Privacy Policy
How we handle personal information submitted through this website, and the rights you have over it under UK data protection law.
Draft: pending legal review
This document accurately describes how this website operates, but it has not yet been reviewed by a qualified adviser and some company details are still outstanding. Have it checked before relying on it.
Last updated:
Who we are
This website, rbstackworks.com, is operated by RB STACKWORKS LTD, a company registered in England & Wales under company number 17485375, with its registered office at Suite RA01, 195-197 Wood Street, London, E17 3NU.
For the purposes of UK data protection law we are the data controller for personal information collected through this website. Our ICO registration number is ZC260553.
What this policy covers
This policy covers this website only. Our products are separate services with their own privacy information:
- Care360 processes personal data on behalf of the care providers who use it. In that relationship the care provider is the data controller and RB Stackworks acts as a data processor under a written agreement. If you are a person supported by a service that uses Care360, or a member of its staff, your provider is responsible for telling you how your information is used. Please contact them in the first instance.
- Public Dripper publishes its own privacy information covering customer accounts, orders and payments on its own site.
Information we collect
Information you give us
When you complete the enquiry form on our contact page, we collect the name, email address, organisation (if you provide one), enquiry category and message content that you submit.
Information collected automatically
- Technical logs. Our hosting provider records standard server information such as IP address, browser user-agent, requested URL and timestamp. These logs are used for security, abuse prevention and diagnosing faults.
- Spam prevention. When you submit the enquiry form we store a one-way cryptographic hash of your IP address alongside your enquiry, together with your browser user-agent. The hash lets us recognise repeated submissions from the same source without retaining the IP address itself.
- Analytics. If analytics are enabled on this site they load only after you have given consent. See our Cookie Policy.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and any follow-up correspondence | Legitimate interests: responding to someone who has contacted us |
| Keeping a record of enquiries received, for continuity and to confirm what was asked and answered | Legitimate interests: running the business and its records |
| Preventing spam and abuse of the enquiry form | Legitimate interests: securing our systems |
| Website analytics, where enabled | Consent: which you can give or withdraw at any time |
We do not use your information for marketing, we do not sell it, and we do not use it for automated decision-making or profiling.
Who we share it with
We use a small number of service providers that process data on our instructions under contract:
| Provider | Purpose |
|---|---|
| Vercel | Website hosting and content delivery |
| Supabase | Database storage for enquiries received |
| Resend | Delivering enquiry notifications to our business inbox |
We may also disclose information where we are required to by law, or where it is necessary to establish, exercise or defend legal claims.
International transfers
Some of our service providers operate outside the United Kingdom. Where personal information is transferred outside the UK, we rely on the safeguards those providers put in place, such as UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguards applying to a specific transfer.
How long we keep it
- Enquiries: retained for up to 24 months from your last contact with us, then deleted, unless the enquiry has become part of an ongoing commercial relationship or we are required to retain it for longer.
- Technical logs: retained for the shorter periods set by our hosting provider, typically measured in days or weeks.
How we protect it
Information is transmitted over HTTPS and stored in managed services that encrypt data at rest. Access to stored enquiries is restricted to server-side application code and to the people who need it; the credentials that permit that access are never exposed to your browser. You can read more about our approach on our technology page.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information in certain circumstances;
- ask us to restrict how we use your information, or object to our use of it where we rely on legitimate interests;
- ask us to transfer your information to another organisation in certain circumstances;
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, email hello@rbstackworks.com. We will respond within one month. There is no charge.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk/make-a-complaint.
Changes to this policy
We update this policy when our practices change. The date at the top of this page shows when it was last revised.
Contact
Questions about this policy or about how we handle personal information: hello@rbstackworks.com. For anything else, hello@rbstackworks.com or our contact form.