Privacy Policy

Who we are

STS Toolkit is a business template, infographic and technical command library operated by SMART TELECOM SERVICES STS LTD, a company registered in England and Wales under number 12417165, with its registered office at 382 Kenton Road, Harrow, Middlesex, HA3 8DP, United Kingdom.

The company is the data controller for the purposes of UK data protection law and is registered with the Information Commissioner's Office (ICO).

For anything on this page, reach us at info@stbpos.co.uk or +44 2046 344449.

What we collect, and why

When you create an account

Your name, email address and a hashed password. You may add a phone number, address and postcode if an order needs them. We use these to sign you in and to contact you about your account, and we record your last sign-in time so unusual activity is visible to you.

When you buy a package

Payment is handled by Stripe. Your card details never touch our servers and we never see them. We keep only Stripe's transaction identifiers, which package you bought and when, because that is what grants you access to what you paid for.

When you use the command library

Reading and copying commands needs no account and is not tied to you. If you are signed in, we store what is yours alone: the commands you save, the collections you create, your ratings, what you viewed recently, and your progress through guides. Their only purpose is to show them back to you, and you can delete them at any time.

When you contact support or subscribe

We keep your messages and your email address so we can reply, and so we can send the newsletter if you subscribed. Every newsletter carries an unsubscribe link that works immediately.

Technical data

We log an IP address and a timestamp against sessions, downloads and some account actions. The purpose is security: preventing abuse and protecting paid files from unauthorised redistribution.

What we do not do

A short and honest list, and one you can verify yourself in your browser's developer tools:

• We run no analytics or tracking of any kind. No Google Analytics, no Tag Manager, no Facebook pixel, no heatmaps.
• We do not sell, rent or trade your data.
• We show no advertising and share nothing with ad networks.
• We build no interest profiles and make no automated decisions about you.

Cookies and local storage

There are no marketing cookies. What actually exists:

• sts-toolkit-session - keeps you signed in as you browse.
• XSRF-TOKEN - protects forms against cross-site request forgery.
• A remember-me cookie - only if you tick that box when signing in.
• Your language choice - held in the session.
• Command library column widths - kept in your browser's local storage and never sent to us.

Who we share data with

Three parties, each for a specific reason:

• Stripe - payment processing. It receives payment details directly from you.
• Amazon SES - sending mail such as password resets and order confirmations. It receives your address and the message.
• Google Fonts - fonts load from Google's servers, which means Google sees your IP address when a page opens. We send it nothing else.

We may also disclose data where the law requires it. Beyond that, nobody else gets access.

How long we keep things

• Account data - for as long as your account exists.
• Order records - kept after account deletion to meet accounting and tax obligations.
• Library activity - deleted with your account.
• Sessions - expire automatically after two hours of inactivity.
• Support messages - retained so the conversation stays on record.

Legal bases for processing

Under UK data protection law, each purpose has a legal basis:

• Performance of a contract: running your account, processing your order, and granting what you bought.
• Legitimate interests: site security, preventing abuse, and protecting paid files.
• Consent: the newsletter only, and you can withdraw it at any time.
• Legal obligation: keeping financial records for accounting and tax purposes.

Transfers outside the UK

Some of our providers process data outside the UK, specifically in the United States: Stripe for payments, Amazon SES for email, and Google for fonts. Those transfers rely on the approved transfer frameworks or the standard contractual clauses each provider operates under.

Your rights

At any time you can ask us for:

• Access - a copy of what we hold about you.
• Correction - of anything inaccurate; most of it is editable from your account page directly.
• Deletion - of your account and its data, except financial records we are required to keep.
• Export - in a machine-readable format.
• Withdrawal of consent - for the newsletter, in one click from any issue.
• Objection - to processing that relies on legitimate interests.
• Restriction - of processing while we consider an objection or a correction request.

Write to info@stbpos.co.uk and we respond within thirty days. We will not ask you for a reason.

Complaining to the regulator

If our answer does not satisfy you, you can complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk. We would prefer you contact us first so we can try to put it right.

Security

The whole site is served over HTTPS, passwords are stored as bcrypt hashes and cannot be recovered even by us, and database access is limited to the servers that need it. No system is perfectly secure, so if you have a security report, email the address above directly.

Children

This site is aimed at professionals and not at children under 16. If we learn that an account belongs to a child, we delete it.

Changes to this policy

We update the "last updated" date at the top whenever this changes. If a change materially affects how we handle your data, we email account holders before it takes effect.

Contact

For any privacy question or request: info@stbpos.co.uk - +44 2046 344449