Privacy Policy

The data controller is David Robertson, a sole trader trading as “MDStack”, of Collingwood Buildings, 38 Collingwood Street, Newcastle, NE1 1JF, United Kingdom.

Data protection / DSAR contact: hello@mdstack.co.uk.

ICO registration number: ZC160375.

We do not use this website to build visitor profiles or set analytics, advertising or third-party tracking cookies. We do not sell or rent personal data. Enquiries, orders, support and licence administration still involve information we need to serve you, as described below.

Depending on how you deal with us, the information we handle may include:

• Enquiries: your name, email address, subject, message, selected product or service, and any licence quantity or term you selected.
• Manual orders: the contact and billing information needed to issue an invoice, the software and licence supplied, its term where applicable, and payment and delivery records.
• Support: correspondence and any diagnostic details you choose to provide.
• Website requests: technical information such as your IP address. Our contact form uses the IP address to limit abuse and may log it when a request is rate-limited.
• Managed services, if agreed: information needed to set up and operate that separate service, according to its agreed scope.

One SyncVault Mobile licence covers one device and has a fixed term; Bang-Tidy licences cover one device, and NetworkMD Vault licences cover one Vault instance. We handle the information needed to issue and support those licences. Online licence validation, where a product uses it, is distinct from usage analytics. This website does not collect card details or provide an automated checkout.

• To respond to enquiries, fulfil software orders, provide support and arrange any agreed services — lawful basis: Article 6(1)(b) UK GDPR (steps taken at your request prior to, and performance of, a contract).
• To keep required business records and protect our systems and customers against fraud and misuse — lawful basis: Article 6(1)(f) UK GDPR (our legitimate interests in security and the prevention of crime), and applicable legal obligations.

Your enquiry is submitted to our own server-side handler. We use Resend to deliver the enquiry by email to our inbox. Your submitted contact details and message are included in that email.

MDStack currently handles software sales directly: we discuss and confirm the order, issue an invoice, arrange payment by bank transfer, then provide a private download link and licence. There is no automated card checkout on this website.

We use no tracking, analytics, or advertising cookies. Because we set no non-essential cookies, we do not show a cookie consent banner — there is nothing to consent to.

We use a small amount of strictly-necessary browser storage (sessionStorage) purely to remember interface preferences during your visit (for example, the pricing duration you last viewed). This data stays on your device, is not transmitted to us, and is not used to identify you.

We keep enquiry and support correspondence for as long as needed to deal with the request and any follow-up. We keep invoice, payment and licence records as needed to fulfil the purchase and meet applicable accounting and legal recordkeeping obligations. Technical records used for website security are kept only as needed for that purpose.

We use third-party email and website hosting services. Their processing may involve locations outside the UK. Contact us for details of the current providers' processing locations and transfer arrangements.

Under the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025, you have the right to:

• Access the personal data we hold about you (a “DSAR”)
• Have inaccurate data corrected
• Have your data erased
• Restrict or object to our processing
• Data portability
• Withdraw any consent you have given, at any time

To exercise any of these, email hello@mdstack.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you can contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

We may update this policy if our products, service arrangements or payment methods change. The “last updated” date above reflects the current version.