Legal

Privacy Policy

Last updated: 5 July 2025

1. Who We Are

StockLeads Ltd (“StockLeads”, “we”, “us”, “our”) operates the website stockleads.co.uk. We are registered in England and Wales. For data protection enquiries, contact us at: privacy@stockleads.co.uk.

2. What Data We Collect

Account and Subscription Data: Name, email address, telephone number, subscription tier, and payment references (no card details — these are held by Stripe).

Business Lead Data: When you use our service, we process lead data provided by sellers, including their name, email, telephone, and stock details. This is business contact information only — we do not process consumer data on behalf of sellers.

Usage Data: IP address, browser type, pages visited, and timestamps collected through standard server logs and analytics tools.

Communication Data: Emails you send to us, and records of leads sent to you via our platform.

3. Legal Basis for Processing (UK GDPR)

  • Contract performance: To fulfil your subscription and deliver lead information.
  • Legitimate interests: To operate, maintain, and improve our service; to prevent fraud.
  • Legal obligation: To comply with tax, financial, and regulatory requirements.
  • Consent: For optional marketing communications and WhatsApp notifications, which you may withdraw at any time.

4. How We Use Your Data

  • Delivering qualified stock leads to your inbox and dashboard
  • Managing your subscription and processing payments via Stripe
  • Sending account and service communications (e.g. subscription confirmations, payment receipts)
  • Providing access to your subscriber dashboard
  • Complying with legal obligations

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe: Payment processing and subscription management
  • Supabase: Authentication and database hosting
  • Resend: Transactional email delivery
  • Vercel: Hosting infrastructure

All third-party processors are contractually bound to process data only on our instructions and in accordance with applicable data protection law.

6. Data Retention

We retain your personal data for as long as your account is active, plus:

  • Financial records: 7 years (legal requirement)
  • Lead data: 3 years from date of delivery
  • Account data: 2 years after account closure

7. Your Rights (UK GDPR)

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erasure (“right to be forgotten”) in certain circumstances
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (without affecting prior processing)

To exercise any right, email: privacy@stockleads.co.uk. We will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use only essential cookies required for authentication and session management. No advertising or tracking cookies are used.

9. Security

We implement appropriate technical and organisational measures to protect personal data, including TLS encryption, access controls, and regular security reviews.

10. Changes to This Policy

We may update this policy. Material changes will be notified by email to active subscribers. Continued use of the service after changes constitutes acceptance.