Privacy policy
Privacy Policy
Last updated 24 September 2026
This Privacy Policy explains how Stag Vault collects, uses, shares and protects personal information when you visit our websites, create an account, buy a product, use our services, contact us or participate in our affiliate programme.
1 Who is responsible for your information
Homeguard Developments Ltd, trading as Stag Vault, is the controller of the personal information described in this policy. We are registered in England and Wales under company number 17115549. Our registered office is 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE.
Privacy enquiries can be sent to founder@stagvault.co.uk.
2 Information we collect
Depending on how you interact with Stag Vault, we may collect:
Identity and contact information, such as your name, email address, billing address and account details.
Order and transaction information, such as products purchased, prices, currency, payment status, refunds, subscription status and order identifiers. We do not normally receive or store your full payment-card number.
Account and service information, such as login activity, access permissions, saved progress, downloads and support history.
Technical information, such as IP address, device type, browser, operating system, approximate location, referral URL, cookie identifiers and security logs.
Usage information, such as pages viewed, buttons selected, checkout activity, campaign attribution and interactions with emails.
Marketing preferences, including whether you have agreed to receive promotional communications and whether you have unsubscribed.
Affiliate information, such as application details, referral links, referred visits, conversions, commission status, payout details and fraud-prevention signals.
Information you provide when you contact us, answer a survey, submit feedback or otherwise communicate with Stag Vault.
3 How we collect information
We collect information directly from you, automatically through our websites and services, and from service providers involved in transactions and attribution. These providers may include Shopify, payment processors such as Stripe or Shopify Payments, Rewardful, email-delivery providers such as Resend, hosting providers and analytics or advertising services that you have consented to.
4 How and why we use information
We use personal information for the following purposes and legal bases:
|
Purpose |
Examples |
Legal basis |
|
Provide the service |
Create accounts, process orders, deliver content, maintain access and provide support |
Contract |
|
Operate payments |
Confirm payment status, manage subscriptions, refunds, disputes and fraud checks |
Contract and legitimate interests |
|
Run the affiliate programme |
Attribute referrals, calculate commissions, prevent self-referrals and administer payouts |
Contract and legitimate interests |
|
Secure and improve Stag Vault |
Troubleshoot, monitor performance, prevent abuse and understand service use |
Legitimate interests |
|
Meet legal duties |
Tax, accounting, consumer rights, regulatory requests and legal claims |
Legal obligation and legitimate interests |
|
Send marketing |
News, product updates and offers |
Consent, or legitimate interests where the law permits |
|
Measure advertising |
Analytics, campaign attribution and conversion measurement |
Consent where required |
5 Cookies analytics and advertising
We use essential cookies and similar technologies to operate the websites, remember security and account settings, keep the checkout working and prevent fraud. Where required, non-essential analytics or advertising technologies are used only after you make a choice through our cookie controls.
If enabled, analytics and advertising providers may receive device, browser, usage and campaign information so we can measure website performance and advertising. You can change available choices through the cookie controls and can also restrict cookies through your browser. Blocking essential technologies may prevent parts of the service from working.
6 Who we share information with
We share personal information only where reasonably necessary with:
Shopify and other commerce or hosting providers that operate our storefront, checkout, account and delivery infrastructure;
payment processors, including Stripe or Shopify Payments, that process and secure payments;
Rewardful and related referral technology used to run the affiliate programme and attribute qualifying purchases;
Resend and other communications providers used to send transactional or marketing emails;
analytics, advertising and consent-management providers, where enabled and permitted by your choices;
professional advisers, insurers, auditors and service providers supporting our legal, accounting, security and business operations;
courts, regulators, law-enforcement bodies or other parties where disclosure is required by law or necessary to protect rights, users or the service; and
a purchaser, investor or successor if all or part of the business is reorganised, financed, sold or transferred, subject to appropriate confidentiality and data-protection safeguards.
We do not sell your personal information for money.
7 International transfers
Some providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we use an applicable adequacy regulation, approved contractual protections such as the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism. You may contact us for further information about the safeguards relevant to your information.
8 How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes described above, including legal, accounting, security and dispute requirements. In general:
order, payment, refund and tax records are normally retained for up to six years after the end of the relevant accounting period or transaction relationship;
account and service records are retained while the account is active and for a reasonable period afterwards, normally no longer than six years where they may be needed for contractual or legal claims;
support correspondence is normally retained for up to two years after the matter is closed, unless a longer period is needed for an order, dispute or legal duty;
routine technical and security logs are normally retained for up to 24 months, unless an incident or legal requirement justifies longer retention;
affiliate and commission records are normally retained for the duration of the relationship and up to six years afterwards; and
marketing contact details are retained until you unsubscribe or we determine they are no longer needed. We may keep a minimal suppression record so we can honour an unsubscribe request.
We may securely delete or anonymise information earlier where it is no longer required.
9 Your data protection rights
Depending on the circumstances, UK data-protection law may give you the right to request access to your personal information, correction, deletion, restriction, portability, or to object to certain uses. Where processing relies on consent, you may withdraw consent at any time without affecting earlier lawful processing.
To exercise a right, email founder@stagvault.co.uk. We may need to verify your identity and may ask for information that helps us locate the relevant records. Some rights are subject to legal conditions and exemptions.
You may also complain to the UK Information Commissioner's Office. Information is available at ico.org.uk. We would appreciate the opportunity to address your concern first, but you do not have to contact us before approaching the ICO.
10 Marketing choices
You can unsubscribe from marketing emails using the link in the message or by contacting us. Service messages about an order, account, security issue, subscription or legal change are not marketing and may still be sent where necessary.
11 Security
We use reasonable technical and organisational measures designed to protect personal information. No online system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and tell us promptly if you suspect unauthorised access.
12 Children
Stag Vault is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and take appropriate action.
13 Automated decision making
We do not currently make decisions about you based solely on automated processing that produce legal or similarly significant effects. Automated tools may help identify fraud, abuse or attribution issues, but significant action is subject to appropriate review.
14 Changes to this policy
We may update this policy to reflect changes in the service, providers or law. The latest version will be posted on our website with a revised date. Where a change materially affects your rights or the way we use information, we will take reasonable steps to bring it to your attention.
15 Contact
For privacy questions or requests, email founder@stagvault.co.uk or write to Homeguard Developments Ltd trading as Stag Vault at 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE.