Turnkey.mt

What we collect, and what we don’t

This site takes enquiries and reads property plans. Here is exactly what happens to both, in plain English.

Draft, pending review. Two details are outstanding — the registered address and company registration number — and this notice has not yet been read by a lawyer. It describes accurately what the site does today.

Who we are

Checkyourtraders Ltd, a company registered in Malta, is the data controller for turnkey.mt. Turnkey.mt is a trading name, not a separate company.

What this site collects

Three things, and nothing else.

1. Enquiries

If you book a survey we ask for your name, email address, phone number, the type and location of the property, the kind of project, and whatever you write in the notes. We need those to contact you and to arrive at the right building.

If you apply to join the trade network we ask for your company name, contact name, email, phone, discipline and coverage area.

Both are handled by Netlify Forms, and a copy reaches us by email. The lawful basis is your request: you asked us to get in touch.

2. Questions and plans you send to the budget assistant

The assistant reads what you type, and any plan, photo or screenshot you attach, in order to work out a specification and price it.

We do not store your files. An attachment goes from your browser, through our server, to the service that reads it, and is gone when the answer finishes. It is not written to any disk, database or backup of ours, and it does not appear in our logs. Nothing you type in the assistant is stored either.

Two things happen in your own browser before a photo is sent, and both are in your favour: it is resized, and its EXIF metadata is stripped — including the GPS tag recording where the photograph was taken. That location never leaves your phone.

The lawful basis is your request. If you would rather not send a plan, describe the property in words instead; the assistant works either way.

3. A hashed record that you asked something

To stop the assistant being abused, we count how many questions come from one internet connection each hour. Your IP address is hashed before it is used — we keep a scrambled fingerprint and two numbers, never the address itself — and the record is discarded when the hour ends. The lawful basis is our legitimate interest in not having the service run up an unlimited bill.

What we do not do

Who else sees it

We use three services to run the site. Each is a processor acting on our instructions, and each is named here so you can look them up.

ServiceWhat it handlesWhere
NetlifyHosts the site; receives and stores enquiry form submissionsUSA, under standard contractual clauses
AnthropicReads your assistant questions and any attached plan in order to answerUSA, under standard contractual clauses
Google FontsServes the typefaces. Loading them sends your IP address to GoogleUSA

We are being straight about Google Fonts because most sites are not: fonts loaded from Google’s servers transmit your IP address to Google, and that is a transfer we could avoid by serving the files ourselves. We intend to.

If you tick the box consenting to it, we pass your enquiry to CheckYourTraders so a verified trade can contact you. That box is never pre-ticked, and the enquiry goes nowhere if you leave it alone.

How long we keep things

Your rights

Under the GDPR you can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to what we do with it, or to have it sent elsewhere. Ask through the enquiry form and we will act on it — we will not argue about it and we will not ask you why.

If you think we have handled your data badly you can complain to the Information and Data Protection Commissioner in Malta. You are entitled to do that without telling us first.

Changes

If this notice changes materially, the date below changes with it. There is no mailing list to tell you, because we do not run one.

Last updated .