Privacy Policy

This website is operated by EUSA Technologies LLC, a limited liability company formed in Delaware, United States. For the purposes of UK and EU data protection law, we are the controller of the personal data described in this policy.

Our address is 131 Continental Drive, Suite 305, Newark, DE 19713, United States.

Searching Tradaro needs no account and collects nothing beyond the server logs described at the end of this section. You can read every public page, run any search and open any company record without telling us who you are.

If you create an account, we store what an account needs and nothing more: your name and email address, the workspace you belong to and your role in it, your sessions, and a record of what your workspace used — which company records were opened, and when — so that we can apply the limits your plan sets. We also keep a short security log of the acts that change who can see what: signing in and out, inviting or removing a member, changing a role, renaming a workspace. Those entries include the IP address the act came from, because that is what an account compromise is investigated with.

We ask for no password. Signing in sends a one-time link to your address, or uses your Google account if you choose that instead, so there is no password of yours for us to store or to lose.

The form on our contact page does not send anything to us. It assembles the message in your browser and hands it to your own email application, where you decide whether to send it. What you type there never reaches our servers unless you press send in your own mail client, and then it arrives as an ordinary email.

We set one cookie, and only once you sign in: the session cookie that keeps you signed in. It is strictly necessary for a service you asked for, which is why there is no consent banner asking you about it. We run no analytics and no advertising or tracking scripts. Our fonts are served from our own servers, so loading a page does not disclose your visit to a font provider or content network.

Our web server keeps standard access logs: your IP address, the time of the request, the page requested, the referring page and your browser's user-agent string. An IP address can identify you, so we treat these logs as personal data. We use them only to operate and secure the service (diagnosing faults and identifying abusive traffic) on the basis of our legitimate interest in keeping the site running and safe. Logs rotate on a short cycle and are not used to build any profile of you.

Registration is not open on the effective date of this policy. When it opens, what an account stores is what this section already describes — this page was written before the first account, not after it.

Tradaro indexes official public sources: trade statistics and trader records published by HM Revenue & Customs, and the Companies House register of UK companies. Most of what those sources contain is information about companies, which is not personal data.

Some of it is. Where a business is run by an individual (a sole trader, or a partnership named after the people in it), information about the business can identify a person. Company officers' names and correspondence addresses on the register are personal data too. We process that information because it is already published by an official source for the purpose of public transparency in trade and corporate ownership, and because making it searchable serves that same purpose.

Our lawful basis is our legitimate interest, and the legitimate interests of our users, in making official public records usable. We have weighed that against the interests and rights of the people concerned. The factors that matter to that balance: the information is already public, it concerns commercial rather than private life, we do not enrich it with data from other sources, we do not build behavioural profiles, and we do not sell contact lists.

We publish figures that come from the official statistics. We do not publish estimated or modelled financial figures next to a named company. An estimate presented beside a real name reads as a fact about that company, and it is not one.

Our servers and databases are hosted in the United Kingdom, in Google Cloud's London region. That covers both stores: the warehouse holding the records described above, and the managed PostgreSQL database (Google Cloud SQL) holding accounts, sessions and usage. Page requests are processed there.

We are a US company, so our personnel may access that infrastructure from outside the United Kingdom. Where that involves a transfer of personal data out of the UK or EEA, we rely on the safeguards permitted by UK and EU data protection law for such transfers.

We do not sell personal data, and we do not share it for anyone else's marketing.

We rely on infrastructure providers to run the service: hosting, databases, domain and certificate services, all provided by Google Cloud in the London region; and Google Workspace, which sends the sign-in and invitation emails and therefore handles your address in order to deliver them. If you sign in with Google, Google also knows that you did. They process data on our instructions and for no purpose of their own. We may also disclose information where the law requires it, or to establish or defend legal claims.

Server access logs are kept for a short operational period and then deleted. Records drawn from official sources are kept for as long as we index that source, and are refreshed as the source publishes updates, including corrections and removals made at the source.

For accounts: your account and workspace membership last as long as the account does, and go when you ask us to delete it. Usage records are kept for 24 months, because a plan is billed and reviewed by the year and a year-on-year comparison needs the year before. Security log entries are kept for 12 months. Backups of both databases are kept for 30 days and are then overwritten, so deleting something can take up to 30 days to work through every copy.

If you are in the United Kingdom or the European Economic Area, you have the right to ask for a copy of the personal data we hold about you, to have it corrected, to have it erased, to restrict how we use it, and to receive it in a portable form.

Because we process the information described in section 3 on the basis of legitimate interests, you also have the right to object to that processing at any time, on grounds relating to your particular situation. If you object, we will stop unless we can show compelling legitimate grounds that override your interests.

One practical point. Where our copy comes from an official register, correcting our copy does not correct the source, and the source will re-supply the original at the next refresh. If a record about you is wrong, ask the publishing body to correct it as well. Tell us at the same time and we will handle our copy in the meantime.

If you live in California, or in another US state with comparable law, you have rights to know what personal information we have collected, to request its deletion, and to correct it. We do not sell or share personal information as those terms are used in that legislation, so there is nothing to opt out of. We will not treat you differently for exercising any of these rights.

This service is for business use. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

To exercise any right in this policy, or to ask a question about it, write to privacy@tradaro.com or to EUSA Technologies LLC at 131 Continental Drive, Suite 305, Newark, DE 19713, United States. We answer within one month.

If you are in the United Kingdom and you are not satisfied with our response, you may complain to the Information Commissioner's Office. If you are in the European Economic Area, you may complain to your national supervisory authority. Complaining to us first is not a condition of complaining to them.

This policy is effective 11 August 2026. If we change it, we will change the effective date above. Where a change materially affects how we handle personal data, we will say what changed rather than quietly replace the page.

See also our Terms of Service.