Privacy notice

Last updated: 2026-10-06

Who we are

GuildSelect is an invite-only directory of the best-reviewed independent tradespeople in the UK. The directory is operated by Lumatic Labs LLC, a company based in the United States. We are the controller of the personal data described here.

Our address is Lumatic Labs LLC, 1209 Mountain Road Pl NE Ste R, Albuquerque, NM 87110, USA. For anything about your data, write to [email protected]. A person reads that inbox every working day.

If you would like to be left alone

Reply "Remove" to any email from us, or write to [email protected]. We will take your business out of our mailing records and, if you have a profile, off the public site, within 24 hours. Your address then goes on a permanent suppression list, so that no later invitation ever reaches you. You do not need to give a reason.

Whose information we hold, and where it comes from

Tradespeople we consider inviting. We build a short editorial profile for a business before we write to it. We use only information that is already public: Companies House records, the business's public Google business listing (rating, number of reviews, how long it has traded), and the business's own website. This includes a business name, trade, town, a business email address or telephone number and, where the business is a limited company, the names of its officers as they appear on the public register. We do not buy lists, and we do not use ratings from other directories.

Tradespeople who reply or join. Your reply to our invitation and, if you become a member, your plan, billing status and Stripe customer reference. We do not store card numbers; Stripe does.

People who use this website. If you send us an enquiry or report a profile, we hold the details you give us, and nothing more. We do not run advertising or analytics trackers (see our cookie notice).

Why we use it, and our lawful basis

What we do Lawful basis (UK GDPR)
Prepare a draft profile from public information, and send one invitation to a limited company or LLP Legitimate interests (Article 6(1)(f)): growing a directory of well-reviewed tradespeople. The information is already public, the volume is small, the email is relevant to the recipient's business, and objecting is easy.
Publish your profile Your agreement: we publish only after you reply "Yes".
Run your membership and take payment Contract (Article 6(1)(b)).
Keep suppression and removal records Legal obligation and legitimate interests: we must remember who has asked not to be contacted.
Answer enquiries and reports; keep the site secure Legitimate interests.

How we approach the Privacy and Electronic Communications Regulations (PECR). We send unsolicited invitation emails only to limited companies, limited liability partnerships and Scottish partnerships. We do not send them to sole traders or ordinary partnerships, who have the same protection as private individuals. If we think a business may be one of these, we do not email it. Every message we send says who we are, where we found your details, and how to opt out.

You have an absolute right to object to direct marketing. If you do, we stop straight away and no exception applies.

What we do not do

We do not sell personal data. We do not share it with advertisers. We do not sell leads: membership is not a promise of work, and we do not pass on enquiries as a product.

Who else sees it

  • Hosting and infrastructure: Hetzner (servers) and Cloudflare (network security and delivery).
  • BlitzCRM: our system for contacts and campaign records.
  • Mailbux: delivery of our campaign email.
  • PurelyMail: our role mailboxes (for example the privacy inbox).
  • Stripe: payment processing for members.
  • The public: a published profile is visible to anyone, by design.

Where your data is held. We store personal data in the UK, the EEA and Switzerland (a country the UK has confirmed as adequate). A few providers handle limited data in the US: Cloudflare (network security and delivery), Stripe (payments) and PurelyMail (hosting for our role mailboxes, such as the one that receives privacy requests). Cloudflare and Stripe provide the contractual safeguards that UK law recognises for this (the standard contractual clauses with the UK Addendum), and we rely on those. PurelyMail offers no such agreement. Only the correspondence in our role mailboxes is stored there; we keep what reaches it to a minimum and are reviewing the arrangement. You can ask us for details at [email protected].

How long we keep it

  • Businesses we invited who did not reply: 24 months from the last invitation, then deleted.
  • Businesses that reply "No thanks" or "Remove", or ask to be delisted: a minimal suppression entry (business name and email address) is kept indefinitely, solely so that we can honour your request. Everything else is deleted.
  • Members: for as long as you are a member, then six years for billing records only.
  • Enquiries and reports from site visitors: 12 months.

Your rights

You can ask us at any time to:

  • tell you what we hold about you and give you a copy;
  • correct anything that is wrong;
  • erase your information;
  • restrict how we use it;
  • hand it to you in a portable format;
  • stop using it for direct marketing, or for any use based on legitimate interests.

Write to [email protected]. We acknowledge every request within 24 hours. The law gives us one month to complete it; we aim to be much quicker. We may ask you to confirm who you are first.

If you are not satisfied, you may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would be grateful for the chance to put things right first.

Cookies

We use only the cookies the site needs to work. Details are in our cookie notice.

Changes

If we change this notice in a way that matters, we will update the date at the top. Earlier versions are available on request.