1. Who we are

We operate stacklist.co.uk — a directory of SaaS tools for UK businesses. As a data controller, we are responsible for your personal data under the UK GDPR and the Data Protection Act 2018. If you have questions about this policy, contact privacy@stacklist.co.uk.

2. What data we collect

Information you provide: When you submit a tool listing, subscribe to our newsletter, or contact us, we collect your name, email address, company name, and website URL.

Usage data: We collect anonymised data via privacy-friendly analytics (Plausible) that uses no cookies and collects no personal data. This includes pages visited, referral source, and device type — aggregated only.

Contact form: When you submit our contact form, your name, email, and message are stored in our database to help us respond.

3. How we use your data

We use your data to: process listing submissions, send the newsletter (opt-in only — you can unsubscribe at any time), respond to enquiries, and improve the site based on aggregated usage patterns.

We never sell your data to third parties. We don't share personal data with advertisers or data brokers.

4. Data storage and security

Data is stored in Supabase (West Europe — London, UK), ISO 27001 certified and GDPR compliant. All data is encrypted in transit (TLS 1.3) and at rest. Access to production data is restricted to authorised team members only.

5. Data retention

We keep contact form submissions for 12 months after the last correspondence. Newsletter subscriber data is kept until you unsubscribe. Analytics data is retained for 26 months (standard retention period).

6. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (right to be forgotten)
• Object to processing of your data
• Request transfer of your data (data portability)

To exercise any of these rights, email privacy@stacklist.co.uk — we'll respond within 30 days as required by law.

7. Cookies

StackList does not use tracking cookies. Our analytics tool (Plausible) is cookieless and GDPR-compliant — no cookie banner needed. No Google Analytics, no Facebook Pixel, no third-party trackers. Some outbound affiliate links may use vendor cookies (e.g., HubSpot, Slack) — we don't control those.

8. Third-party links

This site contains links to third-party tools and services. We are not responsible for their privacy practices. Please read their privacy policies before providing personal data.

9. Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top and notify users via a site notice. We recommend checking this page periodically.