Privacy Policy

Last updated: January 2026

GraftHQ Logo

1. Roles Under GDPR

You, the tradesperson, are the Data Controller of all customer data.

GraftHQ is a Data Processor acting only on your instructions.

2. Your Legal Responsibility

You confirm and agree that:

  • You have lawful basis to store customer data
  • You have permission to contact customers
  • You are responsible for GDPR compliance within your business

GraftHQ accepts no responsibility for how you collect, store, or use customer data.

3. How Data Is Handled

GraftHQ uses secure infrastructure providers. We do not sell data.

4. Your Rights

Requests: privacy@grafthq.com

5. Security Disclaimer

No system is completely secure. By using GraftHQ you accept this risk.