Sgript Website Privacy Notice

Version 1.0  |  Last reviewed: 22/04/2026

1. Who we are

Sgript is a product provided by Stable Resources Ltd (“Stable”, “we”, “us”, “our”). For the purposes of the Sgript website and contact forms, Stable Resources Ltd is the data controller.

Company details

• Stable Resources Ltd
• Registered in England and Wales
• Company number: 04312513
• Registered office: Stable Studios, 1 Talbot St, Pontcanna, Cardiff CF11 9BW
• Website: https://www.stable.co.uk (opens in new tab)

We have appointed a Data Protection Lead who is responsible for overseeing data protection compliance and this privacy notice. If you have any questions about this notice, how we handle your personal data, or wish to exercise your rights, please contact: dataprotection@stable.co.uk

2. What personal data we collect

When you use the Sgript website contact form, we collect personal data directly from you, including:

• First and last name
• Email address
• Company name (if provided)

We also automatically collect certain technical information when the form is submitted, such as:

• Date and time of submission
• IP address
• Basic browser and device information

Some of this technical information may be collected through cookies and similar technologies. Further details are set out below.

3. Cookies and similar technologies

We use cookies and similar technologies as part of how we collect and process limited technical information described above. We use these technologies only where they are strictly necessary for the operation and security of our website.

These technologies may be used to:

• Ensure the website functions correctly
• Support security measures, such as preventing fraudulent or malicious activity
• Enable basic features such as form submission

Examples may include:

• Session cookies used to maintain the integrity of your interaction with the website
• Security-related cookies used to detect and prevent abuse

These cookies do not track you for marketing purposes and are not used for analytics. Because these cookies are strictly necessary for the operation of the website, your consent is not required under the Privacy and Electronic Communications Regulations (PECR). You can control and manage cookies through your browser settings. However, disabling strictly necessary cookies may affect the functionality of the website.

4. Why we use your data

We use your personal data to:

• Respond to your enquiry and provide information about Sgript or our services
• Take steps at your request prior to entering into a potential contract
• Maintain records of communications for business, administrative and audit purposes

We do not use contact form submissions for automated decision-making or profiling.

5. Lawful basis for processing

We rely on the following lawful bases under UK GDPR:

• Pre-contractual steps - where your enquiry relates to a potential purchase or use of Sgript
• Legitimate interests - to respond to general enquiries, manage communications and support our business operations

Our legitimate interests include communicating effectively with prospective customers and maintaining appropriate business records. We have assessed that this processing is necessary and proportionate and does not override your rights and freedoms. You are not added to marketing mailing lists as a result of submitting a contact form.

6. Who we share your data with

Your personal data may be accessed by:

• Authorised employees of Stable Resources Ltd
• Trusted service providers who support our operations, such as:
  • Website hosting providers
  • IT support and system providers
  • Communication and email service platforms

These providers process personal data only on our instructions and are subject to appropriate contractual and security obligations. We do not sell your personal data or share it with third parties for their own marketing purposes.

7. How long we keep your data

We retain personal data collected via the contact form only for as long as necessary to fulfil the purposes described above.

• Enquiries that do not result in an ongoing relationship are typically retained for up to 12 months after the last contact
• Where a business relationship is established, data may be retained for longer in line with contractual, legal and accounting requirements

Data is securely deleted or anonymised when it is no longer required.

8. International transfers

We aim to store and process personal data within the UK or the European Economic Area (EEA). Where personal data is accessed or processed outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

• The UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses

9. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

10. Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request erasure of your personal data
• Restrict or object to processing
• Request transfer of your data (data portability), where applicable
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise your rights, contact: dataprotection@stable.co.uk

Providing your personal data is voluntary, however we may be unable to respond to your enquiry if required information is not provided.

11. Complaints

If you have concerns about how we handle your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk (opens in new tab)

12. Changes to this notice

We may update this privacy notice from time to time. Any changes will be published on this page, and where appropriate, notified to you.