Who we are
Access Stamp is a UK-based accessibility information platform based in United Kingdom. We are not a charity, compliance tool, or medical service. Contact: hello@accessstamp.co.uk.
Sensitive information in AI tools
Avoid entering names, addresses, National Insurance numbers, medical record numbers, dates of birth, employer case numbers, or other identifying information unless it is genuinely necessary. Access Stamp tools support preparation and do not replace qualified legal, medical, benefits, employment, or safeguarding advice.
If you enter disability, health, or benefits information into our tools, you do so at your own choice. Avoid unnecessary personal data. We do not ask for special-category data unless you choose to include it in a form or tool input.
Processing activities
For each activity below we explain what we collect, why, lawful basis, recipients, retention, and international transfers. Lawful bases are indicative — some areas may need formal legal review.
Contact form enquiries
- Data collected
- Name; Email address; Enquiry type; Message text; Consent record
- Purpose
- Respond to your enquiry and keep a record of the request.
- Lawful basis
- Legitimate interests (responding to enquiries) and consent where you agree to be contacted.
- Recipients
- Access Stamp team; Email delivery provider (Resend) where configured
- Retention
- Up to 24 months unless a longer period is needed to resolve the enquiry.
- International transfers
- Email processors may process data outside the UK — see processor terms.
- Deletion
- Email hello@accessstamp.co.uk with the address you used and we will delete matching contact records where possible.
Newsletter subscriptions
- Data collected
- Email address; Subscription timestamp
- Purpose
- Send occasional updates about guides, venues, and product changes.
- Lawful basis
- Consent.
- Recipients
- Access Stamp team; Email delivery provider where configured
- Retention
- Until you unsubscribe or ask for deletion.
- International transfers
- May involve processors outside the UK — see processor terms.
- Deletion
- Use unsubscribe links in emails or contact us to delete your subscription.
Venue submissions
- Data collected
- Venue name and location; Access features; Optional contact email; Notes and photos you upload
- Purpose
- Review and potentially publish venue access information.
- Lawful basis
- Legitimate interests (building a public access information service) and consent where you provide contact details.
- Recipients
- Access Stamp review team
- Retention
- While the listing is active and up to 24 months after rejection or removal.
- International transfers
- Stored on UK/EU hosting where possible.
- Deletion
- Contact us to request removal of submission data or published listings.
Uploaded venue photographs
- Data collected
- Image files you upload; AI-generated feature suggestions derived from images
- Purpose
- Help draft venue access feature lists for human review.
- Lawful basis
- Legitimate interests (processing submissions) and consent when you upload.
- Recipients
- Access Stamp; OpenAI API when scan feature is used
- Retention
- Images used for scan are processed transiently; do not upload identifiable people or plates.
- International transfers
- OpenAI may process outside the UK — see OpenAI API terms.
- Deletion
- Do not upload personal images; contact us if you submitted images in error.
AI tool inputs
- Data collected
- Free text you enter into toolkit forms; Tool selections and generated drafts
- Purpose
- Generate practical drafts, checklists, and explanations.
- Lawful basis
- Legitimate interests (providing the tool) — avoid unnecessary personal data.
- Recipients
- Access Stamp; OpenAI API when AI generation is used
- Retention
- Session processing; we do not intentionally store full tool inputs long term unless you submit a form.
- International transfers
- OpenAI API processing may occur outside the UK.
- Deletion
- Avoid entering unnecessary identifying information; contact us if you submitted sensitive data by mistake.
AI assistant chat
- Data collected
- Messages you send; Page context metadata
- Purpose
- Generate replies to your questions about access and guides.
- Lawful basis
- Legitimate interests (providing the assistant).
- Recipients
- OpenAI API
- Retention
- Not stored after the session ends unless logged for abuse prevention.
- International transfers
- OpenAI API processing may occur outside the UK.
- Deletion
- Avoid entering unnecessary personal data in chat.
Local accessibility preferences
- Data collected
- Text size, contrast, motion, and font preferences
- Purpose
- Remember your display preferences in your browser.
- Lawful basis
- Legitimate interests (accessibility) / consent implied by use.
- Recipients
- Stored locally in your browser only
- Retention
- Until you clear browser storage.
- International transfers
- Does not leave your device.
- Deletion
- Clear site data in your browser settings.
Usage analytics and security logs
Legal review recommended
- Data collected
- Aggregated request logs; IP addresses in server logs where enabled
- Purpose
- Security, abuse prevention, and performance monitoring.
- Lawful basis
- Legitimate interests (security and service operation).
- Recipients
- Hosting provider (e.g. Vercel)
- Retention
- Typically 30–90 days for logs unless needed for security investigation.
- International transfers
- Hosting providers may process globally — see host privacy notices.
- Deletion
- Contact us if you have concerns about logged data.
Data processors
- OpenAI — AI chat, toolkit tools, and venue photo scan suggestions (API processing).
- Resend — transactional email delivery where configured.
- ElevenLabs — optional text-to-speech for chat replies.
- Vercel — hosting, security logs, and performance.
Cookies and local storage
We do not use advertising or tracking cookies. Accessibility preferences are stored in your browser local storage. Our host may set essential cookies for security and performance.
Your rights
Under UK GDPR you may have rights to access, rectify, erase, restrict, object, and data portability where applicable. Contact hello@accessstamp.co.uk to exercise these rights.
Complaints to the ICO
If you are unhappy with how we handle personal data, contact us first. You may also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
Children and young users
Access Stamp is designed for all ages. We do not knowingly collect personal data from children under 13 without appropriate consent. If a parent or guardian believes a child has provided personal information, contact us and we will delete it where possible.
Changes to this policy
We may update this policy. The date at the top reflects the latest version. See also our corrections and complaints.
