Privacy Policy: Stax

Last updated 10 July 2026

This policy explains how Stax (“we”, “us”) handles personal data when you visit vapestack.co.uk, join the early-access list, or use the platform. We act as the data controller for that data. For personal data inside a merchant’s store (their customers and orders), the merchant is the controller and we process it on their behalf.

What we collect

Early-access and contact details: your email address, and any name or message you send us through the site.
Account data: name, email, hashed password, and the stores you belong to, if you have a platform account.
Usage and security data: IP address, browser information and server logs, used to keep the Service secure and rate-limit abuse.

How we use it

To run the waitlist and contact you about early access (legitimate interests, or consent where required).
To provide and secure the platform for account holders (performance of a contract).
To meet legal obligations, such as tax and accounting records.

We do not sell personal data, and we do not run third-party advertising trackers on this site.

Where it lives

Data is hosted with our infrastructure providers: Vercel (application hosting), Neon (database, London region) and Cloudflare R2 (file storage). Payment card data is handled by our payment acquirers and never touches our servers.

How long we keep it

Waitlist and contact messages: until early access ends or you ask us to delete them, whichever is sooner.
Account data: for the life of the account and up to 12 months after closure.
Security logs: up to 12 months.
Records we must keep by law (for example invoices): as long as the law requires.

Your rights

Under UK GDPR you can ask for access to your data, correction, deletion, restriction, portability, or object to processing. Email hello@vapestack.co.uk and we will respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

This marketing site sets no advertising or analytics cookies. The platform itself uses strictly necessary cookies only: session cookies to keep you signed in and security cookies for rate limiting. See Your Privacy Choices for the detail.

Changes

If we make material changes to this policy we will post the new version here and, where we hold your email, tell you directly.

Contact

Privacy questions: hello@vapestack.co.uk.

Privacy Policy