Privacy Policy

1. Who is responsible

The controller for personal data processed on procurestack.io is:

Brightnext Goods and Services Ltd
130 Blackfriars Road, London SE1 8BZ, United Kingdom
Registered in England and Wales, company number 16896077
Director: Max Ziermann

You can reach us about anything in this policy through the contact form or by post at the address above.

2. Summary

You can read the whole site without giving us any personal data.
We set no cookies and use no analytics, tracking or advertising tools.
Fonts and tool logos are served from our own server, so your browser does not contact Google or other third parties while you browse the site.
We only store personal data you actively send us: your email address when you sign up for updates or the early-access list, and your message when you use the contact form.
The site and its database are hosted in Germany.

3. Visiting the website

When you open a page, your browser sends technical data to our server that is needed to deliver it, such as your IP address, the requested address, date and time, and your browser type. We do not keep access logs of your visits. If an error occurs, the server's technical error log may contain such data; these logs are limited in size and overwritten automatically. The legal basis is our legitimate interest in operating a secure, working website (Art. 6(1)(f) GDPR).

4. Email updates and early-access list

If you enter your email address in one of our sign-up forms, we store the address, the form you used (for example “blog” or “agent-waitlist”) and the time of sign-up. We use it only to send you ProcureStack updates, such as new comparisons and prompts, or to notify you when the agent toolkits launch, including any launch discount. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the contact form; we then delete your address.

5. Contact form

When you use the contact form, we store your name, email address, message, the page you sent it from and the time. We use this data only to answer your enquiry. The legal basis is taking steps at your request before a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep your message until your enquiry has been dealt with and delete it on request.

6. Hosting

The website, its database and all data described above are hosted on a server of OVH GmbH in a data centre in Germany. OVH acts as our processor under Art. 28 GDPR. More information: OVHcloud data protection. The database is only reachable inside the server's internal network. A backup of the database is created daily and deleted automatically after 14 days.

7. Links to other websites and affiliate links

Our reviews and comparisons link to software vendors. Some of these are affiliate links: if you sign up through them, we may earn a commission at no cost to you. Prompt packs are sold through Gumroad. We do not pass any personal data to these sites. Once you follow a link, the privacy policy of the site you visit applies; it may use its own cookies, for example to attribute a referral.

8. International transfers

We are based in the United Kingdom and your data is stored in Germany. Transfers between the EU and the UK are covered by the European Commission's adequacy decision for the UK. We do not transfer your data to any other country.

9. Your rights

Under the UK GDPR and the EU GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time with effect for the future. To exercise any of these rights, use the contact form or write to us at the address above.

You also have the right to complain to a supervisory authority: in the UK the Information Commissioner's Office (ico.org.uk), or in the EU the data protection authority of your country of residence.

10. Changes

We update this policy when the website or the law changes. The current version is always available at procurestack.io/privacy.