Privacy Policy

WE ARE STAGE ONE LTD. PRIVACY POLICY

This Privacy Policy explains how your personal information is collected, used, and shared when you visit www.wearestageone.com (the “Site”).

‍1. Personal Information We Collect
‍When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse the Site, we also collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and information about how you interact with the Site.

We refer to this automatically-collected information as “Device Information.” We collect Device Information using the following technologies:
- “Cookies”, data files placed on your device or computer, often including an anonymous unique identifier.
- “Log files”, track actions on the Site, collecting data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons,” “tags,” and “pixels”, electronic files used to record information about how you browse the Site.

When you make a purchase or attempt to make a purchase through the Site, or contact us via the “Get in touch” form or email, we collect certain information from you, including your name, billing address, shipping address, payment information (processed securely via our third-party gateway Stripe), email address, phone number, and order number.

We refer to this as “Order Information” or contact-related data. Together with Device Information, this is “Personal Information” in this Privacy Policy.

‍2. How We Use Your Personal Information
‍We use the Personal Information we collect to:
- Fulfil orders and provide our services.
- Communicate with you.
- Screen for potential risk or fraud (particularly using your IP address).Improve and optimise the Site (e.g., generating analytics about how customers browse and interact with the Site, and assessing marketing campaigns).
- Where you have given consent, provide information or advertising relating to our products or services.

We process this data under the UK GDPR on the following lawful bases:
Performance of a contract (e.g., processing orders).Our legitimate interests (e.g., fraud prevention, Site improvement, direct marketing where permitted).

Your consent (where required, e.g., for certain marketing).

‍3. How We Protect Your Data
‍We use up-to-date software, services, and ongoing website maintenance to patch security issues. Passwords are encrypted using secure hashing methods, and our staff are trained to handle data lawfully and securely.

‍4. Data Breach Procedures
‍If we become aware of a personal data breach, our staff escalate incidents internally to assess whether it has occurred. If the breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours (as required under the UK GDPR and Data Protection Act 2018). We will contact affected individuals without undue delay. Non-affected customers may also be informed for added safety.

Report any suspected vulnerabilities immediately to Steve@wearestageone.com.

‍5. Sharing Your Personal Information
‍We share Personal Information with third-party service providers as needed, including:
- WordPress (powers the Site), see their privacy policy.
- Google Analytics (Site usage analytics).
- Hotjar (user behaviour recording for UX improvements).
- MailChimp (email newsletters).
‍
We may also share data to comply with legal obligations, respond to lawful requests (e.g., subpoenas), or protect our rights.

‍6. International Transfers
‍Your Personal Information may be transferred to, and processed in, countries outside the UK, including Canada and the United States. We ensure appropriate safeguards are in place (e.g., UK International Data Transfer Agreements or adequacy decisions) so the protection of your data remains equivalent to UK standards, in line with UK GDPR requirements (as amended by the Data (Use and Access) Act 2025).

‍7. Your Rights Under UK Law
‍Under the UK GDPR and Data Protection Act 2018 (as amended), you have rights including:
- Access to your personal information.
- Correction, updating, or deletion of your data.
- Restriction of processing or objection (including to direct marketing).
- Data portability (in certain cases).
- Withdrawal of consent where we rely on it.

To exercise these rights, contact us at steve@wearestageone.com. We aim to respond within one month (extendable in complex cases).

‍8. Data Retention
‍We retain your Personal Information for as long as necessary to fulfil the purposes outlined in this policy (e.g., for records after signup), unless you request deletion. We may retain data longer where required by law.

‍9. Changes to This Policy
‍We may update this Privacy Policy to reflect changes in our practices, legal requirements, or technology. Check back periodically; significant changes will be notified where appropriate.

‍10. Contact Us
‍For questions, complaints, or to exercise your rights, email us at steve@wearestageone.com
‍