Privacy Policy
Stokkap - Stock Management for WooCommerce
Last Updated: January 2025
1. Introduction
This Privacy Policy explains how TechWonders, a trading name of PC Buddy 247 ("Company", "we", "us", or "our") collects, uses, and protects your personal information when you use the Stokkap platform ("Service").
We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller:
TechWonders (a trading name of PC Buddy 247)
North Lincolnshire, United Kingdom
Email: legal@stokkap.app
2. Information We Collect
2.1 Account Information
When you register for Stokkap, we collect:
| Data | Purpose |
|---|---|
| Name | Account identification, communication |
| Email address | Account access, notifications, support |
| Company name | Account identification, invoicing |
| Billing address | Invoicing, tax compliance |
| Password (encrypted) | Account security |
2.2 User Information
When you add team members to your account, we collect:
| Data | Purpose |
|---|---|
| Name | User identification within the platform |
| Email address | User authentication, notifications |
| Role/permissions | Access control |
2.3 Product & Inventory Data
When you connect your WooCommerce store, we collect and store:
| Data | Purpose |
|---|---|
| Product names, descriptions | Display within Stokkap interface |
| SKUs, barcodes, GTINs | Product identification, scanning |
| Prices | Display, reporting |
| Stock levels | Core inventory management |
| Categories | Filtering, organisation |
| Product IDs | Synchronisation with WooCommerce |
Note: Product images are NOT stored on our servers. Images are fetched directly from your WooCommerce store when displayed in the Stokkap interface.
2.4 Activity & Audit Data
We automatically collect:
| Data | Purpose |
|---|---|
| Stock adjustments | Audit trail, reporting |
| Transfers between locations | Inventory tracking |
| Stocktake records | Historical records, compliance |
| Login timestamps | Security monitoring |
| IP addresses | Security, fraud prevention |
| User actions within the platform | Audit logging, troubleshooting |
2.5 Payment Information
Payment processing is handled by Stripe. We do not store your full payment card details. We may store:
- Last 4 digits of card (for display purposes)
- Card expiry date
- Billing address
- Payment history and invoices
2.6 Technical Data
We automatically collect:
- Browser type and version
- Device type
- Operating system
- Referring website
- Pages visited within Stokkap
- Time spent on pages
3. How We Use Your Information
We use your information to:
| Purpose | Legal Basis |
|---|---|
| Provide and maintain the Service | Contract performance |
| Process payments and billing | Contract performance |
| Send service-related communications | Contract performance |
| Provide customer support | Contract performance |
| Improve and develop the Service | Legitimate interest |
| Ensure security and prevent fraud | Legitimate interest |
| Comply with legal obligations | Legal obligation |
| Send product updates and news (with consent) | Consent |
4. Data Storage & Security
4.1 Where We Store Data
All data is stored on secure servers located within the United Kingdom.
4.2 Security Measures
We implement appropriate technical and organisational measures to protect your data, including:
- Encryption of data in transit (TLS/SSL)
- Encryption of sensitive data at rest
- Regular security assessments
- Access controls and authentication
- Regular backups
- Staff training on data protection
4.3 Data Retention
| Data Type | Retention Period |
|---|---|
| Active account data | Duration of subscription |
| Cancelled account data | 30 days after cancellation |
| Invoices and billing records | 7 years (legal requirement) |
| Audit logs | Duration of subscription + 30 days |
5. Data Sharing
5.1 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties.
5.2 Service Providers
We share data with trusted service providers who assist in operating our Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Billing details, payment information |
| Email service provider | Transactional emails | Email address, name |
| Hosting provider | Infrastructure | All stored data (encrypted) |
All service providers are contractually obligated to protect your data and use it only for the specified purposes.
5.3 Legal Requirements
We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights or property
- Prevent fraud or security issues
- Protect the safety of users or the public
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify you of any such change.
6. Your Rights
Under UK GDPR, you have the following rights:
6.1 Right of Access
You can request a copy of the personal data we hold about you.
6.2 Right to Rectification
You can request correction of inaccurate or incomplete data.
6.3 Right to Erasure
You can request deletion of your personal data in certain circumstances.
6.4 Right to Restrict Processing
You can request that we limit how we use your data.
6.5 Right to Data Portability
You can request your data in a structured, commonly used, machine-readable format.
6.6 Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
6.7 Right to Withdraw Consent
Where processing is based on consent, you can withdraw consent at any time.
6.8 Exercising Your Rights
To exercise any of these rights, contact us at legal@stokkap.app. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113
7. Cookies & Tracking
7.1 Essential Cookies
We use essential cookies required for the Service to function, including:
- Session cookies for authentication
- Security cookies for fraud prevention
- Preference cookies for language/settings
We may use your IP address to suggest an appropriate language for the website. This information is not stored permanently and is only used to improve your initial experience.
7.2 Analytics
We may use privacy-focused analytics to understand how users interact with our Service. This data is aggregated and does not identify individuals.
7.3 No Third-Party Tracking
We do not use third-party advertising cookies or social media tracking pixels.
8. Children's Privacy
Stokkap is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
9. International Transfers
Your data is stored within the United Kingdom. If we ever need to transfer data outside the UK, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK ICO.
10. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Email notification
- Notice within the platform
- Updating the "Last Updated" date
Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: legal@stokkap.app
TechWonders (a trading name of PC Buddy 247)
North Lincolnshire
United Kingdom
For data protection enquiries, you may also contact our Data Protection contact at the same address.