Privacy policy
Effective 15/09/2026
This policy explains what personal data Stakkd collects through this website, the client portal and the Stakkd mobile app, why we collect it, and the rights you have over it. We keep it deliberately short and plain — if anything is unclear, email us.
On this page
Who we are
Stakkd is operated by Stakkd Limited, a company registered in England and Wales (company number 17335891) with its registered office at 124-128 City Road, London, England, EC1V 2NX. We are the data controller for the personal data described in this policy. Contact: [email protected].
What we collect
We collect only what we need to respond to you and run the service:
Enquiry and demo requests — your name, company, email address, phone number (if given) and the message you send us.
Client portal accounts — your name, email address and sign-in records (including one-time login codes sent by email).
Website analytics — anonymous, aggregate usage of the marketing site. See "Cookies and analytics" below: this works without cookies and cannot identify you.
Mobile app diagnostics — see "The Stakkd mobile app" below.
How we use it
To respond to your enquiry or set up the demo environment you asked for.
To operate and secure the client portal (sign-in, multi-factor authentication, fraud prevention).
To understand, in aggregate, how the website is used so we can improve it.
To contact you about your account or demo. We do not sell your data, and we do not share it with third parties for their marketing.
Our lawful bases
Taking steps at your request before entering a contract — handling demo requests and enquiries.
Performance of a contract — operating the client portal for customers.
Legitimate interests — securing the service and measuring the website in aggregate.
Cookies and analytics
The marketing site sets no cookies at all. Our analytics is first-party and cookieless: it counts pages and form steps using a salted hash that rotates every day, so it cannot recognise you between days, build a profile of you, or follow you to other sites. No third-party analytics or advertising scripts run on this site.
The client portal sets strictly necessary cookies only — short-lived sign-in and security tokens (portal_access, portal_refresh, portal_csrf). They exist solely to keep your session signed in and secure, and are not used for tracking of any kind. Because we use no optional cookies anywhere, there is no cookie banner to click.
Forms on this site are protected by Cloudflare Turnstile, which checks that submissions come from humans. Turnstile is provided by Cloudflare, Inc. and may process technical signals from your browser for that single purpose.
Where your data lives
Stakkd is built and hosted in the UK, and your data is stored in the UK. Each customer’s platform environment is isolated — your business’s data is never pooled with anyone else’s. The crash-reporting service used by the mobile app is also our own and hosted in the UK.
The Stakkd mobile app
The Stakkd mobile app is for engineers working in the field. Your login is created by your employer (the Stakkd customer) — there is no sign-up inside the app — and your name, email address and sign-in records are held in your employer’s own isolated Stakkd environment. This is what the app does on your phone:
Device identifier — the app generates a random identifier on first launch and stores it in the phone’s secure keychain. It is not Apple’s or Google’s advertising identifier. It is used to tie your sign-in session to the device and to group diagnostic reports.
Crash and diagnostic reports — sent to our own crash-reporting service hosted in the UK (a self-hosted Sentry-compatible service; the SDK comes from Sentry, but no data goes to Sentry’s servers). A report contains the error message and stack trace, performance timings, the screens visited leading up to the error, the app and operating-system versions, the device model, your user ID and username, your employer’s workspace name and your role, and your IP address at the time of the report. Reports are used only to find and fix faults. Customer records (client names, addresses, job notes, prices) are not included.
Push notifications — if you allow notifications, the app registers the device’s push token with your employer’s Stakkd environment so it can send job and approval alerts. The token is removed when you sign out.
Camera and photos — used only when you choose to attach a photo to a job, an expense or a site issue. Photos are resized and re-encoded before upload, which removes location and camera metadata. The app never reads your photo library in the background.
Face ID / Touch ID — handled entirely by the phone’s operating system; the app only learns whether the check passed. No biometric data is stored or sent anywhere.
Device integrity — the app checks for signs that the phone is jailbroken or rooted. If it finds any, it shows a warning and records a diagnostic report; it does not stop you using the app.
Working offline — your employer’s business data that you have access to is cached on the phone in encrypted storage so the app works without signal. It is removed when you sign out or delete the app.
No third-party analytics, advertising or tracking software runs in the app.
How long we keep it
Enquiries and demo requests: kept while we deal with them, then deleted no later than 12 months after our last contact with you.
Portal accounts: kept for the life of the customer relationship, then deleted within 12 months of the account closing (except records we must keep longer to meet legal or accounting obligations).
Crash and diagnostic reports from the mobile app: kept for up to 90 days, then deleted.
Push notification tokens: removed when you sign out of the app, or when the phone stops accepting notifications.
Aggregate analytics: contains no personal data and is kept indefinitely.
Your rights
Under UK GDPR you can ask us for access to, correction of, or deletion of your personal data; ask us to restrict or object to processing; and ask for a portable copy. Email [email protected] and we’ll act on it promptly.
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk).
Changes to this policy
If we change this policy we’ll update this page and the effective date above. Material changes affecting portal customers will be flagged to account owners directly.