Privacy notice
Granted & Ready ("we", "us") is the controller of the personal data described here. Contact: [email protected].
This notice has three parts. Read the one that applies to you:
- Homeowners and residents — if your planning application appears in our data.
- Tradespeople — our customers, people who asked for a sample, and businesses we contact.
- Website visitors.
1. Homeowners and residents
Where we got your information
Councils must keep a public register of planning applications and decisions, and they publish it on their websites. We collect approved householder applications (for example extensions, loft conversions and porches) from the registers of councils in Greater Manchester and Lancashire. We did not get this information from you, so this section is the notice we must give under Article 14 of the UK GDPR.
What we hold
- The address of the property, and its postcode and approximate map position.
- The council's reference number, what was applied for, and the dates and decision.
- The name and business details of the agent or architect named on the application.
We do not collect or store the applicant's name, and we never download drawings or documents. If an application mentions health, disability or care needs, or is for a children's home or supported housing, we leave it out completely and keep no address for it.
Why we use it, and our lawful basis
We tell local tradespeople (builders, roofers, electricians and so on) which properties have planning approval for building work, so they can offer their services. Our lawful basis is legitimate interests (Article 6(1)(f) UK GDPR): our interest in running this service, and tradespeople's interest in finding relevant local work, balanced against your rights. We have written down that balancing test (a "legitimate interests assessment") and you can ask for a summary.
Who we share it with
- We never give your address to tradespeople. Subscribing tradespeople see only the postcode area (for example "M20"), the council, the type of work, the month it was approved and a rough job size. They don't see your address, street, the council reference or any link to it.
- Letters. If a tradesperson wants to write to you, we print and post their letter to "The Owner/Occupier" ourselves, with this notice and our opt-out inside. (Our letters service is not yet running; until it is, nobody writes to you using our data.)
- If you contact a tradesperson yourself, for example after a letter, what you give them is theirs to use for your enquiry.
- Service providers who host or process data for us (listed in our records; none are allowed to use your data for their own purposes).
How long we keep it
Up to 18 months after the council's decision. After that we delete the address (we may keep anonymous totals, such as "40 extensions approved in Stockport in March").
Your rights — including stopping this completely
You have an absolute right to object to your information being used for direct marketing. To opt out, use any of these. We act within 2 working days, and your address will not go to any customer again: - Online: https://grantedandready.co.uk/optout - Email: [email protected] (subject "Opt out" and your address or planning reference)
When you opt out we also tell any tradesperson who already received your address to stop using it.
You can also ask to see what we hold (access), ask us to correct it, or ask us to delete it. We reply within one month.
Complaints
You have the right to complain to us about how we use your information: email [email protected] or see our complaints procedure (https://grantedandready.co.uk/legal/complaints). We acknowledge every complaint within 30 days (usually within 2 working days), look into it, and tell you the outcome. If you are still unhappy you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
2. Tradespeople: customers, sample requests and prospects
What we hold
Your business name, your name, phone number, email, trade, the area you work in, whether you are a sole trader, partnership or limited company, notes from our conversations, your consent choices, and — if you subscribe — your billing records (handled by our payment provider; we never see full card numbers) and how you use the service (lists opened, leads marked "contacted" or "won"). If you create an online account we also hold your login email, a securely scrambled (hashed) form of your password that nobody can read, your agreement to our terms, and security records of log-ins, password resets and the device/IP address used, to protect your account. If you tell us another trade sent you, we note their business name or number so we can give you both the referral month.
Where it comes from
From you (calls, forms, WhatsApp, email), from Companies House (for limited companies), and from public business listings you have published (for example your website or Facebook page).
Why, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Providing the service you signed up for, billing, support | Contract |
| Keeping records for tax and accounts | Legal obligation |
| Contacting businesses about our service by phone (after checking TPS/CTPS), in person, or by B2B email to limited companies | Legitimate interests |
| Sending marketing emails or WhatsApp messages to sole traders and partnerships | Your consent (you can withdraw it at any time) |
| Improving the service and preventing misuse | Legitimate interests |
| Keeping your account secure (log-in records, blocking repeated wrong passwords) | Legitimate interests |
We never make automated or recorded marketing calls. We only record a call if we tell you first and you agree.
Who we share it with
Our service providers (payments, email, WhatsApp, hosting, backups and other software providers), our accountant, and authorities where the law requires. Some providers are outside the UK; where they are, we rely on UK adequacy regulations or approved contract clauses.
How long we keep it
Customers: for as long as you subscribe, then 6 years for tax records (other data deleted 12 months after you leave, or after 12 months without logging in for a free account). Prospects who don't sign up: 24 months from our last contact, or straight away if you ask us not to contact you again (we keep a minimal "do not contact" note so we don't contact you again by mistake). Account security records (log-in and reset attempts) are kept for 12 months.
Your rights
Access, correction, deletion, restriction, objection (including an absolute right to stop marketing), portability, and withdrawing consent. Members can download a copy of their data or delete their account at any time in Settings › Your data. For anything else, contact [email protected]; we reply within one month. Complaints: as above, or to the ICO.
2A. Homeowners who ask us to find a trade
What we hold
If you message us (for example on WhatsApp) or post a job on our website (or email us the job form): your first name, email and/or phone number, your postcode, and what you tell us about the job (a title, a description, how soon and a rough budget). If you leave a review: your score, your words and your first name.
Why, and our lawful basis
To find you suitable local trades, which you asked us to do (legitimate interests, and steps you've asked us to take). We only pass your name, number and job to a trade after you've said yes, and to no more than 3 trades (5 for jobs posted on the website). Each trade may use your details only for your job. When you post a job and tick to agree, we show what you need and your postcode district (like M20) on our public jobs page, and your title and description to checked trades signed in to their job board. We never show your name, number, email or full postcode until you choose a trade, and we record that choice. Reviews are published with your first name and postcode area only, and only for a job we passed on.
Who we share it with
The trades you choose (up to 3, or 5 for jobs posted on the website). WhatsApp (Meta) carries the messages you send us. Our hosting and backup providers.
How long we keep it
Your name, number and job details are deleted 12 months after you contacted us; we keep the type of job and area as anonymous counts. Published reviews stay until you ask us to remove them.
Your rights
As in section 1: access, correction, deletion, and stopping at any time. Message or email [email protected].
2B. Businesses listed in "find a trade"
We list trade businesses from the public Companies House register (Open Government Licence) and from OpenStreetMap (© OpenStreetMap contributors, Open Database Licence): the business name, trade, postcode district, year it started, and the phone number and website a business publishes. We never publish registered addresses. Our purpose is to help homeowners find local trades (legitimate interests). Some company names include a person's name; if that's you and you'd like the listing removed, email [email protected] and we'll take it off for good. For boiler and gas jobs we show listed heating firms with a reminder to check their Gas Safe registration.
If you apply to be listed with our green stamp
We hold what you give us: your business details, your name, email and mobile, the jobs and areas you cover, your photos, your insurance, Gas Safe and scheme details, and the documents you upload (insurance certificate, photo ID, registration cards). We use them to check you're a genuine, insured business (legitimate interests, and steps you've asked us to take), and to run your profile and send you jobs. Documents are private: only we see them, and they're never published. We delete your photo ID as soon as we've checked it, and never keep it more than 30 days; we keep a note that we saw it. If we can't list you, we delete all your documents straight away. Insurance and registration details are kept while you're listed, so we can remind you before they run out. You can delete your account at any time in Settings.
3. Website visitors
We use Cloudflare Web Analytics, which counts visits and the pages viewed without cookies and without identifying you. We do not use advertising cookies. If you fill in a form, we use what you enter as described in section 2.
Version 1.6 · effective 12 October 2026 · Granted & Ready