Privacy
What TurnUp holds, and who can read it.
TurnUp shows a customer where their tradesperson’s job has got to. Doing that needs a name, an address and a phone number, which is most of what anyone would want to steal, so the short version is: the trade sees their own jobs behind a password, the customer sees only what the trade told them, and nothing is sold or shared with anybody.
Last updated 17 October 2026. TurnUp is operated by its developer as a sole trader in the United Kingdom.
Who is who
Two different people use TurnUp and the law treats them differently.
The tradesperson decides what goes on a job card — the customer’s name, address and number, and what is said about the visit. They are the data controller for that. TurnUp is their processor: it holds that information and shows it, and does nothing else with it.
The customer opens a link. TurnUp holds what they answer back (whether someone will be in, a door note, a private message to the trade) on behalf of that same tradesperson.
What is held
| What | Why | How long |
|---|---|---|
| Customer name, address, phone, job reference and what the job is | It is the job card. The address is what the trade drives to. | Until the trade deletes the job or closes the account |
| Stage changes, notes, arrival window, and the time of each | The record the customer reads, and the trade’s own evidence of what was said when | With the job |
| Answers the customer gives: will someone be in, door and access notes, a private note after the job | So the trade knows what to expect at the door | With the job |
| A map pin, where one is dropped | Turn-by-turn to the right gate rather than near it | With the job |
| Push notification subscriptions | To send “has set off” to a phone | Until the browser discards it or notifications are switched off |
| The trade’s own details: business name, photo, van and plate | Shown to the customer from “on my way”, so they know who is at the door | Until changed or deleted |
| ServiceM8 bookings, where a trade connects ServiceM8 | So the card follows the job without anything being retyped | With the job |
| The waiting list (/join): name, email, trade or “a home”, and the first half of a postcode | To email you once, when there is a place | Until you ask for it to be removed |
| What else you type into /join: the map pin, photos, who else is home, a work address | Builds your card on the page as you go. It is kept in your own browser and never sent to TurnUp | Until you tap Start again or clear the browser |
| Emails forwarded to a household card’s inbox address | The sender, the subject and the text are read for an arrival and a date; the message itself is not kept | The arrival row stays on the card; the email is not stored |
There is no analytics, no advertising and no tracking script on any page. TurnUp sets one cookie: the tradesperson’s own sign-in. A customer’s link sets none.
Who can read it
The link in the URL is the credential. A customer has no account. Anyone holding that link can see the page, so what the page shows is deliberately narrow, and what it shows is one rule:
It carries what the trade told the customer. It never carries what the customer told the trade.
So the stage, the day, an agreed window, the trade’s name and face are on the page. The customer’s own answers are not: whether anyone will be in, the door note, the dog, the photos of the house, a private message. Those live on the device that gave them and on the trade’s dashboard, behind the trade’s password. A link forwarded into a family group chat shows a stage and a street — never a way in.
A link can be switched off at any time by the trade, and stops working the moment it is. Every page tells search engines not to index it.
Notifications are the least private surface here, because they are read by whoever picks the phone up. One carries the trade’s name and the stage, and nothing else — never the address, never the job reference, never the customer’s name, never a free-text note.
Who it is shared with
Nobody, in the sense that matters: TurnUp does not sell, rent or share anything with advertisers, data brokers or anyone else, and there is no onward sharing between the trades who use it. Each trade sees their own jobs and no one else’s.
These are the services it runs on, and all it sends them is what they need to do their job:
| Service | What it sees |
|---|---|
| Vercel (hosting) | Requests to the site, in the EU and US |
| Neon (database) | Everything in the table above, at rest |
| ServiceM8 | Only where a trade connects their own account: the bookings TurnUp reads and the texts and diary lines it writes |
| Apple and Google push services | An anonymous subscription and the notification text |
| Cloudflare | Where a household card uses email forwarding: the forwarded message, in transit |
| Anthropic | Only when the trade uses the Ask box on their own dashboard: that trade’s job list, with every phone number taken out |
| DVSA and DVLA | Only when a trade looks up their own van: the number plate |
| postcodes.io and OpenStreetMap | On /join: the postcode you type, and the map squares around it. Your browser asks them directly |
Tokens for a connected ServiceM8 account are encrypted before they are stored. Disconnecting the add-on deletes them.
Your rights
Under UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted.
If you are a customer who has had a TurnUp link: the tradesperson who sent it decides what happens to it. Ask them first — they can delete the job, which removes everything on it. If you cannot reach them, write to the address below and TurnUp will act on it.
If you are a tradesperson: everything is on your dashboard, and asking for the account to be deleted removes every job on it.
If something is not put right, you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
TurnUp is for tradespeople and their customers and is not meant for anyone under 16. It does not knowingly hold anything about a child.
Changes
If this changes, the date at the top changes with it. A change that materially affects what is held or who can read it will be said on the dashboard, not only here.
Getting in touch
www.getturnup.com · Questions about a specific job are quickest answered by the tradesperson who sent you the link.