Privacy Notice

This Privacy Notice describes how George Simpson (trading as STAMPT) (“STAMPT”, “we”, “us”) collects and processes personal data when you use the STAMPT website and service at stampt.co.uk.

STAMPT acts as the data controller for the personal data described in this notice. If you have any questions, contact us at hello@stampt.co.uk.

• Account data — name, email address, hashed password (or third-party auth identifier, e.g. Google).
• Carnet content — equipment lists, serial numbers, photos, descriptions and any other information you add to your carnets.
• Support data — messages you send us and their metadata.
• Usage and device data — IP address, browser type, device identifiers, pages viewed, actions taken, approximate location derived from IP, timestamps.
• Cookies and similar technologies — see the Cookie Notice below.

Payment details (card number, billing address) are collected and processed directly by Paddle as our Merchant of Record — we do not store full card details.

• Provide the service (create your account, store and generate carnets) — performance of a contract.
• Customer support — legitimate interests in helping users and improving the service.
• Security and fraud prevention — legitimate interests and legal obligations.
• Product analytics and improvement — legitimate interests in understanding how STAMPT is used.
• Marketing emails (if you opt in) — consent, which you can withdraw at any time.
• Compliance with law — legal obligation (tax, accounting, responding to lawful requests).

• Hosting & infrastructure — our cloud database, file storage and hosting providers (subprocessors).
• Paddle.com Market Limited — our Merchant of Record, handles payments, billing, subscription management, tax compliance, invoicing and refunds.
• Email & support tooling — providers that deliver transactional emails and run our support inbox.
• Analytics providers — to understand product usage (aggregated where possible).
• Professional advisers — legal, accounting and similar advisers where reasonably required.
• Authorities — where we are required to by law or to protect our rights.

We do not sell your personal data.

Some of our providers are located outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or transfers to countries covered by an adequacy decision.

We keep account and carnet data for as long as your account is active. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we are legally required to keep it (for example, billing records kept for tax purposes for up to 7 years).

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• request deletion of your data;
• restrict or object to our processing;
• portability of data you provided to us;
• withdraw consent (where processing is based on consent);
• complain to the UK Information Commissioner’s Office (ico.org.uk).

We will respond to requests within one month. Email hello@stampt.co.uk to exercise any of these rights.

We use appropriate technical and organisational measures to protect personal data — including encryption in transit (HTTPS), encryption at rest where supported by our providers, access controls, and audit logging. No system is perfectly secure, but we take reasonable steps to keep your data safe.

STAMPT uses cookies and similar technologies (local storage, session storage) on stampt.co.uk. We use the following categories:

• Strictly necessary — required for the site to work, e.g. authentication tokens that keep you signed in, security and load-balancing cookies. These cannot be turned off.
• Functional — remember your preferences (e.g. the current carnet you are editing).
• Analytics — help us understand how STAMPT is used so we can improve it. Set only where permitted.
• Payment provider cookies — Paddle sets cookies during checkout to process your payment and prevent fraud.

We do not use advertising or cross-site tracking cookies. You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of STAMPT from working (for example, signing in).

We may update this notice from time to time. Material changes will be highlighted on this page, and we will update the “last updated” date at the top.

Questions or complaints about this notice or our handling of your data: hello@stampt.co.uk.