Privacy Policy

When you create an account, we collect your name and email address via our authentication provider, Supabase. When you book a stringing job, we collect details about your racket, string/stencil/grip choices, and — if you choose courier collection — your delivery address. Payment card details are handled entirely by Stripe; we never see or store your full card number.

We use one type of cookie: an authentication session cookie (set by Supabase) that keeps you signed in between visits. It's strictly necessary for the site to work if you have an account, and isn't used for advertising or analytics — we don't currently use any analytics or tracking cookies at all.

We use a small number of third-party services to run Stringly, each processing data only for the purpose below:

• Stripe — processes your payment when you book a stringing job.
• Resend — sends transactional emails, like booking confirmations and status updates.
• Twilio — sends SMS notifications about your booking, where enabled.

Under UK GDPR, you have the right to access, correct, delete, restrict, or export your personal data, and to object to how it's used. To exercise any of these rights, contact us at support@stringly.uk.

We keep your account and booking data for as long as your account is active and as needed to meet our legal and accounting obligations. [RETENTION PERIOD DETAIL — TODO: confirm a specific retention policy if one is decided.]

If you're unhappy with how we've handled your personal data, you can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.