How we look after your details

Who we are

WhatTrade AI is a trading name of Napkin Group Limited, a company registered in England and Wales with company number 10338310, whose registered office is at Park Mill Burydell Lane, Park Street, St. Albans, England, AL2 2EZ. In this policy, “we”, “us” and “our” mean Napkin Group Limited. We are the controller of the personal information described here.

You can contact us about your information through our contact form, by email at hello@whattradeai.com or by post to Napkin Group Limited, Park Mill Burydell Lane, Park Street, St. Albans, England, AL2 2EZ.

What this website is for

WhatTrade AI is preparing to launch a construction labour service, starting with general construction labourers. Registration is open across the United Kingdom, and our initial focus is Hertfordshire and North London. It will be a labour-matching service: construction companies will ask for labourers, and we will match them with labourers for whom the work is realistic to get to. At this stage the website only collects registrations of interest from construction companies and from labourers, so that we can contact them when the service opens and plan it properly. We do not take bookings, offer work or make payments through this website.

The information we collect

If you register as a construction company: company name, contact name, email address, telephone number, company postcode, the areas where you need labourers, the number of labourers you typically need, how often and when you expect to need them and, if you choose to give it, any additional information.

If you register as a labourer: full name, email address, mobile number, home postcode, your general construction labouring experience, your CSCS card status as you describe it, when you could start work (and the date, if you give one), the hours you are looking for, the longest one-way journey you would accept, the areas you would work in and how you would travel. If you choose to give them, we also record the kinds of labouring work you have done, the days you prefer to work, the hourly or daily rate you expect, the most you would spend on travel in a day, whether you would travel further for higher pay or a longer job, how you would prefer to be paid, how you heard about us, and any additional information.

If you use the contact form: your name, email address, the type of enquiry, your message and, if you choose to give it, a telephone number.

We also record the date and time of your registration, the choices you made about how we may contact you, the version of this policy you were shown, the dates you last confirmed your availability and your details and how you did so (for example through your private link), the date you replied if we have contacted you and, if you arrived through one of our own links (for example from a social media post), which link it was. If another website linked you to a registration form, we record the kind of website it was (for example a search engine, a social network or a job site) but not its address. We do not use cookies or store anything in your browser to do this. We collect this information directly from you.

We do not ask for identity documents, proof of your right to work, bank details, National Insurance numbers, health information or any other sensitive information at this stage, and we ask you not to put any in the free-text boxes. Checks of that kind will only be carried out later, with a separate explanation, if you are offered work.

You do not have to give us any information, but we cannot add you to the launch list without the details marked as required.

How we use your information, and our lawful basis

• To contact labourers about their registration and the service. If you register as a labourer we contact you, by email, phone, SMS or WhatsApp, about: your registration; checking that the details you gave us are right; whether you are currently available, and where you would work and how far you would travel; work that may suit you, when it is available; and important changes to the service. Some of these messages may be sent automatically, for example a request to confirm that you are still available. They are what you are registering for. News and offers are separate, and you do not have to accept them to register. We do this on the basis of the consent you give when you register. You can withdraw it at any time by deleting your registration, which you can do yourself through your private link.
• To contact companies about the launch. If you register a company we use your details to tell you when WhatTrade AI becomes available in your area and how to start using it, by email, phone, SMS or WhatsApp. We do this on the basis of the consent you give when you register.
• To plan the launch and prepare the matching service. We look at where labourers live, where they will work, how far they will travel and when they are available, and where companies need labourers, to decide where and when to open and so that, when the service opens, we can suggest work that is realistic for each labourer to get to. Your home postcode is used to work out which areas you could reach and, later, journey times and costs. We also count how registrations reached us, so that we know which of our own notices and links are useful. This is in our legitimate interests in preparing the service you have asked to hear about.
• To confirm your registration or acknowledge your message. We may email you a confirmation, which for labourers includes a private link for updating or deleting your details, or an acknowledgement that we have received a message you sent us. This is necessary to act on your request.
• To send news and offers, only if you opt in. If you tick the separate marketing box we may send you occasional news and offers about WhatTrade AI. This is based on your consent. It is optional, and you can withdraw it at any time without affecting your place on the launch list.
• To reply to messages. If you contact us, we use your details to respond, on the basis of your consent and our legitimate interest in answering enquiries.
• To keep the website secure. We use technical measures to prevent spam and misuse of our forms and to protect the information we hold, on the basis of our legitimate interests.

We do not sell your information. We do not currently make decisions about you by automated means. If the service uses automated tools to match labourers with work when it launches, we will explain that to you before it applies to you.

When the service opens

The details you give us now are used to prepare a labour-matching service. When it opens, we will contact labourers on the launch list to ask whether they would like us to look for work for them, and construction companies to ask whether they would like to use the service. Before we look for any work for a labourer, we will give them written terms and a Key Information Document to agree, and an updated privacy notice explaining how their information will be used to match them with work and what will be shared with a construction company. We will not pass a labourer’s details to any construction company before then. If you would rather not hear from us, you can remove yourself from the list at any time.

Who we share it with

Your information is stored with our hosting provider, Railway (railway.com), which processes it on our behalf and only on our instructions, under a data processing agreement. When you register or send us a message, a notification is emailed to our business mailbox using Resend (resend.com), which processes it on our behalf. A notification about a registration is a short summary and does not contain your email address, phone number or postcode. A notification about a contact form message contains your name, your email address, your telephone number if you gave one, and the message itself, so that we can reply to you. The same provider delivers any confirmation email we send you. Our business mailbox is provided by Google Workspace, which stores the emails we receive and send on our behalf. During this pre-launch period we do not share your details with construction companies, labourers or anyone else for their own use.

We may disclose information where the law requires us to.

Where your information is kept

Registration data is stored in the Netherlands (Railway’s EU West region, Amsterdam). Our hosting provider is based in the United States, and its staff may access data from outside the United Kingdom where that is necessary to run or support the service. Where that happens, the transfer is protected by the safeguards in our data processing agreement with the provider: the UK extension to the EU-US Data Privacy Framework (the “UK-US data bridge”) or, where that does not apply, standard contractual clauses with the UK addendum. Emails are handled by our email providers, which may process them outside the United Kingdom, including in the United States, under the same kinds of safeguard.

How long we keep it

• Registrations: until you ask us to remove them, or for up to 24 months from the date you registered, whichever comes first. Before that period ends we will either ask whether you still want to hear from us or delete your details. If you go on to use the service, we will tell you how long your information is kept for that purpose.
• Contact form messages: for up to 12 months, including the copy in our mailbox.
• Marketing: until you withdraw your consent.

Updating or deleting your details, and withdrawing consent

Labourers: when you register we show you a private link. Opening it lets you confirm or change your availability, change any of your other details, switch marketing on or off, or delete your registration yourself, at any time. Keep the link to yourself. If you have lost it, see update or delete your details.

Everyone: you can withdraw your consent to marketing, ask us to correct your details, or ask us to remove you from the launch list and delete your details, at any time. The quickest way is our contact form: choose “Remove me from the launch list or stop marketing” and give the email address or mobile number you registered with. You can also write to us at Napkin Group Limited, Park Mill Burydell Lane, Park Street, St. Albans, England, AL2 2EZ. Every marketing message we send will also tell you how to stop them. We will act on your request without undue delay and in any event within one month.

Your rights

Under UK data protection law you have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw your consent at any time. Using these rights is free of charge.

If you are unhappy with how we have handled your information, please tell us first using the contact details above so that we can put it right. We will acknowledge your complaint within 30 days and respond without undue delay. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies

This website does not use advertising or tracking cookies. See our cookie information for details.

Changes to this policy

We will update this policy before WhatTrade AI launches and whenever the way we use your information changes. The date at the top of the page shows when it was last updated.