Privacy Policy

National Compliance Network Ltd ("NCN", "we") operates this platform. We are the data controller for the personal data described in this policy.

We collect data you provide when you create an account, post a job, submit a bid, invite team or client users, upload accreditations and certificates, complete verification, message other users, or contact support. This typically includes name, email, phone number, business details, postcodes, payment metadata, uploaded documents, and message content.

We also collect technical data automatically — IP address, device and browser information, session cookies, and product usage events — to operate and secure the service.

We use personal data to provide the platform, match vendors to jobs, run verification checks, process payments and commissions, send transactional and notification emails, prevent abuse, comply with legal obligations, and improve the product.

We share data with the following processors who operate the platform on our behalf:

• Supabase — authentication, database, file storage.
• Stripe — payments, subscriptions, billing.
• Resend — transactional email delivery.
• Twilio — SMS for phone verification and alerts.
• SignWell — contract e-signing.
• Vercel — application hosting.
• Companies House, Postcodes.io, getAddress.io — public data lookups.

We do not sell personal data. We share data with other platform users only as required to operate the marketplace — for example, a vendor sees a customer's job details when bidding.

Some processors are located outside the UK. Where this is the case we rely on standard contractual clauses or equivalent transfer mechanisms recognised under UK GDPR.

You have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent where processing relies on consent. You can also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We retain account data while your account is active and for a reasonable period after closure to meet legal, tax and audit obligations. Specific retention periods will be finalised before launch.

We use TLS in transit, encryption at rest, role-based access controls and row-level security in our database. Access to production data is restricted and audited.

For privacy queries or to exercise your rights, contact us at privacy@nationalcompliancenetwork.co.uk.