Terracode Limited, registered in England and Wales, is the data controller for HandyTrack. This page explains your rights under the UK General Data Protection Regulation and how to use them. For detail on what we collect and why, see the Privacy Policy.
If you are a tradesperson using HandyTrack to run your business, then for your own customers' details that you enter into the app, you are the data controller and we are your processor. We handle that information on your instructions. If one of your customers asks you to delete their record, you can do that in the app, and you are responsible for responding to them.
For your own account information, we are the controller.
| Right | What it means | How to use it |
|---|---|---|
| Access | Get a copy of the personal data we hold about you | Email us — we provide it in a structured, machine-readable format |
| Rectification | Correct data that is wrong or incomplete | Most fields are editable directly in the app; email us for anything you cannot change |
| Erasure | Have your account and personal data deleted | See section 3 — subject to the legal retention rules explained there |
| Portability | Receive your data in a format you can take elsewhere | Email us — this is the same export as the access request |
| Restriction | Ask us to pause processing while a dispute or correction is resolved | Email us explaining what you want paused and why |
| Objection | Object to processing we carry out on the basis of legitimate interests | Email us — we will stop unless we have compelling grounds that override your objection |
| Automated decisions | Not be subject to solely automated decisions with legal or similarly significant effects | We do not make such decisions. Our AI features are assistive only and always require you to confirm the result |
You can ask us to delete your account and personal data at any time by emailing privacy@handytrack.co.uk, or via the account deletion page.
Invoices and quotes are retained for 7 years after the relevant financial year end. This is a legal obligation under HMRC record-keeping rules and we cannot waive it, even at your request — UK GDPR permits retention where it is necessary to comply with a legal obligation.
Those retained records are anonymised: the link to you and to the named customer is severed, and your business record is replaced with a placeholder. What remains is the financial transaction data HMRC requires, not your identity.
Backup copies are cycled out within 30 days.
Email privacy@handytrack.co.uk from the address registered to your account, and tell us which right you want to use. If you email from a different address we may need to verify your identity first — this protects you from someone else requesting your data.
We will respond within 30 days, free of charge. If a request is unusually complex we may extend this by up to two further months, and will tell you within the first 30 days if so.
We only refuse a request where the law allows it — for example a manifestly unfounded or excessive request — and we will always explain why.
We use a number of service providers to operate HandyTrack, including for database hosting, email and SMS delivery, push notifications, AI voice transcription, subscription management, and crash monitoring. Each is listed — with what it receives and where it is located — in section 4 of the Privacy Policy.
Where data is transferred outside the UK, we rely on UK adequacy decisions or Standard Contractual Clauses. We do not sell your data to anyone.
If you are unhappy with how we have handled your data or your request, please contact us first at privacy@handytrack.co.uk so we have the chance to put it right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
You do not need to contact us before going to the ICO, though it often resolves things faster.