Privacy Policy

Trackd ("we", "us", "our") operates the Trackd marketplace at trackdrail.co.uk, connecting UK rail and rolling stock contractors with recruiters. We are the data controller for personal data processed through the platform. Contact: hello@trackdrail.co.uk.

• Contractor profile data: full name, email, phone, location, discipline, work status, availability date, expected day rate, bio.
• Certification documents: photos or PDFs of PTS, OLEC, NVQ and other rail certifications you upload for verification.
• Recruiter account data: agency name, contact name, job title, work email, phone, disciplines recruited for, monthly placement volume.
• Account and auth data: email, hashed password, sign-in timestamps, IP address and basic device data.
• Messages: the content of in-app messages exchanged between contractors and recruiters.
• Billing data: subscription status and limited payment metadata (we do not store full card details — payments are processed by Stripe).
• Cookies & analytics: essential cookies for authentication, plus optional analytics cookies if you accept them.

• Contract: to operate your account, verify certifications, surface profiles to recruiters and enable hiring conversations.
• Legitimate interests: to keep the platform secure, prevent fraud, and improve the product.
• Consent: for optional analytics cookies and marketing emails (you can withdraw consent at any time).
• Legal obligation: to comply with tax, accounting and lawful information requests.

We share data only with processors who help us run Trackd: hosting and database providers, our email delivery provider (Resend), and our payments provider (Stripe). Verified contractor profile data is visible to paying recruiters on the platform. Certification documents are visible only to you and the Trackd admin team during verification.

• Active account data: for as long as your account is open.
• Certification documents: until you delete them or close your account, then up to 30 days in backups.
• Messages: kept while either party has an active account.
• Billing records: 6 years, as required by UK tax law.
• Closed accounts: deleted within 30 days of a verified deletion request, except where we must retain limited records by law.

Under UK GDPR you have the right to access, correct, delete, restrict or port your personal data, and to object to processing. To exercise any of these rights — including a request to delete your account, profile, certifications and messages — email hello@trackdrail.co.uk. We respond within 30 days. You also have the right to complain to the UK ICO at ico.org.uk.

Data is stored on secure, encrypted infrastructure inside the UK/EU. Certification documents are held in a private storage bucket accessible only to you and Trackd admins. We use TLS for all traffic and role-based access controls on the database.

Some processors (e.g. Stripe, Resend) may process data outside the UK. We rely on UK-approved transfer mechanisms (such as the UK IDTA or Standard Contractual Clauses) to protect your data.

We may update this policy. Material changes will be notified by email or in-app banner before they take effect.