1. Who We Are
SpainTrades (www.spaintrades.es) is operated by Stewart James Bartley (NIE: Z2539708F), registered at Calle Santiago 7, 29313 Villanueva del Trabuco, Málaga, Spain. For the purposes of the General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD), we are the Data Controller of personal data collected through this platform.
Contact for data protection matters: hello@spaintrades.es
2. What Data We Collect
From Clients (Homeowners)
- Name and email address
- Location/area in Málaga province
- Details of quote requests submitted
- Reviews submitted (held as Pending until moderated and approved)
- Platform messaging communications
- Technical data: IP address, browser type, device type, pages visited
From Tradespeople
- Name, business name, trade, and contact email
- Spanish CIF or NIF number
- Business address and operating area
- Professional photographs and portfolio images
- Business description and service information
- Voluntarily declared qualifications, certifications, and professional associations
- Subscription and payment information (processed by Stripe — card details are not stored by SpainTrades)
- Platform messaging communications
- Review responses submitted (held as pending responses until moderated and approved)
- Technical data: IP address, browser type, device type, pages visited
Voluntarily declared qualifications, certifications, and professional associations are held on the platform as provided by the Tradesperson. This information is not verified by SpainTrades.
3. How We Use Your Data
We use your personal data to:
- Create and manage your account on the SpainTrades platform
- Connect Clients with Tradespeople and facilitate quote requests
- Moderate and publish reviews (all reviews held as Pending until approved by SpainTrades administration)
- Moderate and publish Tradesperson responses to reviews (held as pending responses until approved)
- Notify the SpainTrades administration team when new reviews and responses are submitted for moderation
- Translate approved review text and approved response text into Spanish via DeepL
- Process subscription payments via Stripe
- Send transactional emails via Resend (account confirmation, quote notifications, review status notifications)
- Verify Tradesperson identity and CIF/NIF registration
- Calculate and display average ratings (from Published reviews only)
- Comply with legal and regulatory obligations
- Improve and maintain the SpainTrades platform
4. Legal Basis for Processing
- Contract performance — processing necessary to provide the SpainTrades service you have signed up for
- Legitimate interests — improving the platform, fraud prevention, platform security, review moderation
- Legal obligation — compliance with Spanish and EU law including tax obligations
- Consent — where we have obtained your explicit consent (e.g. marketing communications)
5. Data Sharing — No Third Party Commercial Use
SpainTrades does not sell, rent, or share personal data with any third party for that third party’s own commercial, marketing, or any other independent purpose.
Data is shared only as strictly necessary to operate the platform:
- Between Clients and Tradespeople — to facilitate introductions and quote requests
- Stripe — for payment processing only. SpainTrades does not store payment card details.
- Resend — for transactional email delivery
- Zoho — for CRM and email marketing where consent has been given
- Supabase — for secure database hosting within EU data centres
- DeepL — for translation of approved review text and approved Tradesperson response text into Spanish only
Your personal data is never shared with any third party for their own use. All service providers listed above are contractually bound to process data only as instructed by SpainTrades and in compliance with GDPR.
6. Reviews and Responses — Data Handling
Review data submitted by Clients is held with a status of Pending until approved by the SpainTrades administration team. Pending reviews are not visible to any platform user, including the Tradesperson. On approval, review text is processed by DeepL for Spanish translation.
Tradesperson responses are held as pending responses until approved by the SpainTrades administration team. On approval, response text is processed by DeepL for Spanish translation and published to the public profile.
If a Client updates a Published review, the review automatically reverts to Pending status, the translation is cleared, and the Tradesperson’s average rating is recalculated. The updated review is re-moderated before republication.
7. Data Retention
- Account data — retained for the duration of your account plus 2 years following closure
- Transaction and invoice records — retained for 7 years in accordance with Spanish tax law
- Communication and messaging records — retained for 2 years
- Review and response data — retained for the duration of the Tradesperson listing plus 2 years
- Pending and rejected review data — retained for 6 months from submission then deleted
- Technical/log data — retained for 12 months
- Self-declared qualification data — retained for the duration of the active listing plus 1 year
8. Your Rights Under GDPR
Under the GDPR and Spanish LOPDGDD, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate personal data
- Erasure — request deletion of your personal data (“right to be forgotten”), subject to legal retention obligations
- Restriction — request that we restrict processing of your data
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at hello@spaintrades.es. We will respond within 30 days.
You also have the right to lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD) — www.aepd.es
9. Cookies
SpainTrades uses only essential cookies required to operate the platform and maintain user login sessions. We do not use tracking or advertising cookies. See our Cookie Policy for details.
10. Data Security
SpainTrades implements appropriate technical and organisational security measures including:
- Encrypted data transmission (HTTPS/TLS)
- Secure database hosting via Supabase with EU data centres
- Access controls limiting data access to authorised personnel only
- Regular security reviews
11. International Data Transfers
Your data is stored and processed within the European Union. Where any approved processor operates outside the EU, appropriate GDPR safeguards are ensured.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The date of the most recent update is shown at the top of this document.
13. Contact Us
Email: hello@spaintrades.es
Website: www.spaintrades.es
Address: Calle Santiago 7, 29313 Villanueva del Trabuco, Málaga, Spain
Data Protection Authority: Agencia Española de Protección de Datos (AEPD)