Privacy notice

This notice explains how Stanley Business collects and uses personal data, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Stanley Business (stanleybusiness.co.uk) is the data controller for the personal data described here. Contact: hello@stanleybusiness.co.uk. [Company name, registered address and ICO registration number to be added.]

What we collect

• Account details: name, email, password (stored only as a secure hash), and optionally phone number and postcode.
• Bookings, orders and quote requests: what you booked or bought, when, your contact details, delivery address (for delivery orders), and messages you send.
• Reviews and enquiries you write, and the business’s replies.
• Business information for businesses that list with us, including contact details of the people who run the account.
• Technical data: IP address, and records of sign-in attempts used to protect accounts from attack; basic server logs.
• Location: if you search by postcode we convert it to an approximate location using postcodes.io. We don’t track your device’s location.

Card payments are handled by Stripe. We never receive your full card number.

How and why we use it (lawful bases)

• To provide your account, bookings, orders and quote requests, and pass the necessary details to the business you’re dealing with (contract).
• To send service emails such as booking confirmations, order receipts and quote notifications (contract).
• To keep the platform secure, prevent fraud and abuse, and moderate reviews (legitimate interests).
• To keep financial records (legal obligation).
• We will only send marketing emails if you’ve opted in (consent), and you can unsubscribe at any time.

Who we share it with

• Businesses you book with, buy from, review, request quotes from or contact. They become controllers of the data they receive and must handle it lawfully.
• Service providers who help us run the site: website hosting, Stripe (payments), our email provider, OpenStreetMap (map tiles shown on business pages) and postcodes.io (postcode lookup). They act on our instructions.
• Authorities, where the law requires it.

We never sell your personal data. Where a provider processes data outside the UK we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

How long we keep it

Account data is kept while your account is open and for up to 12 months after closure. Order and payment records are kept for 6 years for tax purposes. Sign-in security records are kept for up to 90 days. Published reviews remain until you or we remove them.

Cookies

We use only essential cookies: a secure session cookie to keep you signed in, and security cookies used by the sign-in system. Your shopping bag is stored in your own browser (local storage). We don’t use advertising or tracking cookies. If we add analytics in future, we’ll ask for your consent first.

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise these rights email hello@stanleybusiness.co.uk. You can update most details yourself in your account settings.

If you’re unhappy with how we use your data, please contact us first. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk, 0303 123 1113.

Changes

We’ll update this notice when our practices change and show the date of the latest version above.