Privacy Policy
Last updated: 19 October 2026
The short version
- We only collect what we need to reply to you, provide our services and get paid.
- We never sell your information.
- Card payments are handled by Stripe. We never see or store your full card number.
- Our website doesn't use advertising or tracking cookies.
- You can ask to see, correct or delete your information at any time.
1. Who we are
Stackless is run by Daham Mohammed, a sole trader based at 3 Clemens Street, Leamington Spa, CV31 2DW. We are the "controller" of the personal information described in this policy, which means we decide how and why it's used.
Questions about your information? Email hello@stackless.co.uk or message us on WhatsApp at 07585 155557.
2. What we collect and why
| Information | Why we use it | Legal basis |
|---|---|---|
| Enquiries: your name, business name, email, phone number, type of business, the plan you're interested in and your message, from our contact form or WhatsApp. | To reply to you, arrange a chat and prepare a quote. | Our legitimate interests in responding to businesses that contact us, and taking steps at your request before a contract. |
| Client details: your name, business name, address, email, phone number, website and domain details, plan, and messages and change requests. | To build and run your website and services, support you and manage your account. | Performing our contract with you. |
| Billing information: plan, invoices, payment status and billing address. Card details are collected and held by Stripe, not us. | To take payments, send invoices and receipts, and handle failed payments. | Performing our contract with you, and our legal obligations (tax and accounting records). |
| Service emails: trial reminders, payment notices, price-change notices and important account updates. | To keep you informed about your account and services. | Performing our contract with you. |
| Occasional updates about new features or services that may help your business. | To tell existing clients and businesses that contacted us about relevant improvements. You can opt out any time. | Our legitimate interests in growing our business. |
| Technical information: IP address, browser and device type and pages requested, recorded by our hosting provider's security and performance systems. | To keep our website and services secure, working and protected from abuse. | Our legitimate interests in running secure services. |
You don't have to give us any information, but if you don't, we may not be able to reply to you or provide our services.
3. Your customers' information
If you're a client, your website may collect information from your own customers (for example bookings, orders or enquiries). For that information, you are the controller and we act as your processor: we only use it to provide our services to you, keep it secure, and delete it when our service ends. Details are in section 12 of our Terms of Service. Your customers should contact you about their information, and we'll help you respond.
4. Who we share it with
We never sell your information. We only share it with trusted providers that help us run our services, and only as much as they need:
- Cloudflare: hosts our websites, client websites, database and security systems.
- Stripe: processes card payments, subscriptions and invoices.
- WhatsApp (Meta): if you contact us on WhatsApp, your messages are handled by WhatsApp under its own privacy policy.
- Google: provides the fonts on our website (your browser connects to Google to load them) and our email service (Gmail).
- Our email sending provider: to send account and billing emails.
- Professional advisers such as an accountant, where needed.
We may also share information if the law requires it, to protect our rights, or with a business that takes over our services (in which case we'll tell you).
5. International transfers
Some of our providers (such as Cloudflare, Stripe, Meta and Google) may process information outside the UK, including in the United States. When that happens, we rely on the legal safeguards those providers put in place, such as the UK's approved data transfer agreements or the UK extension to the EU-US Data Privacy Framework.
6. How long we keep it
- Enquiries that don't become clients: up to 2 years after our last contact, then deleted.
- Client details and messages: while you're a client, then up to 2 years after your service ends.
- Billing and invoice records: 6 years after the end of the tax year they relate to, as required for tax purposes.
- Your customers' data on your website: deleted within 90 days after your service ends, unless you ask us to return it first.
- Technical logs: kept only briefly by our hosting provider for security.
7. Cookies
Our website doesn't use advertising, analytics or tracking cookies. If you log in to your client account, we use a cookie that's strictly necessary to keep you signed in. Our hosting provider may set a security cookie to protect the site from bots. These don't need your consent because the services can't work without them.
If we ever add analytics or other optional cookies, we'll ask for your consent first and update this policy.
8. Keeping it secure
We use secure, encrypted connections (HTTPS), reputable providers, strong passwords and two-factor authentication, and we limit access to personal information to what's needed. No system is completely secure, but if a data breach ever affects you in a way that's likely to put you at risk, we'll tell you and the ICO as the law requires.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct information that's wrong or incomplete;
- ask us to delete your information;
- object to us using your information based on legitimate interests, including for updates and marketing;
- ask us to restrict how we use your information;
- ask for your information in a format you can take elsewhere.
Some rights only apply in certain situations. To use any of them, contact us using the details in section 1. We'll reply within one month and won't usually charge a fee.
10. Complaints
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make important changes that affect our clients, we'll let them know by email.