Privacy notice
What Scope does with personal data, whose it is, and how to get it back or get rid of it.
Who is responsible
Scope is a service of Welch Marketing Ltd, a company registered in England and Wales, company number 13328901. Registered office: Fifth Floor, 167-169 Great Portland Street, London, W1W 5PF. We are the data controller for the information described under "Your data" below.
For anything in this notice, write to hello@scopefortrades.co.uk or to us at Fifth Floor, 167-169 Great Portland Street, London, W1W 5PF.
Two kinds of data, and why the difference matters
Scope holds personal data of two sorts, and we are in a different position for each.
Your data is what you gave us to have an account: your name, your email, your company details. We decided to collect it, so we are the controller and this notice is our answer to you.
Your customers' data is the property addresses you type in and the estimates you produce from them. A home address identifies a household, so it is personal data. We never chose to collect it. You did. That makes you the controller of it and us your processor, holding it on your instructions and using it for nothing else.
In practice: if a homeowner asks to be deleted from your records, they ask you, not us, and you can delete the estimate yourself. If you would rather we did it, ask and we will.
Your data: what we hold and why
- Your name, email and company details, to give you an account, put your business on the estimates you send, and email you about your subscription. We need these to provide the service you asked for.
- Your password, stored only as a scrypt hash. We cannot read it and cannot tell you what it is.
- Your rates and settings, because they are what prices your work.
- Billing records: which plan you are on, whether payments succeeded, and the reference numbers Stripe uses to identify you. Card numbers are handled by Stripe and never reach our servers.
- Your IP address, briefly, to stop somebody guessing passwords or flooding the signup form. This is our legitimate interest in keeping the service secure, and nothing else is done with it.
- A record of what happened: signups, estimates created, payments, credits spent. It is how we know the service is working and how we answer you when something has gone wrong. It deliberately holds no property address and no customer name.
We do not buy data about you, we do not sell yours, and there is no advertising or profiling anywhere in Scope.
Your customers' data: what we hold for you
- The property address you searched, and the building measurement returned for it.
- The estimate: the job, your rates, the price, and the range.
- The share link, if you sent one. The link is the only thing needed to open that page, so we store only a hash of it and it cannot be found by guessing or listed by us.
A building measurement is kept once and reused, including for other Scope customers who later price the same building. That is what makes a credit buy a property for ever. What is shared is the shape of a building, which is public mapping data. Your customer's name, your price, your rates and your estimates are never visible to another account.
Who else touches it
Six companies, each doing one job:
- Ordnance Survey, to look up an address and return the building outline. They receive the address being searched.
- postcodes.io, to turn a postcode into a map reference when an address search is not used. They receive the postcode and nothing else.
- Mapbox, for the aerial photograph. They receive the map square the building sits in. The request is made by our server rather than by your browser, so they never see your device or your address.
- Stripe, to take payments. They receive your billing details directly and never send us a card number.
- Resend, to deliver our emails. They receive your email address and the message.
- Railway, who host the servers and the database.
They act on our instructions and may not use anything for their own purposes. Where data is handled outside the UK, it is protected by the safeguards UK data protection law requires.
We would also hand data over if the law required it. If that ever happens and we are allowed to tell you, we will.
How long we keep it
- While your account is open, we keep your estimates, because being able to find last spring's quote is most of what history is for.
- After you close it, we keep them for 90 days so you can ask for a copy, then delete them.
- Billing records we keep for six years, because tax law requires it.
- Sign in sessions and password reset links expire on their own, in days and in minutes respectively.
- Building measurements are kept indefinitely, because that is what makes a credit buy a property for good rather than for a year. The measurement describes a building: its outline, its height, its roof shape. Kept beside it is the address it was found by, which is personal data, as this notice says above. We hold that so the same house is recognised the next time anyone searches for it, and for nothing else. Ask and we will remove a specific address from that record.
Cookies
Scope sets one cookie. It remembers that you are signed in, and that is all it does. It is strictly necessary to deliver the service, which is why there is no banner asking you to agree to it.
There is no analytics, no advertising pixel and no third party tracker anywhere in Scope. Nothing follows you off this site.
What you can ask for
You have the right to see the data we hold about you, to have it corrected, to have it deleted, to get a copy in a portable form, and to object to or restrict what we do with it. Ask at hello@scopefortrades.co.uk and we will answer within one month. It costs nothing.
If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.
If something goes wrong
If personal data is lost or exposed and it is likely to put anyone at risk, we will tell the Information Commissioner within 72 hours and tell you directly. We will say what happened and what to do about it, not just that an incident occurred.
Changes to this notice
If we change anything that matters, we will email you before it takes effect. The date at the top always tells you when this was last revised.