Privacy Policy – Stock Zone

PRIVACY POLICY

Stock-Zone — UK GDPR / DPA 2018

Effective date: 2025-09-25
Website: https://stock-zone.com/
Controller: RED&BRICK LTD (Company No. 15024307)
Registered Address: 291 Northfield Avenue, London, England, W5 4XB
Contact: info@stock-zone.com

1. About this Notice

This Privacy Policy explains how RED&BRICK LTD (“we”, “us”, “our”) collects, uses, shares and safeguards personal data when you visit stock-zone.com (the “Website”) or purchase digital content. It also explains your rights under UK data protection law (UK GDPR and the Data Protection Act 2018) and how to contact us.

2. The Data We Collect

We may collect and process the following categories of personal data:

Identity data — name, username or similar identifier.
Contact data — email address, billing address, country/region.
Transaction data — purchased items, order IDs, timestamps, amounts, currency, limited payment status (from our payment provider).
Technical data — IP address, device/browser type, OS, time zone, approximate location (country/region), referral URLs, error logs.
Usage data — pages viewed, clicks, session duration, downloads.
Communications — messages sent to support, feedback, takedown notices.
Preference & consent data — cookie/marketing preferences.

3. Sources of Data

Direct interactions — forms, checkout, support requests.
Automated technologies — cookies and similar technologies (see Cookie Policy).
Third parties — payment service providers, analytics, hosting/CDN and anti‑abuse tooling (limited technical/operational data).

4. Purposes and Lawful Bases

We process personal data for the purposes and lawful bases below:

Provide the Website and deliver digital content you purchase — performance of a contract.
Account setup/management, order confirmations, issue resolution — performance of a contract.
Payments processing via third‑party providers; prevention of payment abuse or service misuse — legitimate interests (operate our business safely and efficiently).
Operate, secure and improve the Website (diagnostics, analytics, load balancing, incident response) — legitimate interests.
Communications about your orders or material changes to our terms/policies — legal obligation and/or performance of a contract.
Optional marketing (e.g., newsletters) — consent (you can withdraw any time).
Compliance with applicable legal obligations (e.g., consumer protection, tax record‑keeping) — legal obligation.

5. No Special Category Data; Children

We do not intentionally collect special category data (e.g., health, biometric) via the Website.

The Website is intended for adults. We do not knowingly collect data from children under 18. If you believe a child has provided personal data, contact us for deletion.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Website and understand usage. Non‑essential cookies are used only with your consent. For details, including a cookie list and how to change preferences, please see our Cookie Policy.

7. Sharing and Disclosures

We may share personal data with trusted service providers under contracts that protect your data, for the purposes listed in Section 4:

Payment service providers — to process your transactions and prevent payment abuse.
Hosting, CDN, and security providers — to deliver the Website securely and at scale.
Analytics and product performance tools — to understand and improve Website performance (aggregated/ pseudonymised where possible).
Professional advisers and insurers — where reasonably necessary for our legitimate interests.
Authorities or regulators — where required by law or to protect legal rights (e.g., responding to lawful requests).

We do not sell personal data. We do not allow service providers to use your data for their own unrelated purposes.

8. International Transfers

Some providers may process personal data outside the UK. Where this occurs, we use appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses or another lawful transfer mechanism. Copies of relevant safeguards can be requested via info@stock-zone.com.

9. Data Retention

We keep personal data only as long as necessary for the purposes described in this Policy:

Account and order records — typically 6 years after the end of the financial year of your last transaction (to meet tax/accounting obligations).
Technical logs and security records — typically 12–24 months, unless a longer period is needed for incident investigation.
Marketing data — until you withdraw consent or after a period of inactivity (typically 24 months).
Support tickets — typically 24 months after closure.

10. Security

We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and regular backups. However, no internet service is 100% secure; you are responsible for keeping account credentials confidential.

11. Your Rights

Subject to conditions and exemptions under UK law, you have the right to:

Access your personal data and receive a copy.
Rectify inaccurate or incomplete data.
Erase data (“right to be forgotten”) where applicable.
Restrict processing in certain circumstances.
Data portability for information you provided to us, where processing is based on consent or contract and carried out by automated means.
Object to processing based on our legitimate interests (including direct marketing).
Withdraw consent at any time where processing relies on consent (e.g., marketing or non‑essential cookies).

To exercise your rights, contact us at info@stock-zone.com. We may need to verify your identity before responding.

12. Complaints

If you have concerns about our use of your personal data, please contact us first at info@stock-zone.com and we will try to resolve them. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

13. Links to Third‑Party Sites

The Website may link to third‑party sites or services. Those sites have their own privacy practices; we are not responsible for them.

14. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by posting the updated version and, where appropriate, by email or prominent notice.

15. Contact

For questions or to exercise your rights, contact: info@stock-zone.com