1. Who we are
TyreStack is a trading name of Mediant Partners Ltd, a private limited company registered in Scotland (company number SC889184) with its registered office at 5 South Charlotte Street, Edinburgh, EH2 4AN, Scotland ("we", "us").
We are the controller of the personal data described in this notice, under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
Contact for anything to do with personal data: privacy@tyrestack.com, or write to us at the registered office above.
Two roles. This notice covers personal data we are responsible for: visitors to this site, people who contact us, prospective and current customers (mobile tyre fitters) and their staff. When a fitter uses TyreStack to handle their own customers' details (names, addresses, phone numbers, vehicle registrations, messages), the fitter decides why and how that data is used and we act as their processor. That is covered in our data protection and processing terms, not here. If you are a fitter's customer and want to see or correct your data, contact the fitter first.
2. What we collect, why, and our lawful basis
| Who you are | What we hold | Why | Lawful basis (UK GDPR Art. 6) |
|---|---|---|---|
| Anyone visiting this site | Technical request data our hosting provider logs: IP address, browser and device type, pages requested, date and time, country. | To deliver the site, keep it secure, and prevent abuse. | Legitimate interests: running and securing our website. |
| Anyone who emails or messages us | Your name, email address, phone number and message, and anything else you tell us. | To reply, and to keep a record of the conversation. | Legitimate interests: answering enquiries. Where you ask us to take steps before a contract, Art. 6(1)(b). |
| A fitter (or their staff) enquiring about or trialling TyreStack | Business name, your name and role, work email and phone, the size and shape of your business, what you asked about. | To discuss, demonstrate and set up the service you asked about. | Legitimate interests; or steps at your request before a contract (Art. 6(1)(b)). |
| A business contact we reach out to | Business name, contact name, role, work email or phone, and where we found them (for example a public business listing). | To tell mobile tyre fitters about TyreStack where we think it is relevant to them. | Legitimate interests: promoting our services to businesses. We always say who we are and how to opt out, and we stop when you ask (see PECR). |
| A customer (fitter) and their users | Account details, login identifiers, role, billing contact, subscription and invoice records, support messages, and records of how the service is used for security and support. | To provide, secure, support and bill for the service. | Contract (Art. 6(1)(b)); legal obligation for accounting and tax (Art. 6(1)(c)); legitimate interests for security and service improvement. |
Where we rely on legitimate interests we first weigh our interest against yours, and we do not proceed where your rights and freedoms override ours. You can object at any time (section 8).
We do not knowingly collect personal data from children. TyreStack is a business service.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects (UK GDPR Art. 22). We do not sell personal data.
3. Where the data comes from
Mostly from you, directly. For business contacts we reach out to, from public business sources such as a company's own website, directories and social profiles. We use only business contact details.
4. Who we share it with
Only with service providers who process data for us under written terms (our "processors"), and where the law requires it (for example to a court, regulator or tax authority).
| Provider | What for |
|---|---|
| Cloudflare, Inc. and its UK/EU group companies | DNS, hosting and security for this website. |
| Google Workspace (Google Ireland Ltd / Google LLC) | Our email inboxes and documents. |
| Google Cloud (Google Cloud EMEA Ltd), London region | Hosting the TyreStack service itself for customers. |
| Our professional advisers (accountants, lawyers, insurers) | Advice, accounts and tax, under duties of confidentiality. |
We keep a current list of sub-processors for the TyreStack service in the data protection terms.
5. Transfers outside the UK
Where a provider processes personal data outside the UK, we make sure a lawful transfer mechanism applies: a UK adequacy regulation (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified), the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment where required. The TyreStack service is hosted in the Google Cloud London region. Ask us at privacy@tyrestack.com for details of the safeguards in place.
6. How long we keep it
| Data | Kept for |
|---|---|
| Website server logs | Up to 30 days, longer only to investigate a specific security incident. |
| Enquiry and support correspondence | While we are dealing with the matter, then up to 24 months. |
| Business contacts we have approached, and who have not replied | Up to 12 months from last contact. If you ask us to stop, we keep only your name and email on a suppression list so that we honour that request. |
| Customer account and billing records | For the life of the contract, then six years for accounting and tax records (the period HMRC requires for company records); other account data is deleted or anonymised within 90 days of the contract ending. |
7. Security
All traffic to this site is encrypted with HTTPS/TLS. The TyreStack service separates each customer's data from every other customer's at database level, encrypts data in transit and at rest, and restricts staff access to what is needed for the job. No system is perfectly secure. If a breach is likely to put your rights at risk we will notify you and the Information Commissioner's Office as the law requires.
8. Your rights
Under UK GDPR you have the right to:
- be informed about how we use your data (this notice);
- access a copy of the personal data we hold about you;
- have it corrected if it is wrong or incomplete;
- have it erased where we no longer have a lawful reason to keep it;
- restrict our use of it in certain circumstances;
- data portability: receive data you gave us in a common machine-readable format, where we process it on the basis of contract;
- object to processing based on legitimate interests, and to direct marketing at any time, free of charge; and
- withdraw consent where we rely on it, without affecting earlier processing.
To use any of these rights, email privacy@tyrestack.com. We may need to confirm who you are first. We reply within one month; if your request is complex or you have made several, we may extend that by up to two further months and will tell you why within the first month. We do not charge a fee unless a request is clearly unfounded or excessive. Some rights have exceptions in the law, and we will explain if one applies.
9. Complaints
If you are unhappy with how we have handled your personal data, please tell us first at privacy@tyrestack.com. We will acknowledge your complaint within 30 days and respond without undue delay, keeping you informed if it takes longer.
You also have the right to complain to the UK regulator at any time: the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; telephone 0303 123 1113; ico.org.uk/make-a-complaint. You can also bring a claim in the courts.
10. Cookies
This site does not set cookies and runs no analytics, advertising or tracking scripts. Details are in our cookies and PECR notice.
11. Links to other sites
This site links to other sites, including our public demo. Those sites are responsible for their own privacy practices; read their notices. The demo contains invented records only and does not ask you for personal data.
12. Changes to this notice
We will update this notice as the service and the law change. The date at the top shows the latest version. If a change materially affects how we use your data, we will tell you directly where we can.