This page explains what personal information Stallkeep holds, why, who it is shared with, and your rights. Stallkeep is run by Design Studio Lab Ltd (company number 11222280), 2 Damara Way, Ashford TN25 7FD. For anything about your data, email [email protected].
Two kinds of information
- Shop owners and their staff. When you open a Stallkeep shop, we decide how your account details are used, so we are the controller of them.
- A shop's customers. When you buy from a shop that runs on Stallkeep, that shop decides how your details are used and is the controller. Stallkeep stores and processes them for the shop, as its processor, and only on its instructions. Questions about an order or your data should go to the shop first; its contact details are on its website.
What we hold
- Account details: name, email address, password (stored scrambled, never readable), two-step sign-in settings, and which shop you work in.
- Shop records: products, stock, orders, invoices, customers, messages and reviews that the shop keeps in Stallkeep.
- Technical records: sign-in times, IP addresses and an activity log of changes, kept to protect accounts and find faults.
- Billing records if a shop buys a plan or AI credits: what was bought and when. Card details are handled by Stripe and never reach us.
- Messages you send through the contact or partner forms on this website: your name, email address, shop or organisation name and what you wrote, so we can reply (legitimate interests).
Why we use it
- To run the service a shop has signed up for (contract).
- To keep accounts and shops secure, prevent fraud and spam, and fix problems (legitimate interests).
- To keep financial records the law requires (legal obligation).
- To send service emails such as sign-in codes, invitations and alerts. We don't send marketing to shop owners without asking first.
Who we share it with
We use these companies to run Stallkeep. Each only gets what it needs for its job:
- IONOS: hosting the website and databases.
- Cloudflare: delivering pages securely and quickly, and the "I'm not a robot" check on some forms.
- Brevo: sending emails.
- Stripe and PayPal: taking payments. Shops connect their own accounts for their customers' payments.
- Parcel2Go and other couriers a shop connects: making shipping labels, which need the delivery address and any delivery instructions or safe place the shopper gave.
- AI services (Anthropic, Google and OpenAI): only when a shop uses an AI tool, such as writing a product description or drafting a reply to a customer message. They receive what the tool needs and, under our agreements with them, don't use it to train their models. DeepSeek is only ever sent product text and photos, never anyone's personal details.
- Google analytics and advertising tags appear on a shop's website only if that shop turns them on, and only after a visitor agrees in the cookie banner.
Some of these companies are outside the UK, mainly in the US. Where that happens, the transfer is covered by the UK's adequacy rules or by standard contract clauses approved for UK data.
How long we keep it
Account details and the activity log are kept while the account is open. Financial records such as orders and invoices are kept for six years, as UK tax law requires. Server logs are kept for a short time. Messages from our website forms are kept while we answer and follow up, and you can ask us to delete them at any time. When a shop closes, we delete its records once any period the law requires us to keep them has passed.
Cookies
Stallkeep uses cookies that are needed to sign in, keep your basket and keep forms secure. Shops may add analytics or advertising cookies; those only run if you agree in the shop's cookie banner, and you can change your mind there.
Your rights
You can ask to see the personal information we hold about you, to correct it, to delete it, to limit or object to how it's used, or to get a copy to take elsewhere. Email [email protected]. If your details are held for a shop, we'll pass your request to that shop and help it answer. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If we change this page in a way that matters, we'll tell shop owners by email before the change takes effect.