Privacy Policy

1. Who we are

StampSorted is a UK-based software platform providing SDLT calculation and filing tools for conveyancing solicitors and licensed conveyancers. Our contact address for data protection matters is:

2. What data we collect

We collect different categories of personal data depending on how you interact with our website:

2.1 Data you provide to us

• Name and email address — when you sign up for early access or submit a contact form.
• Firm name — when you provide details about your conveyancing practice via our compliance checker or registration forms.
• Responses to assessment questions — when you use tools such as the Tax Adviser Registration Checker. These responses may include information about your firm's structure and SDLT activity. We do not collect transaction-level client data through these tools.

2.2 Data collected automatically

• Usage data — pages visited, time spent on pages, buttons clicked, and general navigation patterns. This is collected via PostHog analytics (see section 5).
• Technical data — your IP address (anonymised where possible), browser type, operating system, and referring URL. This is collected by our hosting provider, Vercel, as part of standard server logs.
• Cookies — see section 7 for full details.

2.3 Data we do not collect

Our free public tools (SDLT Calculator, Compliance Checker) do not require you to create an account. Any property values or transaction details entered into the SDLT Calculator are processed entirely in your browser and are not transmitted to or stored on our servers.

3. Why we collect your data and our legal basis

4. How long we keep your data

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law:

• Early access sign-ups and contact form submissions — kept until you unsubscribe or request deletion, and for up to 12 months after the last communication.
• Analytics data — retained for up to 12 months in PostHog, after which it is anonymised or deleted.
• Server logs (Vercel) — typically retained for 30 days as part of standard hosting operations.

Storage: We currently store form submission data in file-based storage on our hosting infrastructure. We intend to migrate this to a PostgreSQL database hosted on Vercel in the near future. Both environments are subject to the same data protection obligations described in this policy.

5. Third parties we share data with

We do not sell your personal data. We share data only with the following trusted third-party service providers, and only to the extent necessary:

All third-party processors are bound by data processing agreements and are required to process your data only on our instructions and in accordance with applicable data protection law.

6. International data transfers

Some of our third-party providers are based outside the UK and EEA. Where personal data is transferred internationally, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) approved under UK GDPR, or reliance on the UK International Data Transfer Agreement (IDTA) — to protect your data to UK standards.

7. Cookies

Cookies are small text files placed on your device by your browser. We use the following categories of cookies:

You can control cookies through your browser settings. Note that disabling analytics cookies will not affect your ability to use our free tools. We do not use advertising or tracking cookies.

8. Your rights under UK GDPR

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: You can ask us to delete your data where there is no compelling reason for us to keep it (the "right to be forgotten").
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you can request your data in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interests, including for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@stampsorted.co.uk. We will respond within one calendar month. We may ask you to verify your identity before acting on a request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's supervisory authority for data protection matters.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our website is served over HTTPS. Access to stored data is restricted to authorised personnel only.

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you suspect a data breach involving your information, please contact us immediately at hello@stampsorted.co.uk.

10. Children's privacy

Our website and services are directed at legal professionals and are not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when the policy was last revised. Material changes will be communicated to subscribers by email where reasonably practicable. Continued use of our website after a change constitutes acceptance of the updated policy.