Privacy Policy

Stashlo Ltd | Effective date: 14 June 2026 | support@stashlo.com

1. Who we are

Stashlo Ltd is a UK-registered company. We operate the Stashlo loyalty wallet, merchant EPOS, and rewards platform available at stashlo.com.

2. What data we collect

Account data: name, email address, phone number, date of birth, delivery address (only if you place a delivery order)
Location data: GPS coordinates (only when you save a card location — with your permission)
Transaction data: loyalty points, receipts, order history
Device data: browser type, app version (no device identifiers stored)

3. How we use your data

To provide loyalty card storage and rewards
To send location-based reminders (only near shops you have saved)
To process EPOS transactions for merchants
To generate HMRC-ready tax receipts
To send you relevant offers and job alerts (you can opt out)

4. Legal basis (UK GDPR)

We process your data under: contract (to provide the service), legitimate interests (loyalty reminders), and consent (location, marketing).

5. Data storage

Your data is stored securely on Supabase (EU servers, SOC 2 compliant). Merchant EPOS data is retained for 30 days on-device then archived securely. We never sell your data to third parties.

6. Your rights

Under UK GDPR you have the right to: access, correct, delete, restrict, and port your data. Email support@stashlo.com to exercise any right. We respond within 30 days.

Delete your account in the app: You can permanently delete your account and all associated data at any time from Profile → Delete My Account. This erases your profile, loyalty cards, points, saved payment cards, order and receipt history, and saved locations.

7. Cookies

We use only essential cookies (session management). No advertising or tracking cookies.

8. Third parties

Supabase — database and authentication
Stripe — payment processing (PCI-DSS compliant, we never store card numbers)
Anthropic Claude — AI support assistant (optional, no data retained by Anthropic)

9. Children

Stashlo is not intended for users under 18. We do not knowingly collect data from minors.

10. Changes

We will notify you of material changes by email or in-app notification.

11. Contact & complaints

General & Support: support@stashlo.com
Merchants: merchant@stashlo.com
Admin: admin@stashlo.com
You can also complain to the ICO at ico.org.uk