Privacy

Last updated: 28 October 2026

The short version

Stocked keeps a venue's stock: what it buys, from whom and for how much, what it counts, what it sells, and what each drink makes. Almost all of it is about the business, not about people. We don't sell anything, show adverts or share data with other venues.

Who we are

Stocked is run by Robert Smith, trading as Full Stop Hospitality, in Glasgow. Full Stop Hospitality also makes Rota Done and Seated. Contact: hello@fullstophq.co.uk.

Stocked is the data controller for accounts (owners, managers and staff who sign in). For anything personal a venue adds to its own records, such as a supplier contact's name, the venue is the controller and Stocked is its processor.

What we store

• Your account: name, email and a scrambled copy of your password, so you can sign in. We cannot read your password.
• Sign-in records: when you sign in, your internet address and browser type, and the same against changes made to settings, to keep accounts secure and show who changed what.
• Who did what: which team member started or finished a count, logged a delivery or changed a price, for the venue's records.
• The venue's stock: products, suppliers, prices, recipes and specs, counts, deliveries and the till sales you upload.
• On the phone itself: a count done with no signal waits on that phone until it can be sent, then it's cleared.

Where it is kept and who else sees it

• Data is stored on a server in the UK, and all traffic is encrypted (HTTPS).
• Emails are sent through IONOS, our email provider.
• When you subscribe, Stripe handles your card. We never see card numbers.
• Cookies are used only to keep you signed in. No advertising or tracking cookies, and no analytics.
• We don't sell your data or share it with anyone else, and other venues never see it.
• Nightly backups are kept for up to six months, then deleted.

How long we keep it

A venue's stock records are kept for as long as it uses Stocked, so its history and trends add up.

When a venue leaves, email us and we delete the venue, its stock records and its team within one month, apart from copies in our backups, which expire within six months. An account you close is deleted the same way.

Your rights

Under UK GDPR you can ask to see, correct or delete your details, object to how they are used, or take a copy. Email hello@fullstophq.co.uk and we will reply within one month. If you work at a venue that uses Stocked, you can also ask your employer, who decides what goes into its records.

If you are unhappy with how your data has been handled, you can complain to the Information Commissioner's Office at ico.org.uk.