Privacy policy
How the PolicyStack website handles information and enquiries.
This notice covers the public PolicyStack website. We use OpenPanel to measure page views and outgoing link clicks, including page URLs, referrers, browser and device information, and approximate location. We do not send account identities or enable session replay. OpenPanel does not use tracking cookies; it processes IP addresses to derive location and anonymous visitor identifiers without storing the raw IP addresses. Documentation search runs locally in your browser. The interface may remember display preferences in browser storage. Hosting providers process requests to deliver the site.
Introduction
This Privacy Policy describes how PolicyStack (“we”, “us”, or “our”) collects, uses, and shares information about you when you use our services. Effective Date: September 6, 2026. Version: a98d8d53.
If you have questions about this policy, please contact us at jamie@policystack.dev.
Information We Collect
We collect the following categories of personal data for the purposes described below. Under GDPR Article 6, we rely on the lawful bases shown for each processing purpose:
| Category | Fields collected | Purpose | Lawful basis |
|---|---|---|---|
| Correspondence | Email address, Information you choose to include in an enquiry | Respond to support and design-partner enquiries | Legitimate interests (Article 6(1)(f)) |
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you within the meaning of GDPR Article 22.
Data Retention
We retain your data for the following periods:
| Category | Retention period |
|---|---|
| Correspondence | For as long as needed to handle your enquiry and any follow-up |
Whether You Are Required to Provide This Data
For each category of personal data we collect, we set out below whether you are required to provide it — by law, under our contract with you, or as a precondition to entering into a contract — or whether provision is voluntary, together with the consequences of failing to provide it.
| Category | Requirement | Consequences |
|---|---|---|
| Correspondence | Voluntary | Without contact information we cannot reply to your enquiry. |
Cookies and Tracking
We use the following types of cookies and tracking technologies:
| Category | Lawful basis |
|---|---|
| Essential cookies — required for the service to function |
Third-Party Services
We share data with the following third-party services:
| Service | Purpose | Privacy policy |
|---|---|---|
| OpenPanel | Measure website visits and outgoing link clicks to improve the website and documentation | View |
| Vercel | Host and deliver this public website | View |
Your Rights
You have the following rights regarding your personal data:
- Right to access your personal data
- Right to correct inaccurate data
- Right to request deletion of your data
- Right to receive your data in a portable format
- Right to restrict how we process your data
- Right to object to processing
GDPR Supplemental Disclosures
This section applies to individuals in the European Economic Area (EEA) under the General Data Protection Regulation (GDPR).
Data Controller: PolicyStack Ltd, 86-90 Paul Street, London, EC2A 4NE, United Kingdom
We have not appointed a Data Protection Officer. Our processing activities do not meet the thresholds in GDPR Article 37(1) that would require one. For any questions about this policy or how we handle your personal data, please use the contact details above.
You have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or place of the alleged infringement. A list of EEA supervisory authorities is available at edpb.europa.eu/about-edpb/about-edpb/members_en.
Where we transfer your personal data outside the EEA, we rely on one or more of the safeguards permitted under Chapter V of the GDPR: (a) transfers to countries the European Commission has determined provide an adequate level of data protection (the current list is published at commission.europa.eu/…/adequacy-decisions_en); (b) Standard Contractual Clauses (SCCs) adopted by the European Commission under Article 46(2)(c); and (c) Binding Corporate Rules approved under Article 47 where applicable. You may request further information about the specific safeguards applied to a particular transfer by contacting us at jamie@policystack.dev.
UK Privacy Rights (UK-GDPR)
This section applies to individuals in the United Kingdom under the UK General Data Protection Regulation (UK-GDPR), as tailored by the Data Protection Act 2018.
Data Controller: PolicyStack Ltd, 86-90 Paul Street, London, EC2A 4NE, United Kingdom
We have not appointed a Data Protection Officer. Our processing activities do not meet the thresholds in GDPR Article 37(1) that would require one. For any questions about this policy or how we handle your personal data, please use the contact details above.
The supervisory authority for data protection in the UK is the Information Commissioner’s Office (ICO). If you believe we have not handled your data in accordance with UK data protection law, you have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint.
If we transfer your personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with the UK-GDPR, including the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses where applicable.
Contact Us
Contact us:
- Legal Name: PolicyStack Ltd
- Address: 86-90 Paul Street, London, EC2A 4NE, United Kingdom
- Email: jamie@policystack.dev
- Website: https://policystack.dev