Privacy Policy

Introduction

This privacy policy explains how StallSync ("we", "our", "us") collects, uses, and protects your personal information when you use our website (stallsync.co.uk) and services.

We are committed to protecting your privacy and being transparent about how we handle your data. This policy explains:

• What information we collect
• How we use it
• How we protect it
• Your rights regarding your data
• How to contact us with questions or concerns

StallSync is a platform that connects event hosts with stallholders. We are based in the United Kingdom and comply with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data controller for your personal information is:

StallSync
Email: help@stallsync.co.uk

This privacy policy was last updated on 4/2/2025. We may update this policy from time to time, and any changes will be posted on this page.

If you have any questions about this privacy policy or how we handle your personal information, please contact us at privacy@stallsync.co.uk.

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide to us, including:

• Email addresses when you sign up for our waitlist or newsletters
• Any additional information you choose to share when contacting us

Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and how you interact with our site:

Usage Data:

• Pages you visit on our website
• Time spent on each page
• Links and buttons you click
• Referral source (how you found our website)

Technical Data:

• IP address
• Browser type and version
• Device type
• Operating system
• Time zone setting

Cookies and Similar Technologies

We use cookies and similar tracking technologies to monitor website usage and improve your experience. These may include:

• Essential cookies necessary for the website to function
• Analytics cookies to understand how visitors use our site
• Performance cookies to help us improve our website

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit your ability to use some features of our website.

Third-Party Services

We use the following third-party services that may collect information about you:

• Analytics tools to understand website usage
• Email service providers to manage our mailing list

Each third-party service provider has their own privacy policy governing how they handle your data.

How We Use Your Information

Primary Uses of Your Data

We use your information for the following purposes:

To Provide and Improve Our Services

• To send you updates about StallSync's development and launch
• To notify you about changes to our service
• To improve our website based on your feedback and usage patterns
• To measure the effectiveness of our communication

To Communicate With You

• To respond to your inquiries
• To send you important updates about our service
• To provide customer support
• To send newsletters and marketing communications (where you have agreed to receive these)

To Analyze and Improve Our Website

• To understand how visitors use our website
• To identify and fix technical issues
• To improve the user experience
• To develop new features based on user behavior

Legal Bases for Processing

Under the UK GDPR, we process your personal data based on the following legal grounds:

Consent

• When you voluntarily provide your email address for our waitlist
• When you agree to receive marketing communications
• When you accept non-essential cookies

Legitimate Interests

• To improve our website and services
• To ensure the security of our website
• To analyze website usage and gather statistics
• To respond to your inquiries

Legal Obligation

• To comply with legal requirements
• To respond to legal requests from authorities
• To maintain appropriate business records

You have the right to withdraw your consent at any time. This won't affect the lawfulness of any processing carried out before you withdraw your consent.

Data Storage and Security

How We Store Your Data

We store your personal data on secure servers located within the United Kingdom and the European Economic Area (EEA). We use Supabase as our database provider, which maintains high security standards and compliance with data protection regulations.

Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Regular security training for our team
• Monitoring for suspicious activities
• Secure backup procedures

Data Retention

We keep your personal data only for as long as necessary to fulfill the purposes we collected it for, including:

Email Addresses

• Waitlist emails: Until service launch or you unsubscribe
• Marketing communications: Until you unsubscribe
• Support inquiries: Up to 2 years after last contact

Analytics Data

• Website usage data: 26 months
• Aggregated statistics: May be kept longer in anonymous form

Third-Party Processors

Some of our third-party service providers may process your data outside the UK/EEA. When this occurs, we ensure appropriate safeguards are in place through:

• Standard contractual clauses
• Data processing agreements
• Privacy Shield certification (where applicable)

Data Breaches

In the unlikely event of a data breach that risks your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours
• Inform affected individuals without undue delay
• Take steps to minimize any potential damage
• Document all aspects of the breach and our response

Your Rights

Under the UK GDPR, you have several important rights regarding your personal data. These rights include:

1. Right to Access

• Request a copy of your personal data that we hold
• Receive information about how we process your data
• Receive your data in a commonly used electronic format

2. Right to Rectification

• Ask us to correct any inaccurate personal data
• Have incomplete personal data completed
• Update your information at any time

3. Right to Erasure ('Right to be Forgotten')

• Request deletion of your personal data
• Have your data removed from our systems
• Stop receiving communications from us

4. Right to Restrict Processing

• Limit how we use your personal data
• Temporarily stop processing while we verify data accuracy
• Keep your data but not use it further

5. Right to Data Portability

• Receive your data in a structured, common format
• Transfer your data to another service provider
• Request direct transfer where technically feasible

6. Right to Object

• Object to processing based on legitimate interests
• Stop receiving direct marketing communications
• Object to processing for statistical purposes

7. Rights Related to Automated Decision Making

• Not be subject to decisions based solely on automated processing
• Request human intervention in automated processes
• Contest automated decisions

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: help@stallsync.co.uk

We will respond to all legitimate requests within one month. There is no charge for exercising these rights, but we may charge a reasonable fee or refuse to act on requests that are:

• Manifestly unfounded
• Excessive
• Repetitive

Additional Information

• You may need to provide identification to help us verify your identity
• If we refuse a request, we will explain why and inform you of your right to complain
• You have the right to lodge a complaint with the Information Commissioner's Office (ICO)

Website: ico.org.uk
Telephone: 0303 123 1113

We aim to resolve all queries directly, but you always have the right to contact the ICO if you are unhappy with our response to your rights request.

Contact Us

We welcome any questions, comments, or concerns about this privacy policy or how we handle your personal data.

How to Reach Us

Email: help@stallsync.co.uk

When to Contact Us

• You have questions about this privacy policy
• You want to exercise your data protection rights
• You need to report a data privacy concern
• You want to update your communication preferences
• You need help understanding how your data is used

We aim to respond to all inquiries within 5 business days.

Data Protection Officer

While we don't currently have a designated Data Protection Officer, our privacy team handles all data protection matters and can be reached at the contact details above.

Regulatory Authority

If you are unhappy with our response to any privacy matters, you can contact the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113
Postal Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF