Privacy Policy

stackgb ("we", "us") is a UK-based engineering consultancy. For the purposes of UK GDPR and EU GDPR, we act as the data controller for personal data submitted through this site — for example, via our contact form, newsletter sign-up, or a client review invite. Questions about this policy or your data can be sent through our contact form.

We collect only what's needed for the purpose you engaged with:

• Enquiries — name, email address, and company name, if you provide them; the content of any message you send us
• Client reviews — name, job title, company, email (optional), rating, project or engagement label, and the review text you submit via a review invite link
• Basic technical data (IP address, browser type) for rate-limiting and spam prevention
• UTM parameters and referrer, if present, to understand how you found us

We do not use tracking cookies, fingerprinting, or third-party ad networks beyond optional analytics you explicitly accept.

We use the following browser storage:

• Theme preference — your light/dark choice in local storage. Never sent to us.
• Admin session cookie — only if you sign in to our admin area. Not set for ordinary visitors.
• Privacy / analytics choice — whether you accepted analytics, stored locally so we respect your preference.
• Google Analytics 4 — only if you accept analytics on the privacy bar, and only when analytics is enabled for this site. We use IP anonymisation and do not use advertising cookies. You can choose “Necessary only” to refuse analytics.

Strictly necessary storage does not require prior consent under UK PECR; analytics runs only with your consent. Fonts are self-hosted at build time.

We process this data on the basis of:

• Legitimate interest — responding to enquiries, operating the site securely, and handling review submissions we receive
• Consent — optional further communication, analytics (if you accept), and publishing a client review on our website when you tick the consent box on the review form (you can withdraw that consent later)

If you submit a review and consent to publication, we may show your name, job title, company, rating, project label, and quote on the stackgb.com landing page and related pages about our work. Email addresses submitted with a review are used to contact you about that review if needed and are not displayed publicly. To withdraw consent or ask us to remove a published review, use our contact form — we will act within a reasonable time.

Enquiry and review data is stored with Supabase, our database provider, on infrastructure within the EU/UK where available. We do not sell, rent, or share personal data with third parties for marketing purposes.

Enquiry data is retained for as long as needed to respond to you and maintain a record of the engagement, and is deleted on request or after a reasonable period of inactivity. Published reviews are kept while they remain on the site, or until you ask us to remove them or we unpublish them. Unpublished review records may be retained for a reasonable period for moderation history, then deleted.

Under UK GDPR and EU GDPR, you have the right to access, correct, delete, or export the personal data we hold about you, and to object to or restrict how it's processed — including withdrawing consent for a published review. To exercise any of these rights, get in touch through our contact form — we'll respond within one month. If you're unsatisfied with how we've handled a request, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local EU data protection authority.

We'll update the date at the top of this page if this policy changes materially.