Privacy Policy

Last updated: 2 July 2026 · Metal Stack — a trading name of Peter Smith

This policy explains how Metal Stack handles personal data under the UK GDPR and the Data Protection Act 2018.

1. Who is the controller

The data controller is Peter Smith, trading as Metal Stack. Our correspondence address isMetal Stack, c/o This N That Ltd, Unit 3, 2A Cambridge Street, Bletchley, Milton Keynes MK2 2TP, United Kingdom. For any privacy question, contact hello@metalstack.co.uk.

2. Data we collect

• Your name, email address and return postal address.
• Descriptions and photographs of the items you send for verification.
• Payment is handled by Stripe — we receive confirmation of payment but do not store your card details.
• Salted, one-way hashes of IP addresses used to look up records, for anomaly and fraud detection. We do not store raw IP addresses for lookups.

3. Why we use it, and our lawful bases

• Performance of a contract — to carry out the verification you booked, return your items and maintain your record.
• Legitimate interests — running and protecting the public register and preventing fraud.
• Consent — only where you opt in to marketing emails; you can withdraw at any time.

4. Processors we use

• Stripe — payment processing.
• Resend — transactional email.
• Cloudflare — hosting and content delivery.

5. How long we keep data

• Records published on the public register are retained permanently — that permanence is the purpose of the service.
• Order and contact records: 6 years, to meet UK tax and accounting requirements.
• Salted IP-address hashes: 90 days.

6. We never sell your data

We do not sell personal data and do not share it except with the processors above to run the service, or where the law requires.

7. Your rights

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• erasure where applicable — note that information forming part of a published register record is retained permanently as part of the service, so erasure may not apply to it;
• restriction of processing;
• object to processing based on legitimate interests;
• data portability; and
• withdraw consent for marketing at any time.

8. Cookies

We use only strictly necessary cookies needed to run the site. We do not use advertising or tracking cookies.

9. The ICO

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first — contact hello@metalstack.co.uk.

10. Contact

For any privacy request, email hello@metalstack.co.uk.