Privacy Policy

Last updated: 15 Dec 2025
Version: 2.0

Security notice

For security reasons, please read the payment security alert in our Terms & Conditions.

1) Who we are (Data Controller) and scope

This Privacy Notice explains how personal data is collected and used when you access or use Stonecash.net (the “Platform”).

Data Controller (Europe/UK):
MG Stone Ltd, 87 Chancery Lane, Ground Floor, London, United Kingdom, WC2A 1ET, Company number 10471737 (“we”, “us”, “our”, “Stonecash”).

US customer service / commercial support office:
StoneBridge Management Inc, 4730 S Fort Apache, Las Vegas, NV 89147, USA (commercial support/customer service).
Your contract for use of the Platform is with MG Stone Ltd as stated in the Terms & Conditions.

Contact for privacy requests: [PRIVACY CONTACT EMAIL] (or [email protected]).

By creating an account and using the Platform you acknowledge this Privacy Notice and our Terms & Conditions.

2) B2B Platform, registration and invitation codes

Stonecash is primarily a B2B platform. Users register and act on behalf of their company and confirm they are at least 18 years old and authorised to act on behalf of their company.

Registration generally requires an invitation code provided by a Vendor (or otherwise approved by Stonecash). In some cases, at a Vendor’s request and subject to Stonecash approval, registration to a Vendor’s Private Store may be enabled without an invitation code (e.g., via a dedicated link/subdomain).

3) What personal data we collect

We may collect and process the following categories of personal data:

A. Data you provide directly

• Account and profile data: name, surname, company name, business role (if provided), email, phone number, business address (if provided), password (stored in an encrypted/hashed form).
• Vendor profile data (where applicable): company description, logo, contact details, sales contacts, and any other details submitted by Vendors.
• Communications: emails, messages, enquiries and support requests sent to us or through the Platform.

B. Transaction / order tool data (optional features)
If you use the Order Tools, we may process order-related data such as order requests, proforma invoices, order status changes and related communications. Stonecash is not a party to the sale contract (which remains between Vendor and Buyer), but may process data necessary to operate these tools.

C. Technical and usage data (automatic)

• Device and log data: IP address, browser type/version, operating system, time zone, pages viewed, clickstream data, date/time of access, and other diagnostic data.
• Cookies and similar technologies (see section 6).

4) How we use personal data (purposes)

We use personal data to:

• create and manage user accounts and access to the Platform (including invitation-code access);
• enable Users to browse the Platform and contact Vendors, and enable Vendors to manage listings, Private Stores and enquiries;
• operate analytics and statistics features (including Vendor-facing statistics described below);
• provide customer service, respond to enquiries, and send service communications (e.g., account notices, security notices);
• prevent fraud, enforce our Terms & Conditions, and protect the Platform, our users and our rights;
• comply with legal obligations.

Marketing communications (if any) will be sent in accordance with applicable law and you may opt out at any time by contacting us or using any opt-out mechanism provided.

5) Sharing of data and “Visitor information shown to Vendors”

We do not sell personal data.

We may share personal data in the following circumstances:

A. With Vendors (important)
The Platform includes features that allow Vendors to see information about registered users who interact with their listings/profile/Private Store. In particular, when you are registered and logged in, a Vendor may be able to see the registration details you provided, including name, surname, company, email address and phone number, together with interaction statistics (e.g., views/interactions).
This enables Vendors to respond to enquiries and manage legitimate business communications. Vendors are required under our Terms & Conditions to use this information lawfully and not for spam/unsolicited bulk messaging.

B. Service providers (processors)
We use trusted third-party service providers to help operate and improve the Platform (e.g., hosting, analytics, email delivery, customer support tools, security services). They may access personal data only to perform services on our behalf and are not permitted to use it for other purposes.

C. Payment processing (Stripe)
Subscription payments are processed by our payment provider (e.g., Stripe). We do not store full credit card details. Payment providers process payment data in accordance with their own privacy policies.

D. Legal and protection reasons
We may disclose data where required by law, court order, or where we reasonably believe disclosure is necessary to enforce our Terms & Conditions, protect users, prevent fraud, or protect rights, property and safety.

6) Cookies and similar technologies

We use cookies and similar technologies to:

• enable core Platform functionality (e.g., login sessions, security);
• remember preferences;
• understand Platform usage and improve performance.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Platform.

7) Data retention

We retain personal data for as long as needed to:

• provide the Platform and maintain your account;
• comply with legal obligations;
• resolve disputes;
• enforce our agreements.

If you request deletion, we will delete or anonymise personal data where possible, but we may need to retain certain data for legal, compliance, fraud-prevention, accounting or legitimate business purposes (for example, records relating to invoices, transactions, disputes and security logs).

8) Security

We implement appropriate technical and organisational measures to protect personal data. However, no system is 100% secure. You are responsible for keeping your password confidential and logging out when using shared devices.

9) Your rights

Depending on your location (including UK/EU), you may have rights to:

• access your personal data;
• correct inaccurate data;
• request deletion;

To exercise these rights, contact us at [email protected]. We aim to respond within applicable legal timeframes (typically within 30 days, subject to complexity and legal requirements).

10) International transfers

Where personal data is transferred outside the UK/EEA, we will implement appropriate safeguards as required by applicable law.

11) Changes to this Privacy Notice

We may update this Privacy Notice from time to time. The “Last updated” date will be revised. Where appropriate, we may notify you through the Platform or by email.

12) Questions and complaints

If you have concerns about privacy, please contact us using the contact form or at [email protected] and we will try to resolve it.