Privacy Notice

Version 2026-07-01 · Effective 1 July 2026

1. Who we are

StringDrop Ltd is the data controller for personal data collected through the StringDrop platform. Contact: privacy@stringdrop.com.

2. What data we collect

We collect account information (name, email, date of birth for stringers), location data (delivery/handover addresses), payment information processed by Stripe, and usage data collected through PostHog analytics.

3. How we use your data

Your data is used to operate the marketplace, process payments, facilitate bookings, send service communications, and (with your consent) marketing emails. We do not sell personal data to third parties.

4. Legal bases

We process data on the basis of contract performance (for booking and payment), legitimate interests (fraud prevention, product improvement) and, for marketing communications, your explicit consent.

5. Data sharing

We share data with Stripe (payments), Supabase (infrastructure), Mapbox (maps), Resend (email), PostHog (analytics) and Sentry (error monitoring) under data processing agreements.

6. Data retention

Account data is retained for as long as your account is active plus six years after closure for legal and financial compliance. Transaction records are retained for seven years.

7. Your rights

You have the right to access, correct, export or delete your personal data. To exercise your rights contact privacy@stringdrop.com. You may also lodge a complaint with the ICO (ico.org.uk).

8. Cookies

We use strictly necessary cookies for session management and, with your consent, analytics cookies. You can manage your cookie preferences in your browser settings.

9. Changes to this notice

We will notify you by email of any material changes and require re-acceptance before your next session.