Your data,
kept straight.

1. Who we are

STANDR is operated by Luke Holdsworth, a sole trader trading as STANDR. For the purposes of UK data protection law, Luke Holdsworth trading as STANDR is the data controller for the personal data described in this notice.

You can contact us about this notice at any time via the in-app Help button or at standr.co.uk.

2. What we collect

Account data — your name, email address and login credentials, used to create and secure your account (legal basis: performance of our contract with you).

Business data — the records your company enters into STANDR, such as staff names, pay rates, timesheets, customers, scaffolds and inspections, used to provide the service (legal basis: performance of our contract).

Support data — messages you send us through the in-app Help button or by email, used to respond to you and resolve issues (legal basis: legitimate interests).

Usage and device data — technical information such as IP address, device and browser type, and how the app is used, used for security, fraud prevention and product improvement (legal basis: legitimate interests).

3. Who we share it with

Service providers — hosting, database and infrastructure providers who process data on our behalf to run the service, under appropriate safeguards.

Stripe — our payment processor. When you subscribe, Stripe processes your card details and related billing information to take payments, manage your subscription, prevent fraud and issue invoices. Stripe also acts as an independent controller for some of that processing (such as fraud prevention).

Professional advisers — accountants or legal advisers, where needed to run the business.

Authorities — where we are required to share data by law.

We do not sell your personal data to anyone.

4. International transfers

Some of our service providers process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as adequacy regulations or standard contractual clauses.

5. How long we keep it

We keep personal data only for as long as needed for the purposes above — for example, account data while your account is active, and business records while your company uses the service. When data is no longer needed, it is deleted or anonymised. Financial and tax records may be retained longer where the law requires.

6. Your rights

Under UK GDPR you have the right to: access your personal data; have it corrected; have it erased; restrict or object to its processing; data portability; and to withdraw consent where processing is based on consent.

To exercise any of these rights, contact us via the in-app Help button. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and row-level isolation of each company's records.

8. Cookies

STANDR uses essential cookies and storage only — to keep you signed in and remember your preferences. We do not use advertising or marketing cookies. You can clear cookies at any time through your browser settings, though signing in will no longer persist.

9. Changes

We may update this notice from time to time. The current version is always published on this page. Last updated October 2026.