Privacy notice

Last updated 26 July 2026

Who we are

Graftable is operated by Cascade, a marketing business based in Jersey, which is the data controller for the information described here. You can reach us at hello@graftable.app.

Using Graftable without an account

You don't need an account to check today's verdict, and we don't ask who you are to show it. The parish and trade you pick are carried in the web address so the page can answer you and so the link works if you send it on — they aren't tied to your name.

What we collect if you make an account

  • Your name, email address and company name.
  • Whether you run the business or work for someone.
  • Your job sites — the parish and trade for each — and your working days.
  • A mobile number, only if you choose to give one.
  • Your password, stored only as a cryptographic hash. We never see or hold the password itself.

Why we hold it, and on what basis

To give you the service you asked for: the week's forecast for your sites, and the night-before no-go alert. That processing is on the basis of performing our agreement with you.

We also use it to contact you about Cascade, as described below. That is on the basis of our legitimate interest in offering our services to local trades, and you can object at any time.

Cascade sees your account details

This is the part worth reading. Graftable is built and paid for by Cascade, and when you finish setting up an account your name, email, company, role, trade and parish are passed into Cascade's own customer system.

If you look like a trade Cascade could help, we may contact you once to introduce ourselves. If you'd rather we didn't, reply to any message or email hello@graftable.app and that's the end of it. Your Graftable account keeps working either way, unchanged.

We do not sell your details, and we do not pass them to anyone else for their own marketing.

Who else processes it

We use a small number of suppliers to run the service, who process data only on our instructions: Vercel (hosting), Turso (database), Resend (sending email) and WeatherAPI.com (forecast data). Forecast requests identify a parish, not a person.

Cookies

Graftable sets one cookie, and only once you log in: a sign-in token that keeps you logged in for 30 days. It is strictly necessary for the service to work, so we don't ask for consent for it. There is no advertising or third-party tracking on this site.

How long we keep it

For as long as your account exists. Ask us to delete it and we will remove your Graftable account and its data. Records already held in Cascade's customer system are removed on request too — just say so.

Your rights

Under the Data Protection (Jersey) Law 2018 you can ask for a copy of what we hold, ask us to correct or delete it, or object to us using it to contact you about Cascade. Email hello@graftable.app and we'll deal with it.

If you think we've got it wrong, you can complain to the Jersey Office of the Information Commissioner at jerseyoic.org.

Changes

If this notice changes in a way that matters, we'll say so on this page and update the date at the top. See also our terms of use.