Privacy Notice

StockSimple is operated by Ricardo Knight, a sole proprietor trading as StockSimple ("we", "us"). We are the data controller for the personal data described in this notice. Contact: StockSimpleSales@outlook.com.

• Account data — name, email address, login credentials: to create and secure your account (contract performance).
• Business data you enter — products, stock levels, suppliers, locations, purchase orders: to provide the Service (contract performance).
• Support messages — when you contact us: to respond and improve the Service (legitimate interests).
• Usage and device data — log data, IP address, device identifiers: for security, fraud prevention and product improvement (legitimate interests).

Payment details are collected and processed directly by Paddle (our Merchant of Record); we never see or store your card numbers.

• Service providers and subprocessors (hosting, database and analytics providers) who process data on our behalf;
• Paddle, as Merchant of Record, for the sale of subscriptions, payment processing, tax compliance and invoicing;
• Professional advisers (legal, accounting) where needed;
• Authorities where required by law.

We do not sell your personal data.

Some of our service providers process data outside your country. Where data leaves the UK/EEA or other protected regions, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We keep your data for as long as your account is active and as needed to provide the Service, meet legal obligations and resolve disputes. Data is deleted or anonymised when no longer needed.

Depending on your location, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent where processing is based on consent. You may also complain to your local data protection authority. To exercise any right, email StockSimpleSales@outlook.com; we respond within one month.

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level data isolation between businesses.

We use essential cookies and local storage to keep you signed in and remember your preferences. Optional analytics run only if you click "Accept" on our cookie banner; you can change your choice at any time via "Cookie settings" in the footer. We do not use advertising cookies and do not sell or share personal information for cross-context behavioural advertising.

• EU / UK (GDPR): access, rectification, erasure, restriction, portability, objection, and the right to complain to your supervisory authority.
• California (CCPA/CPRA): right to know, delete, correct, and opt out of sale/sharing (we do neither), limit use of sensitive data (we collect none), and non-discrimination for exercising rights.
• South Africa (POPIA): access, correction, deletion and objection; complaints may go to the Information Regulator.
• Canada (PIPEDA), Brazil (LGPD), Australia and elsewhere: equivalent rights apply as provided by local law.

Business customers: we process data you enter about your staff, suppliers and customers as your processor under our Data Processing Agreement. See our Subprocessors.

The Service is for businesses and is not directed at anyone under 16.

We may update this notice from time to time. Material changes will be signposted in the app. Continued use after changes constitutes acceptance.