Privacy Policy

Who we are

Stack Audio Limited (“Stack Audio Ltd”, “we”) is the data controller for personal data collected through this website. We are registered in England and Wales, company number 07589427.

Registered office: Unit 4 Block 4, Forde Court, Newton Abbot, Devon, TQ12 4BT, United Kingdom
Privacy contact: info@stackaudio.co.uk

We have not appointed a data protection officer. Questions about this policy or your data go to the address above.

What we collect, and why

Orders: your name, email address, billing and delivery addresses, phone number (optional), the items you buy, any order notes you add and your answer to “How did you hear about us?”. Legal basis: performance of a contract. We need your name, address and email to sell to you; without them we cannot take or deliver your order. Payment card details never reach our systems. They go directly to our payment provider.
Payment and fraud screening: Stripe screens card payments automatically for fraud and may decline one. If that happens to you, contact us and a person will look at it. Legal basis: legitimate interest in preventing fraud.
Customer accounts: your name, email, a securely hashed password and saved addresses. Legal basis: performance of a contract (you choose whether to hold an account).
Enquiries: messages sent through our contact form or by email, with your name and email so we can reply. Legal basis: legitimate interest in answering you.
Live chat: the LiveChat service loads on every page, a few seconds after it opens, so our team can see that someone is browsing and which page they are on, and offer help. LiveChat sees your IP address, approximate location and the pages you view. If you use the chat, we keep your messages and any name or email you give. Legal basis: legitimate interest in helping visitors to our shop.
Newsletter: your email address, with a record of when and with what wording you subscribed. Legal basis: consent, withdrawable at any time via the unsubscribe link or by contacting us.
Cookie consent: a record, under a random ID, of the cookie choices you make in our consent banner. Legal basis: legal obligation (demonstrating consent).
Prices for your country: to show prices with the right currency and VAT, we look up which country your IP address belongs to, using a copy of the free IP geolocation by DB-IP database held on our own server. The address is not stored or sent anywhere, and nothing is recorded. Legal basis: legitimate interest in showing you the price you will pay.
Site security: our forms use Cloudflare Turnstile to block automated abuse. We also briefly record IP addresses against request counts for checkout, registration, reviews and order tracking, to stop abuse. Legal basis: legitimate interest in keeping the site secure.
Analytics & advertising: only with your consent (see our Cookie Policy), we record the pages and products you view, what you add to your basket, where your visit came from (including any advert ID in the link), your browser and device details (user-agent), and your country and region, in our own database under a random visitor ID. When you give us your email address or phone number (at checkout, in your account or when signing up to our newsletter) we store a one-way scrambled (hashed) copy of it against that ID, so we can see which visits led to your order. We use this to understand which channels bring us customers. Legal basis: consent. We may later also measure advertising through Google, Meta and Microsoft tools; these are switched off at present.

Where we get data from

Most of what we hold you give us directly. We also receive personal data from:

newsletter sign-ups made through Mailchimp;
accounts and orders carried over from our previous website;
delivery updates from our warehouses and carriers;
photographs you email us for reviews.

Reviews and customer photographs

After an order we may email you to ask whether you would like to leave a review. We send these requests on the basis of our legitimate interest in hearing how our products work for customers, and every one has a one-click link to stop us asking you again. Leaving a review is entirely optional — choosing not to affects nothing about your order, your warranty or any future purchase.

If you write a review, we publish it on this website, together with the name you give us and the product it relates to. You choose what name to give; if you would rather not be identified, give a first name only or ask us to publish it without a name. Reviews are read by a person before they appear.

We sometimes also publish a photograph of your equipment. We never take one from you automatically — our review form cannot accept files. A photograph only reaches us if you send us one, and we ask you separately before using it. You are free to say no, and we will simply publish the review without it, or not at all if you prefer.

Our basis for publishing your review, your name and any photograph is your consent. You can withdraw that consent at any time, without giving a reason, by emailing info@stackaudio.co.uk. We will remove the review from the site.

Published reviews stay on the site until you ask us to remove them. If you delete your account, a published review stays without your name. A review that has been quoted elsewhere — in print, or by a publication that has written about us — may continue to appear in that third party’s material, which is outside our control.

We share personal data only with organisations that need it to do their job for us, or where the law requires, and only the minimum each needs:

Stripe (card payments): receives your payment details directly from you, plus your email and our order reference. Stripe also screens payments for fraud.
PayPal (PayPal and Pay Later): if you choose PayPal, you give your details to PayPal directly, and its own privacy notice applies.
Resend (United States): delivers our order and account emails.
Microsoft 365: our email inbox, which receives messages sent through our contact form and emails you send us.
Mailchimp (Intuit, United States): holds our newsletter list.
LiveChat (Text S.A., Poland): runs our live chat, if you open it.
Zapier and SOS Inventory (both United States): paid orders pass through Zapier to SOS Inventory, which we use for stock and accounting.
Railway: hosts this website and its database. Our servers are in Railway’s EU West region.
Cloudflare: Turnstile form protection, storage of images (including review photographs) and protection of the site against attack.
Fulfilment partners: Littledart Fulfilment (UK), Hexspoor E‑Fulfilment (Netherlands), eFulfillment Service (United States) and Express Fulfillment (Australia). Each receives only the orders it dispatches: your name, delivery address, email, phone number and the items ordered.
Delivery carriers: your name, address and contact details, so parcels reach you.
17TRACK (China): receives your tracking number and our order number, so you can follow your parcel.
Customs authorities in the destination country receive your name, address and the contents of your parcel on the customs declaration. We also share data with HMRC and other authorities where the law requires.
Analytics & advertising platforms: Google, Meta and Microsoft receive usage data only if you consent to those cookies. They are switched off at present.

We never sell personal data.

International transfers

Some of the organisations above process data outside the UK: in the EU (which the UK recognises as giving adequate protection), the United States, Australia and China.

Where we transfer data outside the UK we use appropriate safeguards, such as the UK–US Data Bridge for certified US companies, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Ask us for details.

How long we keep it

Order records: 7 years from the order date, then anonymised. The financial record is kept; it no longer identifies you.
Customer accounts: until you delete your account (see below) or ask us to.
Enquiries: deleted after 2 years.
Live chat transcripts: 24 months.
Newsletter: until you unsubscribe. After that we keep your address for 12 months so we don’t email you by mistake. Mailchimp keeps its own record of unsubscribed addresses.
Copies of emails we send you: 2 years.
Reviews: published reviews, and any photograph you have allowed us to use, are kept until you withdraw consent or ask us to remove them.
Site analytics: 26 months. Where your browsing led to an order, that record is kept as long as the order record is. You can ask us to delete it sooner, and withdrawing consent stops any further recording.
Consent records: 26 months, or as long as the data that relies on them.
Security IP records: 30 days.

Your rights

Under UK GDPR (and the EU GDPR if you are in the EU) you can access, correct, export, delete, restrict or object to our use of your personal data. You can object to direct marketing at any time. Where we rely on your consent you can withdraw it at any time; this does not affect what we did before you withdrew it. Much of this is self-service:

Download your data: from your account page (“Download my data”). The export covers your account, orders, messages, newsletter record and reviews. For anything else we hold, including browsing records, email us.
Delete your account: also on your account page. Your personal details are removed and you are unsubscribed from our newsletter. Order records are kept for tax purposes but anonymised so they no longer identify you, and published reviews stay without your name.
Correct your details: edit them in your account, or contact us.
Cookie choices: change them any time via “Cookie Settings” in the site footer.

Automated decisions: the only automated decision about you is Stripe’s fraud screening of card payments. If a payment is declined, ask us and a person will review it.

For anything else, email info@stackaudio.co.uk. We respond within one month. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office at ico.org.uk, or, if you are in the EU, to your local data protection authority.

Changes to this policy

We will post any changes on this page. Last updated: 29 September 2026.