What we collect
- Account data: name, work email, job title, company, country, password hash.
- Company profile data submitted by claimants, including logos, coverage, licences and pricing.
- Enquiry and review content, including the buyer details a company needs in order to reply.
- Usage data: pages viewed, filters used, referrer, approximate location from IP, device and browser.
- Billing data processed by our payment provider — we never store full card numbers.
Why we process it
We process personal data to operate accounts, publish listings and reviews, route enquiries to the company a buyer selected, produce aggregated market statistics, prevent fraud and abuse, meet legal obligations, and send communications you asked for.
Our legal bases are contract (running your account and plan), legitimate interests (platform integrity, product analytics, aggregate research), consent (marketing email, non-essential cookies) and legal obligation (tax and accounting records).
What is published
Company profile information, review content, the reviewer's display name and role, and any reply from the company are public by design. Your email address, phone number and billing details are never published.
Enquiry content is shared only with the company you selected. Aggregated, non-identifying statistics derived from enquiries and reviews may appear in research.
Who we share it with
- Companies you contact — the details required for them to respond to your enquiry.
- Processors acting on our instructions: cloud hosting, email delivery, analytics, payment processing and customer support tooling.
- Authorities where we are legally required to disclose.
- A successor entity in the event of a merger or acquisition, subject to the same commitments.
What we never do
We do not sell personal data. We do not sell or rent lead lists. We do not pass an enquiry to a company the buyer did not choose, and we do not recycle an enquiry to a second company.
International transfers
We are a remote-first team and use processors in the United Kingdom, the European Economic Area and the United States. Transfers outside the UK or EEA rely on adequacy decisions or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep it
- Account data: for the life of the account, then twelve months.
- Enquiry records: three years, for dispute resolution and quality reporting.
- Published reviews: indefinitely, unless removed under our review policy.
- Billing records: seven years, as required by tax law.
- Analytics: aggregated after fourteen months.
Your rights
You can request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Marketing consent can be withdrawn at any time from any email or in your account preferences.
Write to privacy@thestablecoinhq.com and we will respond within thirty days. If you are unhappy with the outcome you may complain to the UK Information Commissioner's Office, or your local supervisory authority in the EEA.
Cookies
Essential cookies keep you signed in and remember your filter state. Analytics and preference cookies are set only with your consent, and you can change that choice at any time from the cookie settings link in the footer.
Security and contact
Data is encrypted in transit and at rest, access is restricted on a need-to-know basis, and we run background checks on staff with production access. We will notify affected users and the ICO within seventy-two hours of a qualifying breach.
Data protection contact: privacy@thestablecoinhq.com. We are a remote-first startup with no public office address; all correspondence is handled by email.
Questions about this document? Write to legal@thestablecoinhq.com and a human will answer.