Last updated: May 2025

1. Who We Are

Stacked Worldwide Ltd is the data controller for personal data collected through this Site. Registered in England and Wales. Registered office: 20-22 Wenlock Road, London, N1 7GU.

We are committed to handling your personal data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect the following personal data when you use this Site:

• Contact enquiries: Name, email address, and any information you provide voluntarily through our contact or enquiry form.

• Newsletter sign-ups: Email address.

• Usage data: IP address, browser type, pages visited, and time spent on the Site — collected automatically via cookies and analytics tools.

We do not collect sensitive personal data and we do not knowingly collect data from individuals under the age of 18.

3. How We Use Your Data

We use your data to:

• Respond to enquiries and assess potential commercial opportunities

• Send our newsletter to subscribers who have opted in

• Improve the performance and user experience of our Site

• Comply with any legal obligations

We will never sell your personal data to third parties. We will never use it for purposes incompatible with those listed above.

4. Our Legal Basis for Processing

PurposeLegal BasisResponding to enquiriesLegitimate interests / pre-contractual stepsNewsletterConsentSite analyticsLegitimate interestsLegal complianceLegal obligation

5. Cookies

Our Site uses cookies to understand how visitors use it and to improve their experience. These include:

• Essential cookies: Required for the Site to function.

• Analytics cookies: Help us understand traffic and usage patterns (e.g. Google Analytics).

You can control cookie preferences through your browser settings at any time. A cookie consent banner on the Site allows you to manage non-essential cookies on your first visit.

6. Data Retention

We retain personal data only for as long as necessary:

• Enquiry data: up to 2 years from last contact, unless a commercial relationship develops

• Newsletter subscriber data: until you unsubscribe

• Analytics data: as set by the relevant analytics platform (typically 26 months)

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you

• Correct inaccurate data

• Erase your data ("right to be forgotten")

• Restrict or object to our processing of your data

• Portability — receive your data in a portable format

• Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, contact us. We will respond within one calendar month.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. No method of transmission over the internet is 100% secure, but we take this responsibility seriously.

9. Third-Party Services

We may use third-party services to help operate the Site (e.g. email platforms, analytics providers). These parties process data only on our instruction and are bound by appropriate data processing agreements.

10. International Transfers

Where we use third-party tools that transfer data outside the UK or EEA, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published here with an updated date. Material changes will be communicated where we hold your contact details.

12. Contact & Complaints

For any privacy-related queries, contact us.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO) ico.org.uk | 0303 123 1113