Privacy Policy
Last updated: 3 October 2026
STKH AI Ltd ('we', 'us', 'our') is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information about you when you use our platform at stkhai.co.uk. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
STKH AI Ltd is the data controller for personal data collected through this website. If you have any questions about how we handle your data, please contact us at [email protected].
2. Data We Collect
Account data: When you register, we collect your name, email address, and a hashed password.
Billing data: When you subscribe, Stripe processes your payment details. We store only your Stripe customer ID, subscription status, and invoice records — we never store raw card numbers.
Usage data: We collect information about how you use the platform, including pages visited, features used, keywords tracked, and audit history.
Technical data: IP address, browser type, device type, operating system, and referring URLs collected automatically via server logs.
Communications: If you contact us via our contact form or email, we retain those messages to respond to your enquiry.
3. How We Use Your Data
To provide and operate the STKH AI platform and your account.
To process payments and manage your subscription via Stripe.
To send transactional emails such as account confirmations, billing receipts, and password resets.
To improve our platform through aggregated, anonymised usage analytics.
To comply with legal obligations, including tax and financial record-keeping requirements.
To respond to support enquiries and resolve disputes.
4. Legal Basis for Processing
Contract: Processing necessary to provide the services you have signed up for.
Legitimate interests: Improving our platform, preventing fraud, and ensuring security.
Legal obligation: Retaining financial records as required by HMRC and UK law.
Consent: Where you have explicitly opted in, such as marketing communications.
5. Cookies
We use cookies and similar technologies to operate the platform, maintain your session, and understand how visitors use our site. Please see our Cookie Policy at stkhai.co.uk/cookies for full details.
6. Data Sharing
Stripe: Payment processing. Stripe is PCI-DSS compliant and acts as a data processor under our instructions.
Google: We use Google Search Console APIs to provide ranking data. Data is processed in accordance with Google's privacy policy.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
We may disclose data if required by law, court order, or to protect the rights and safety of STKH AI or others.
7. Data Retention
Account data is retained for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.
Financial records (invoices, billing history) are retained for 7 years in accordance with HMRC requirements.
Server logs are retained for up to 90 days for security and debugging purposes.
8. Your Rights
Under UK GDPR you have the right to: access your personal data; correct inaccurate data; request erasure ('right to be forgotten'); restrict or object to processing; data portability; and withdraw consent at any time.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Data Security
We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, and access controls.
No method of transmission over the internet is 100% secure. We will notify you and the ICO of any data breach as required by UK GDPR.
10. International Transfers
Some of our service providers (including Stripe and Google) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses.
11. Children
Our platform is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice on the platform. The 'last updated' date at the top of this page will always reflect the most recent revision.
13. Contact Us
For any privacy-related questions or to exercise your rights, contact us at: [email protected] or via our contact form at stkhai.co.uk/about#contact.
Questions about your data? We're happy to help.
Contact us →