stop automated spam.
Everyone who visits the site
Like most websites, our hosting provider records technical details such as IP address, browser type and the pages requested, to keep the site running and secure.
4. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Creating your account, running the app, sending log-in codes and taking your subscription | Contract: we need it to provide the service you signed up for |
| Service emails, such as a trial ending or a failed payment | Contract |
| Keeping the service secure, stopping spam and fraud, fixing faults | Legitimate interests: keeping the service safe and working for everyone |
| Keeping invoices and payment records | Legal obligation: tax and accounting law |
| Emailing our interest list when we open, and occasional product news | Consent (interest list) or legitimate interests (news to existing users); you can opt out any time |
| Processing customer data for tradespeople | On the tradesperson's instructions; they choose the lawful basis |
We do not sell personal data, and we do not use it for advertising.
5. Who we share it with
We use these suppliers (processors) to run Tape & Quote. Each one only uses the data to provide its service to us, under a contract that requires it to protect the data.
| Supplier | What for | Where |
|---|---|---|
| Supabase | Database, photo storage and sign-in (including the log-in code emails). | UK (London data centre) |
| Cloudflare | Hosts and serves the website and app, protects it from attacks, and runs the Turnstile spam check on forms. | Global network, including the USA |
| Stripe | Takes subscription payments, and deposits and invoice payments through Stripe Connect. Card details go straight to Stripe and never reach us. | Ireland, UK and the USA |
| Brevo | Sends our emails, such as log-in codes. | EU (France) |
Stripe is also a controller in its own right for the checks it must do by law (such as identity and fraud checks), under its own privacy policy. We may also share data if the law requires it, or if the business is sold (in which case this policy continues to apply).
6. Transfers outside the UK
Some suppliers process data outside the UK, mainly in the EU and the USA. Where they do, the transfer is covered by UK adequacy regulations (for the EU and for US companies certified under the UK Extension to the EU-US Data Privacy Framework) or by the ICO's International Data Transfer Addendum to standard contractual clauses.
7. How long we keep it
- Account and customer data: while your account is open. If you ask us to close it, we delete it within 90 days, except what we must keep by law. You can export or delete individual customers yourself at any time.
- Invoices and payment records: 6 years, as UK tax law requires.
- Interest list: until we open sign-ups and have let you know, or sooner if you ask to be removed.
- Hosting and security logs: a short period, usually no more than 30 days.
8. Your rights
Under UK data protection law you have the right to:
- get a copy of your personal data;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it, including any marketing;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
Email hello@tapeandquote.co.uk and we will reply within one month. If you are a tradesperson's customer, please contact the tradesperson first (see section 2). If you are unhappy with how we have handled your data, you can complain to the ICO at ico.org.uk or on 0303 123 1113, though we would like the chance to put it right first.
9. Cookies
We only use cookies that are needed to make the site work, so we don't ask for consent or show a banner.
| Cookie | Set by | Why | Lasts |
|---|---|---|---|
| tq_session | Tape & Quote | Keeps you logged in | 90 days, or until you log out |
| Cloudflare security cookies (such as __cf_bm, cf_clearance) | Cloudflare | Tell people from bots and protect the site and forms from attacks | Up to a year; most for 30 minutes |
When you pay, you do so on Stripe's own pages, which set Stripe's cookies under Stripe's policy. We do not use analytics or advertising cookies. If that changes, we will update this policy and ask for your consent first.
10. Keeping data safe
Data is encrypted in transit and at rest, photos are kept in private storage that only the business and that job's customer can open, each business can only see its own data, and logging in needs a one-time code sent to your email. If a breach puts your data at risk, we will tell you and the ICO as the law requires.
11. Children
Tape & Quote is a business tool for people aged 18 or over. We do not knowingly collect data from children.
12. Changes to this policy
We will post any changes here and update the date at the top. If a change matters, we will email account holders before it takes effect.
13. Contact
Stephen Polin, 17 Shimna Vale, Newcastle, Co. Down. Email: hello@tapeandquote.co.uk.