Last updated: 20 August 2026
PatchUp is a job management app for tradespeople: quotes, scheduling, invoicing and payment chasing. It is operated by Blaise, a sole trader trading as PatchUp, based in the United Kingdom. For anything about this policy or your data, contact hello@getpatchup.co.uk. Where this policy says "we" as the controller, it means that sole trader.
If you have a PatchUp account (you're a tradesperson or on their team), we are the data controller for your account details: your name, email address, and how you use the service.
If you're a customer of a tradesperson who uses PatchUp (for example, they fixed your boiler), your details were entered by them, not by you. For that data the tradesperson is the controller and we are their data processor - we store and handle it only on their instructions. If you want your details corrected or removed, ask the tradesperson; we've built them the tools to do it, and we'll help if they need it.
We use one strictly necessary cookie to keep you logged in. No advertising or tracking cookies, and no analytics that identify you.
Under UK GDPR we rely on:
For the homeowner data a tradesperson enters, the tradespersonchooses the lawful basis - we only process it on their instructions.
If you use the voice booking or note-enhancement features, your recording is sent to OpenAI to be turned into text, and the text is sent to Anthropic to be turned into a structured booking or a tidied note. Both process it to provide the feature, not to build profiles. If you'd rather nothing you say leaves the app, type instead - every voice feature has a typed equivalent.
This is the current list. If we add or change a sub-processor, we'll update this page.
Your core data - your account, your customers, jobs, invoices and photos - is stored in the European Union, and the app runs from the London region next to it. Some of the providers above (for example Stripe, Resend, OpenAI and Anthropic) may process data in the United States. Where data leaves the UK, the transfer is protected by the UK's International Data Transfer Agreement (or the EU Standard Contractual Clauses with the UK Addendum) in our contracts with those providers.
So the app still works where there's no signal, your phone keeps a small offline copy of your next 7 days: your own jobs with customer names, phone numbers and addresses, plus job notes. Work you record while offline (job completions, notes, photos) is also held on the phone until it can be sent. This all lives on your device only, refreshes automatically, and is deleted when you log out - so don't stay logged in on a phone that isn't yours.
While an account is active, we keep its data so the service works. Thirty days after an account is cancelled, everything is permanently deleted: customers, jobs, quotes, invoices, photos, notes, team members and settings. This happens automatically and cannot be reversed.
One exception: the billing record of the subscription itself (what the business paid us, when) is kept for six years, because UK tax law requires it. It contains no customer data.
Before cancelling, any account owner can download everything - every client, job, quote, invoice, note and photo - as one file, from the Billing page. Any download links inside that file for large photos expire after 7 days, so save what you need promptly. Invoices are the tradesperson's own tax records, so we say this loudly there too: export first, cancel second.
We take security seriously: passwords are hashed, photos are private and reachable only through short-lived links, each business's data is isolated from every other, and card details never reach us. If a breach ever puts your rights at risk, we'll report it to the Information Commissioner's Office within 72 hours of becoming aware, and tell affected people without undue delay.
Under UK GDPR you can ask us to give you a copy of your data (access and portability), correct it, delete it, restrict how we use it, or object to a particular use. Where we rely on your consent (voice, notifications) you can withdraw it at any time. Account holders can do most of this directly: the export is self-serve, and deleting your account triggers the 30-day deletion described above. For anything else, email us - we respond within a month, as UK GDPR requires, and we don't charge for it.
If you think we've handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to fix it first.