1 Who is responsible for your data
The data controller is Stormline Labs Ltd, trading as KennedyFBA.
- Company
- Stormline Labs Ltd, company number 17452162, England and Wales
- Registered office
- 160 Eureka Park, Upper Pemberton, Kennington, Ashford, England, TN25 4AZ
- Data contact
- stormlinelabs@gmail.com
This notice explains what we collect when you visit this page, join the email list or buy SmartBase, and what you can do about it. We keep the amount of personal data we hold deliberately small.
2 What we collect and why
| What | When | Why, and our lawful basis |
|---|---|---|
| Name and email | You buy | To deliver the product, send the receipt and the delivery emails, and answer support. Performance of our contract with you. |
| Payment details | You buy | Handled entirely by Stripe. We never see or store your full card number. Performance of our contract. |
| Billing country and address | You buy | Fraud checks and our own accounting and tax records. Legal obligation and legitimate interests. |
| Your Airtable account email | Day 8 | To send the collaborator invite that delivers the base. Performance of our contract. |
| Email address | You join the list | To send the free resource you asked for and occasional emails about the product. Consent, which you can withdraw at any time. |
| Support emails | You write to us | To answer you, and to keep a record of what was asked. Performance of our contract and legitimate interests. |
| Order and delivery record | Throughout | To evidence delivery if a payment is disputed. Legitimate interests in defending a claim. |
We do not use advertising trackers or analytics cookies on this page, and we do not sell or share your data with anyone for marketing.
3 Who processes it for us
We use a small number of established providers. Each acts as our processor and handles your data only on our instructions.
| Provider | What it does |
|---|---|
| Stripe | Takes the payment, issues the receipt, handles refunds and disputes. Stripe is the controller of the card data itself under its own privacy policy. |
| Brevo | Holds the email list and sends the emails, where you have joined it. |
| Airtable | Hosts the template base. Your email address is used to issue the collaborator invite. |
| Hosts the support mailbox, so support emails sit there. | |
| YouTube | Serves the tutorial video, embedded in privacy enhanced mode so it does not set tracking cookies until you press play. |
| Hetzner | Hosts this website on a server in Germany. Standard web server logs include IP addresses. |
Some of these providers are based in, or store data in, the United States. Where data leaves the UK it is protected by the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or an adequacy decision, depending on the provider.
4 How long we keep it
- Order and payment records: six years after the end of the financial year of the sale, because UK tax rules require it.
- Delivery and dispute evidence: two years from delivery, then deleted.
- Support emails: two years from the last message.
- Email list: until you unsubscribe, or after two years of no opens, whichever comes first.
- Server logs: rotated and deleted within 30 days.
5 Your rights
Under UK GDPR you can ask us to:
- Give you a copy of the personal data we hold about you.
- Correct anything that is wrong.
- Delete it, where we are not required to keep it for tax or dispute reasons.
- Restrict or object to how we use it.
- Send it to you or another provider in a portable form.
- Withdraw consent to marketing emails at any time. Every email has an unsubscribe link, and using it takes effect immediately.
Email stormlinelabs@gmail.com and we will respond within one month. There is no charge.
If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.
6 Cookies
This page sets no cookies of its own. Google Fonts is loaded for typography and the YouTube embed uses the privacy enhanced domain, which does not set tracking cookies until the video is played. If you go through to checkout, Stripe sets cookies necessary to process the payment and to prevent fraud.
7 What is inside your own copy of the base
Once your copy of SmartBase is in your own Airtable account, whatever you put into it is yours and we have no access to it. We are not a processor of your business data. Your relationship for that data is with Airtable, under their terms.
The master template we deliver from carries no customer records of our own.
8 Changes
If we change this notice we will update the date at the top of the page. If a change materially affects you and we hold your email address, we will tell you.