The small print

Privacy policy

How we collect, use and look after your data.

Last updated · July 2026

1. Who we are

KindStock Ltd ("KindStock", "we", "us"), a company registered in England and Wales (company number 17314407), provides point-of-sale and inventory management software for charity shops.

For data your shop enters into KindStock (such as donor records, Gift Aid declarations and sales), your charity is the data controller and KindStock acts as a data processor on your behalf. The data processing agreement that governs this is part of our Terms of Service.

For any privacy questions, contact us at [email protected].

2. What data we collect

When you use our website

  • Contact form submissions (name, email, organisation, phone number, message)
  • Basic analytics (pages visited, referring site)

When you use our software

  • Account information (name, email, organisation name)
  • Inventory and sales data you enter into the system
  • Donor information you enter for Gift Aid processing
  • Device and hardware metrics for system monitoring

3. How we use your data

  • To provide and improve our software service
  • To respond to your enquiries
  • To process payments via Stripe (we do not store card details)
  • To send service-related emails (account setup, system alerts)

4. Data storage and security

Your data is stored securely using industry-standard encryption. Your cloud dashboard and backups are hosted on servers within the UK/EU, and backups are encrypted before they leave our servers. Your transactional data is also stored on the in-shop server hardware for resilience.

5. Third parties

We use the following third-party services:

  • Stripe for payment processing
  • Cloudflare for website hosting and security
  • Brevo for transactional email

We do not sell your data to third parties.

6. Your rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. To exercise these rights, email [email protected].

7. Data retention

We retain your data for as long as your account is active. Contact form submissions are retained for 12 months. If you cancel your subscription, we delete your data within 90 days unless required by law to retain it.

8. Changes to this policy

We may update this policy from time to time. We will notify active customers of significant changes by email.