Privacy
What this website records about you, what happens to an email you send to Talstok, what Talstok keeps about the people who log in to it, and your rights.
This website
Read from the code that serves it.
No cookies of our own
The site’s own code sets no cookie. Cloudflare, which serves the site, can set a security cookie when it checks whether a visit is automated.
No analytics or tracking
The site runs no analytics and carries no advertising tags or tracking pixels.
No scripts
The pages run no JavaScript. The menus and the questions open with plain HTML.
Other websites
The typeface and the pictures are the site’s own files, so a page asks no other website for anything.
Our records
Talstok’s own log of each request keeps no IP address and nothing else that identifies you.
Cloudflare
Cloudflare serves this website. It handles each request, including your IP address, to deliver the page and protect the site from attack.
Apart from what Cloudflare needs to deliver each page, this website collects nothing about you. The rest of this page is about what happens when you write to us, when you work at a shop that uses Talstok, or when you buy from one.
Email you send us
If you write to contact@talstok.com, Cloudflare’s email routing passes your message on to the inbox where we read it, and the email service that runs that inbox keeps it for us.
We use your address and what you send only to reply to you and, if you ask, to set up a shop for you. Under UK data protection law, replying is in our legitimate interests, and setting up a shop is a step you asked us to take. We keep your message for as long as we need it for that.
If you work at a shop that uses Talstok
To let you into the dashboard, we keep your name, your email address, and the shops you can open with your role in each. The shop’s records also note which of its people did certain things, such as setting a price or sending an order.
When you log in on Talstok’s own log-in pages, we keep each session and each browser you log in on, named only by the browser and system (such as Chrome on Mac), never by IP address. A session ends after 7 days unused and after 30 days at most, and a browser is no longer recognised after 30 days. We keep the record of each session and browser after it ends.
If you set them up, we also keep your authenticator app’s secret, encrypted; your recovery codes, scrambled one way so they can be checked but not read; and each passkey’s name and public key. A passkey’s private key stays on your device. The cookies these pages set only log you in, keep you logged in and recognise a browser you have logged in on before.
Until the live dashboard moves to these pages, it signs you in through Cloudflare Access. Cloudflare emails you a code and sets its own cookies to keep you logged in.
If you bought from a shop that uses Talstok
The shop decides how your details are used, and its own privacy notice says how. Ask the shop first: it can find and export your details, correct the delivery address on an order not yet sent, and erase your details, apart from orders it must keep for its records.
Who is responsible for your data
The legal name and address of the business behind Talstok are not on this page yet. Until they are, write to contact@talstok.com about anything on this page.
Your rights
Under UK data protection law you can ask for a copy of what we hold about you, ask us to correct or delete it, and object to how we use it. Write to contact@talstok.com. If you are not happy with our answer, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this page
When this page changes, the date at the top changes with it.