Privacy Policy

TradeVault CRM · Last updated 13 October 2026

This explains what TradeVault CRM holds and why. The CRM is operated by Cardiff and Caerphilly carpentry.

What we hold

Connected accounts, including TikTok

When a business connects a TikTok account, TikTok gives the CRM an access token, the account's ID and its display name. We use these only to send videos that the business chooses to that TikTok account, and to show which account is connected. We do not read the account's messages, followers or other videos, and we do not sell or share this information. The same applies to connected Instagram, Facebook, YouTube and Google accounts: the connection is used only to publish the business's own content and to show it its own results.

A connection can be removed at any time in the CRM, or from the connected service's own settings (in TikTok: Settings and privacy, then Security and permissions, then Apps and services permissions). When it is removed, the stored tokens are deleted.

Why we hold it

To provide the CRM to the businesses that use it, and to keep it secure. Each business decides what customer information it records and is responsible for that information; we process it on its behalf.

Who it is shared with

We do not sell personal information. It is passed only to the services needed to run the CRM (hosting, storage, email, messaging) and to the accounts a business has chosen to connect, when it publishes to them.

How long we keep it

For as long as the business uses the CRM. It can ask for its records to be deleted.

Your rights

Under UK data protection law you can ask to see, correct or delete personal information held about you, and you can complain to the Information Commissioner's Office (ico.org.uk). If your details were recorded by a business that uses the CRM, that business is the right first contact.

Contact

Privacy questions or requests: contact Cardiff and Caerphilly carpentry.

Terms of Service · Privacy Policy