Privacy notice

Last updated 13 November 2026

This notice explains how DTD Consultancy Limited (“DTD”, “we”) handles personal information when you visit this website or contact us. We are the controller of that information under the UK General Data Protection Regulation and the Data Protection Act 2018.

Who we are

DTD Consultancy Limited, registered in England and Wales, company number 13171306. Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. You can reach us about privacy at contact@dtdconsultancy.com.

Visiting this website

This website does not use cookies, analytics, advertising or tracking of any kind. Its only forms are the enquiry and waitlist forms described below. All fonts, scripts and images are served from our own site, so your visit is not shared with third parties such as Google.

Like any website, our hosting provider automatically records basic technical information when pages are requested (your IP address, browser type, the page requested and the time). This is used only to deliver the site and keep it secure, and is kept for a short period by the host. Our lawful basis is our legitimate interest in running a secure website.

DTD Trade-Ops invites

The DTD Trade-Ops app keeps your records on your own device; we do not receive them. If you use “Invite & earn”, the app sends our server a random ID for your installation so it can give you an invite code. When someone installs the app from an invite, their app sends its own random ID, the invite code and its number. We also keep a one-way scrambled form of the internet address the invite was accepted from, to stop misuse. We never receive the names, phone numbers or email addresses of the people you invite: they stay on your phone. We use this only to count installs and award free months of Pro (our legitimate interest in running the offer), and delete it two years after the last activity on an invite code.

Once a day, an installed copy of the app also sends our server its random ID and the kind of device it is on (Android, iPhone or computer), so we can count how many people have installed the app and how many still use it. Nothing else is sent with it. We delete an installation’s ID two years after it last reported in.

Subscriptions bought through Google Play or the App Store

If you subscribe to DTD Trade-Ops Pro, DTD Manager-Ops or DTD ReceiptVault in the Google Play or App Store (iPhone) version of the app, Google or Apple takes the payment under their own terms and privacy policy; we never see your card or account details. To switch the subscription on, the app sends our server the purchase reference that Google or Apple gave it and which subscription it is. Our server asks Google or Apple whether that subscription is active and until when, and sends the app back a licence or subscription key for that period. It sends nothing else: no receipts, records, names or device details. We do not store the purchase reference or the answer. Google and Apple send us the usual sales reports for our app, which we use for our accounts (a legal obligation).

Subscriptions bought on our website

If you subscribe to DTD Trade-Ops Pro or DTD ReceiptVault on this website or in the web version of the app, Stripe takes the payment under its own terms and privacy policy; we never see your card details. So that the subscription switches on at once, the app adds a random purchase code to the payment link, and Stripe stores that code with the payment (as its “client reference”). Our server then receives the checkout reference Stripe hands back after payment, or that purchase code, asks Stripe whether the subscription is paid and until when, and sends back a licence or subscription key for that period. It does not store your details, the checkout reference or the purchase code. The email address on a DTD Trade-Ops Pro licence key is the one you gave at the Stripe checkout. To stop misuse, our server keeps a keyed, one-way scrambled form of your internet address for about 20 minutes, to limit how often it can be asked, and then deletes it. ProcuraOS licences are bought the same way, but as they are for organisations and cover several users, we keep a record of each one (organisation, email address, number of users, dates, the key and the Stripe and purchase references) with our client records, so that we can issue renewals and extra users. Stripe keeps its own record of each payment, which we use for our accounts (a legal obligation). Our lawful basis is providing what you have paid for (our contract with you) and our legitimate interest in preventing misuse.

DTD Trade-Ops community

The app’s Community tab is a discussion board for people who use DTD Trade-Ops. Reading it sends our server nothing about you. If you post, reply or report something, we store the community name and trade you choose, what you write, when you wrote it, and a random ID for your installation that lets only your app change or delete your posts. Nothing else from the app is sent. Your name, trade, posts and replies can be read by everyone who uses the app. Reports are recorded against the reporter’s community ID so each person can report a post only once, and are seen only by our moderator.

We use this to run the community and keep it safe: showing posts, hiding reported posts, and blocking accounts that break the community rules (our legitimate interest in providing and moderating the service). You can delete any of your posts or replies at any time, and “Leave” in the Community tab deletes your community name, posts, replies and reports straight away. Otherwise we keep them while the community is running.

DTD Manager-Ops app

DTD Manager-Ops (on the web, and the Android app on Google Play) keeps your organisation’s records on your own device: your team, jobs, clients, quotes, invoices, pay rates and finance figures. We do not receive them. There is no account to create, and the app uses no cookies, analytics, advertising or tracking.

When you send work or messages to your team, the app locks them with end-to-end encryption on your device before passing them through a relay server to your tradespeople’s DTD Trade-Ops app. Only your device and theirs can unlock them. Your organisation can run its own relay; if it uses the one we host (relay-pilot.dtdconsultancy.com), that relay stores only what it needs to deliver the messages: random IDs and public keys for each connected device, single-use invite codes, which ID sent a message to which, when, and the internet address each request comes from. It cannot read the jobs, names, addresses, prices or messages inside them. Undelivered messages are deleted after 14 days, delivery receipts after 30 days, and a device’s connection when the manager removes that person or the tradesperson leaves.

For the weather on jobs and on the Today screen, the app sends the first half of a postcode (for example “CM1”) to postcodes.io to find the area, and that area’s map position to Open-Meteo for the forecast. If you choose “Use my location” for the office weather, your device’s map position is sent to Open-Meteo for the forecast; it is not sent to us. Voice dictation, where you use it, is handled by your phone’s own speech service.

Because we hold no records from the app, we cannot restore or delete them for you: use Backup & data in the app, and “Reset this device” there, or uninstalling the app removes everything from your device. Our lawful basis for running the relay is our legitimate interest in providing the service you asked for.

Enquiry and waitlist forms

If you send an enquiry or join a waitlist using a form on this website, we receive your name, email address, what your enquiry is about and your message, plus your company and phone number if you choose to give them. We also record the page you sent it from and the time, and the internet address it came from so that we can limit misuse; a hidden field and the time taken to fill in the form help us filter out automated spam. We also count, per product and per day, how many times a form is seen, started and sent. These are plain totals: no cookies, no internet address and nothing that identifies you are stored with them. The form is processed by our own systems hosted on Cloudflare and stored in our enquiry records.

We use this only to reply to you, to tell you when a product you joined the waitlist for opens, and, if we go on to work together, to set up that engagement. Our lawful basis is our legitimate interest in responding to enquiries, or taking steps towards a contract at your request. We keep enquiries for up to two years where no engagement follows. You can ask us to delete yours at any time.

When you email us

If you email us, we receive your name, email address and whatever you choose to tell us. We use it to reply and, if we go on to work together, to set up and run that engagement. Our lawful basis is our legitimate interest in responding to enquiries, or taking steps towards a contract at your request.

We keep enquiry correspondence for up to two years where no engagement follows, and client records for as long as needed for the engagement and our legal, tax and accounting obligations (normally six years after it ends).

Sharing

We do not sell personal information. We share it only with service providers who support our business (such as email and website hosting), under contracts that require them to protect it, or where the law requires us to. Where a provider processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement.

Your rights

You have the right to ask for a copy of your personal information, to have it corrected or deleted, to restrict or object to how we use it, and to data portability. To use any of these rights, email contact@dtdconsultancy.com. We will respond within one month.

If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.

Changes

We may update this notice. The date at the top shows when it last changed.