Privacy Policy

Last updated: 18 October 2026

This policy explains what personal data Stan Media collects through stanmedia.uk, why I use it, who helps me process it, and the rights you have. It also covers the Stan Media Gmail connection that clients can choose to use.

1. Who we are

Stan Media is run by Stanley Barnes as a sole trader based in the United Kingdom. I am the data controller for the personal data collected on this site.

You can contact me about anything in this policy at stan@stanmedia.uk.

2. What I collect

When you apply through the quiz

• Your answers to the five quiz questions. One of them asks for your business's monthly revenue range.
• Your name, email address and phone number. All three are needed to send in an application.
• The fit result and score worked out from your answers.
• The address of the page you applied from, the website that sent you there, any tracking tags in the link (UTM tags), and your browser's user agent. A user agent is a short piece of text that describes your browser and type of device.

If the quiz shows the service isn't a fit, I still save your answers and the details in the last point, but I don't ask for your name, email or phone.

When you book a call

If you book through my Calendly link, I receive your name, email address and the time you booked, and I match it to your application.

When you contact me

If you email me or reply to one of my emails, I receive whatever you send.

Technical data

When you load this site, the companies that host it and its content see your IP address and basic browser details in their logs. I don't use analytics or advertising trackers.

3. Why I use it and the lawful basis

• To work out whether my service is a good fit for your business.
• To reply to you. That means one welcome email straight after you apply, and one follow-up email 48 hours later if you haven't booked a call yet.
• To arrange and run a call if you book one.
• To keep a record of enquiries and how each one went.

My lawful bases under UK GDPR are:

• Steps before a contract. You asked to see if my service is right for you, and these steps are needed before we could work together.
• Legitimate interests. I have a legitimate interest in following up on an enquiry you started. You can object at any time and I will stop.

I don't add you to any marketing list, and I never sell your data.

4. Who processes it for me

These companies help me run the site and the follow-up process. They only handle your data to provide their service to me.

• SupabaseThe database that stores applications and runs the automated emails and booking checks. Stored in Frankfurt, Germany (EU).
• ResendSends the welcome and follow-up emails from stan@stanmedia.uk. Emails are sent from servers in Ireland (EU). Resend is a US company.
• CalendlyHandles call bookings. My system reads the name, email and time of bookings so it can update your application. Calendly is a US company.
• Google WorkspaceMy email inbox for stan@stanmedia.uk, where your replies and emails arrive. Google is a US company.
• NetlifyHosts this website and sees IP addresses in its server logs. It runs a global network and is a US company.
• LoomPlays the video embedded on the home page. Loom receives your IP address and device details when the page loads. Loom is owned by Atlassian and based in the US.
• Google FontsThe site loads a fallback font from Google, so Google receives your IP address when the page loads.
• Base44Hosts the logo and the photo of me shown on the site, so it receives your IP address when those images load.
• jsDelivrDelivers a code library used by the private admin page. Only my team visits that page.

Some of these providers handle data outside the UK. Where that happens, I rely on the protections they offer, such as UK adequacy regulations or standard contractual clauses.

5. How long I keep it

• Enquiries that don't become clients: deleted 24 months after you applied.
• Clients: kept for the length of our contract, plus 6 years for tax records.
• Server logs: kept by the hosting providers under their own policies.

6. Your rights

Under UK GDPR you have the right to:

• access the personal data I hold about you
• have it corrected if it is wrong
• have it deleted
• object to how I use it
• restrict how I use it
• get a copy in a format you can take elsewhere (portability)
• withdraw your consent at any time, where I rely on it

To use any of these rights, email stan@stanmedia.uk. I will reply within one month.

If you are unhappy with how I handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

7. Cookies and local storage

• This site does not set any cookies of its own and does not use analytics or advertising trackers.
• The quiz keeps your answers only in the open page until you send them. Nothing is saved in your browser.
• The Loom video player loads from loom.com and may set its own cookies. Loom's own privacy policy covers those.
• The private admin page, used only by my team, keeps a sign-in session in the browser's local storage so staff stay signed in. Signing out removes it.

8. Client dashboards and Gmail connection

This section covers the Stan Media app for my clients, including the optional Gmail connection.

• Clients of Stan Media can sign in to a private dashboard to see the leads from their own funnel.
• Clients can choose to connect their Gmail account with Google sign-in. The app asks for two permissions only:
  • Send email on your behalf (gmail.send)
  • See your email address (userinfo.email)
• The app cannot read, search, delete or change any emails in your inbox.
• It is used only to send the welcome and follow-up emails to leads who applied through your own funnel, and to show which Gmail account is connected.
• The connection token is stored encrypted in the database. It is never shared, never sold, never used for advertising, and never used to train AI or machine learning models. No person reads it.
• You can disconnect at any time in your dashboard or at https://myaccount.google.com/permissions. The token is then deleted.

Stan Media's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Children

This site and my services are not aimed at anyone under 18. If you think someone under 18 has sent me their details, email stan@stanmedia.uk and I will delete them.

10. Changes to this policy

If I change this policy, I will update the date at the top of this page.