Privacy Policy

TradeDash is a New Zealand trade-matching marketplace that connects homeowners with vetted local tradespeople ("tradies" or "Trade Partners"). The platform is operated by TradeDash Limited, company number 9450166, NZBN 9429053872005.

This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It applies to our website, dashboards and related services (together, the "Platform").

This Privacy Policy should be read alongside our Terms of Use and our Cookie Policy.

In this policy, "we", "us" and "our" mean TradeDash. "You" means anyone who uses the Platform, whether a homeowner, a Trade Partner, or a visitor.

We handle personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles.

Depending on how you use the Platform, we may collect:

• Account details — your name, email address, phone number and the role you register under (homeowner, Trade Partner or administrator), plus your password (stored only as a secure one-way hash, never in plain text).
• Job information — job descriptions, the property location or address where work is needed, budgets, timeframes, photos you upload, and messages exchanged with Trade Partners or our team.
• Trade Partner verification and business details — your business name, trades, service areas, experience, licence or registration numbers, insurance details and expiry dates, website, and any verification documents you provide so we can review and approve your application.
• Payment, membership and success fee information — membership fee and success fee records, invoices, transaction status and amounts. Card and bank details are entered directly into our payment provider (Stripe) and are not stored by TradeDash.
• Reviews and ratings — feedback and star ratings homeowners leave for Trade Partners after a job.
• Marketing preferences — whether you have consented to receive marketing communications from us, and any withdrawal of that consent.
• Technical information — basic log data such as the date and time of requests, needed to operate and secure the Platform.

We collect personal information:

• Directly from you — when you post a job, apply as a Trade Partner, create or set up an account, send messages, upload photos or documents, leave a review, or contact our support team.
• When you sign in with Google — if you choose Google login, Google shares your basic profile details (such as your name and email address) with us so we can create or access your account. We do not receive your Google password.
• Automatically — limited technical log data generated when you use the Platform.

We use personal information to:

• Create and manage homeowner, Trade Partner and administrator accounts, including secure set-password and password-reset links.
• Review, vet and approve Trade Partner applications and maintain "TradeDash Approved" status, including monitoring insurance and licence expiry.
• Match homeowner jobs with a small number of suitable, approved Trade Partners and let the parties communicate.
• Process membership payments and calculate and administer success fees.
• Send service messages — such as account setup, job updates, matches, notifications, billing and payment notices, and insurance or document expiry reminders.
• Send marketing communications, but only where you have consented (see section 8).
• Display reviews and ratings and maintain the integrity of the marketplace.
• Provide customer support, respond to enquiries, and keep records required for our business, tax and legal purposes.
• Detect, prevent and investigate fraud, misuse, security incidents and breaches of our Terms of Use.

TradeDash is a matching platform, so some sharing is essential to how it works.

When a job is matched, we share relevant job details with the matched Trade Partners so they can decide whether to take the work and contact you about it. This can include your name, the job description, location or address, budget, timeframe, photos and messages. We aim to limit exposure of your contact details until a genuine match is made.

For emergency call-outs, a homeowner's contact details are only shared with a Trade Partner once our team assigns the request.

Trade Partner business details and approval status may be shown to homeowners so they can make an informed choice.

Messages you send through the Platform are visible to the other parties to that job and to our administrators.

We use trusted third parties to run the Platform. They only receive the information needed to perform their service and are required to protect it:

Our production database runs on MongoDB Atlas, provisioned and managed by Emergent on our behalf. Emergent has confirmed that TradeDash's production database is hosted in the United States.

Uploaded photos and verification documents are held in secure object storage and are served only to authorised parties (such as the job's participants and our administrators). Our other providers may also store or process information outside New Zealand.

Emergent's Data Processing Addendum contractually prohibits any of its sub-processors from using our data to train artificial intelligence models, and this restriction applies to all data processed through the Platform.

Where your information is held or processed overseas, we take reasonable steps to ensure it is protected by safeguards comparable to those required under the Privacy Act 2020.

Our providers hold your information on our behalf and for the purposes described in this policy, and are not permitted to use it for their own unrelated purposes.

We restrict internal access to personal information to those who need it to operate the Platform.

We distinguish between two kinds of messages:

• Service messages are necessary to operate the Platform and your account — for example account setup, job notifications, matches, messages, billing and payment notices, and insurance or document expiry reminders. These are not marketing, and you will receive them while you hold an account.
• Marketing messages — such as TradeDash news, new features, promotions or other opportunities — will only be sent to you where you have consented to receive them. Consent to marketing is separate from, and is not a condition of, using the Platform.

Every marketing message we send will identify us as the sender, include our contact details, and include a working unsubscribe link. You can withdraw your consent at any time using that link or by emailing support@tradedash.co.nz, and we will action it promptly. Withdrawing marketing consent does not stop service messages.

We handle marketing communications in accordance with the Unsolicited Electronic Messages Act 2007.

We use only the cookies and local browser storage necessary to keep you securely signed in and to make the Platform work (for example session and authentication tokens). We do not currently use third-party advertising or behavioural-tracking cookies.

If we introduce analytics or similar tools in the future, we will update this policy first and, where required, ask for your consent. Please see our separate Cookie Policy for more detail.

We take the security of your information seriously. Our safeguards include:

• passwords stored as secure one-way hashes, never in plain text;
• encryption of data in transit and at rest;
• role-based access controls limiting who can access dashboards and data;
• uploaded files served only to authorised users;
• payment card data handled by Stripe rather than stored by us; and
• regular automated backups, with point-in-time recovery available.

While no online service can be guaranteed completely secure, we use reasonable technical and organisational safeguards to protect personal information.

We keep personal information only for as long as needed for the purposes described in this policy, to provide the Platform, and to meet our legal, tax and accounting obligations.

Payment, membership, success fee and other financial records are generally retained for at least 7 years, as required by New Zealand tax law.

When information is no longer required, we will delete or de-identify it.

Under the Privacy Act 2020, you have the right to:

• Access the personal information we hold about you;
• Ask us to correct information that is inaccurate, out of date or incomplete; and
• Request deletion of your account and associated personal information, subject to any records we are legally required to keep (such as transaction, success fee and tax records).

To make a request, email support@tradedash.co.nz. We may need to verify your identity before acting on a request.

We will respond as soon as reasonably practicable, and in any event within 20 working days of receiving your request, as required by the Privacy Act 2020. "Working days" has the meaning given in the Privacy Act 2020 — it does not include weekends, public holidays, or the period from 25 December to 15 January. If we need more time to respond, we will let you know within that 20 working day period and explain why, as the Privacy Act 2020 allows.

If a privacy breach occurs that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020, and take prompt steps to contain and remedy the breach.

The Platform is intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we do, we will change the "last updated" date above and, for significant changes, take reasonable steps to let you know. Continued use of the Platform after an update means you accept the revised policy.

Questions, concerns or privacy requests can be sent to our Privacy Officer at support@tradedash.co.nz. You can also reach our team through the Contact page. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner (New Zealand) at privacy.org.nz.

TradeDash Limited | New Zealand | support@tradedash.co.nz | Last updated 17 September 2026