Privacy notice

1. Who we are

TBN Mark 1 Limited is the controller of the personal information described in this notice. TBN Stacked is provided by TBN Mark 1 Limited, a company registered in England and Wales with company number 17203764, whose registered office is at 6 Ormond Terrace, Regent Street, Cheltenham, Gloucestershire, GL50 1HR. VAT number GB 520 8583 92. You can contact us at hello@tbnstack.com.

2. What we collect

We collect only what we need to provide TBN Stacked:

• Account details: your name, email address and a securely hashed version of your password (we never see or store your password itself).
• Business details: the type of business you run and the branding you add, such as your logo, colours and the contact details you put on your reports.
• Report details: the addresses and schemes you appraise, the figures you enter or correct, the reports we produce and any messages you send us about a report.
• Plan and payment records: your plan, report allowance, invoices and payment history. Card details are handled by our payment provider; we never see or store your card number.
• Waitlist details, if you join our waitlist: your name, email, company, role and whether you arrived through the QR code on our business card.
• Technical information: log records of activity on your account and the internet address your requests come from, which we use to keep TBN Stacked secure and to stop abuse.

3. How we use it, and our lawful basis

We use your information:

• to create and run your account, produce your reports and provide your plan, because that is necessary for our contract with you;
• to keep TBN Stacked secure, prevent fraud and abuse, fix problems and improve the service, because we have a legitimate interest in doing so. When we use report information to improve TBN Stacked, we use it in anonymised and aggregated form;
• to keep financial and VAT records, because the law requires it;
• to email you news about TBN Stacked if you joined the waitlist, because you agreed. You can withdraw that agreement at any time using the link in our emails or by contacting us.

4. Who we share it with

We do not sell your information. We share it only with service providers who process it for us under contract, and only as much as they need:

• our hosting provider, Railway, which runs TBN Stacked on servers in the Netherlands;
• our database and file storage provider, Supabase, which stores your account and reports in London, United Kingdom;
• our AI model provider, which carries out the research and writing for your reports in the United States. We use it through its business service, whose terms do not permit it to train its models on the information we send;
• our email provider, which sends account emails such as password resets;
• our payment provider, Stripe, when you buy a plan or an extra report;
• our professional advisers, and public authorities where the law requires us to.

5. Transfers outside the UK

Some of these providers process information outside the UK: in the European Economic Area, which the UK recognises as providing adequate protection, and in the United States. Where information goes to the United States, it is protected by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to the European Commission's standard contractual clauses.

6. How long we keep it

• Account, branding and report information: for as long as your account is open, and deleted within 90 days after it closes.
• Plan, payment and VAT records: for 6 years after the end of the financial year they relate to, as the law requires.
• Waitlist details: until you ask us to remove them, or 24 months after you joined, whichever is sooner.
• Security and activity logs: up to 12 months.

7. Your rights

You have the right to ask for a copy of your information, to have it corrected, deleted or restricted, to object to how we use it, to receive it in a portable format, and to withdraw any agreement you have given. Some of these rights have limits; for example, we must keep financial records for 6 years.

To use any of these rights, email hello@tbnstack.com. We will reply within one month.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

8. Security

Your information is sent over encrypted connections, passwords are stored only as secure hashes, and access to your reports is limited to your account. No system is perfectly secure, but we take reasonable steps to protect what you give us and will tell you and the regulator if a breach puts you at risk.

9. Decisions made by computer

Your reports are produced automatically, but they are appraisals of properties, not decisions about you. We do not make any decision about you based solely on automated processing that has a legal or similarly significant effect on you.

10. Changes to this notice

We will update this notice when how we use information changes, and tell you by email or in your account before a significant change takes effect.