Privacy
Privacy policy
This policy explains what happens to the information you give Stack22 through the "Start a project" form at start.stack22.co.uk, and when you get in touch with us about a project. It's written to be read, so if anything isn't clear, email tech@stack22.co.uk.
Who we are
Stack22 is the trading name of Victoria Nesbitt, a sole trader based in the United Kingdom, who is the data controller for the information described here. You can contact us at tech@stack22.co.uk.
What we collect
- What you tell us in the form: your name, email address, and optionally your phone number and role; your business name, website and what it does; and whatever you choose to share about how things work today, the tools you use, and what you need. Most questions are optional.
- A few technical details: how long the form took to complete, and the date and time you sent it. We use these to spot automated spam.
- What we don't keep: we don't store your IP address. To limit spam we keep a one-way scrambled version of it for up to an hour, which can't be turned back into your address. The form doesn't use advertising or tracking cookies. Your answers are saved in your own browser as you go, so you don't lose them if you refresh; they're cleared when you send the form.
Why we use it
We use your information to understand your enquiry, reply to you, prepare for a conversation about your project and, if we go ahead, to set up our work together. The legal basis is that you've asked us to consider working with you (taking steps at your request before entering into a contract), and our legitimate interest in running and protecting our business. We won't add you to a mailing list or use your information for marketing without asking separately.
Preparing for our first conversation
To prepare for a first call we may use an AI tool to summarise your answers, look at your business's public website, and draft questions to ask you. This only happens when we choose to do it for a specific enquiry; it's never automatic, and it never makes decisions about you. The AI provider processes this information on our behalf and doesn't use it to train its models.
Who else handles it
We use a small number of trusted service providers who handle information only on our instructions and are bound to keep it secure:
- Website hosting, for this form.
- A security service that checks the form is being filled in by a person, not a bot.
- Database hosting for our business system, where your enquiry is stored. It's held in the UK.
- An email service that sends us a short notification when a new enquiry arrives. The notification doesn't include your detailed answers.
- An AI service, as described above, when we prepare for a call.
Some of these providers are based in, or use servers in, the United States. Where information leaves the UK, it's protected by the safeguards UK data protection law requires, such as the UK–US data bridge or approved contractual clauses. If you'd like to know who our providers are, just ask.
We never sell your information.
How long we keep it
Enquiries that turn out to be spam are deleted within 30 days. Other enquiries are kept for as long as we need them to reply and follow up. We review them regularly and delete those that don't lead to work. If we go on to work together, your details become part of our client records and are kept for as long as needed for that work and our legal and accounting obligations.
Your rights
You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Just email tech@stack22.co.uk. We'll reply within one month. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, but we'd appreciate the chance to put things right first.
Changes to this policy
If we change how we handle your information, we'll update this page and the date at the top.