Privacy Policy

Last Updated: January 2026

This Privacy Policy describes how Stage Supply (referred to in this policy as “we”, “us”, or “our”), operated by Stage Supply Limited, collects, uses, and shares your personal information when you visit or make a purchase from https://stagesupply.co.uk (the “Site”).

1. Data Controller

Stage Supply Limited is the data controller responsible for your personal data.

  • Company Name: Stage Supply Limited (Company No: 17311600)

  • Address: Unit 16A, Main Drive, East Lane Business Park, Wembley, London, HA9 7NA, United Kingdom

  • Email: [email protected]

2. Personal Information We Collect

We collect and process the following types of information:

  • Device Information: IP address, browser type, time zone, and cookie data collected automatically when you browse.

  • Order Information: Name, billing/shipping address, email, and phone number.

  • Payment Metadata: We do not store card details, but we receive confirmation of payment, transaction IDs, and the last 4 digits of the card used from our providers.

  • Business Credit Data: If applying for iwocaPay, we may facilitate the transfer of business details to the lender.

3. How We Use Your Personal Information

We use your information to:

  • Fulfill orders (process payments, arrange shipping, and provide invoices).

  • Screen for potential risk or fraud.

  • Provide customer support and respond to inquiries sent to [email protected].

  • Improve Site performance and marketing analytics.

4. Live Basket Support

If you have accepted marketing cookies, our team can see the basket you are building while you are on the Site, so that we can help you if you contact us. This covers the items, quantities and total in your basket, and the IP address, country and browser recorded with it. It does not include your payment details. Your basket appears to us for up to two hours after you last change it. If you decline marketing cookies, your basket is not visible to us at all.

Letting us change your basket. We cannot add, change or remove anything in your basket unless you give us permission first. If a member of our team asks — usually while you are on the phone to us — a message appears on your screen, and nothing is changed unless you choose “Allow”. You are free to refuse, and refusing does not affect the service you receive. While permission is active a notice stays on screen with a “Stop” button, and you can withdraw permission at any time using it. Permission applies only to your current visit and ends when your session does; we cannot carry it over to a future visit.

Each request, your answer to it, and every change we make to your basket is recorded, together with which member of our team made it and when.

Our lawful basis for both of the above is your consent (UK GDPR Article 6(1)(a)), which you may withdraw at any time — for basket visibility by changing your cookie preferences, and for basket changes using the “Stop” button or by declining when asked.

5. Payment Processing (Off-Site)

To ensure maximum security, your payment details are processed off-site by professional third-party gateways. Stage Supply does not store or have access to your full credit card numbers or bank login credentials.

Lloyds Bank Cardnet

Credit and debit card transactions are processed via the Lloyds Bank Cardnet secure gateway. Your card data is encrypted and sent directly to Lloyds.

PayPal

When choosing PayPal, you are redirected to PayPal’s secure platform. They share your shipping address and contact details with us to allow for order fulfillment.

iwocaPay (iwoca Ltd)

For business customers choosing “Pay Later” or installment options, your data is processed by iwoca Ltd.

  • Credit Assessment: By selecting iwocaPay, you acknowledge that iwoca Ltd will perform a credit assessment and identity verification (KYC/KYB).

  • Independent Agreement: Your financial agreement is with iwoca Ltd, not Stage Supply Limited.

  • Privacy Policy: iwoca Customer Privacy Policy

6. Sharing Your Personal Information

We share your information with third parties who help us operate:

  • Website Hosting (OVH SAS): Our Site is a self-hosted WooCommerce store. OVH provides the servers on which the Site and its data are held.

  • Cloudflare: Provides content delivery and security filtering for the Site. Traffic to the Site, including your IP address, passes through their network.

  • Logistics Partners: Couriers (e.g., DPD, Royal Mail) to deliver your goods.

  • Legal Compliance: We may share data to comply with UK laws or to protect our legal rights against fraud.

7. Your Rights (UK GDPR)

As a UK resident, you have the right to:

  • Access the data we hold about you.

  • Rectify any incorrect data.

  • Erase your data (the “right to be forgotten”), subject to tax/legal retention rules.

  • Object to direct marketing at any time.

To exercise these rights, contact us at [email protected].

8. Data Retention

We retain Order Information for as long as necessary to provide our services and comply with UK tax obligations (typically 6 years for financial records).

9. Complaints

If you are unhappy with how we process your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.