Privacy policy
Last updated: 5 November 2026
This policy explains how Stanley Apps Ltd (“we”, “us”) handles personal information when you visit stanleyappsltd.com or contact us. We keep it simple: we collect as little as we can and we never sell your information.
- Little Legends: littlelegendsapp.co.uk/privacy
- Legends Health: legends-health.com/privacy
1. Who we are
Stanley Apps Ltd is the data controller for the information described in this policy. We are a private limited company registered in England and Wales (company number 17554469). Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. We are registered with the Information Commissioner’s Office (ICO) as a data controller, registration number ZC291392. You can check this on the ICO’s public register at ico.org.uk.
You can contact us about privacy at [email protected].
2. Legends Transport Hub
Delivery companies use Legends Transport Hub to run their rounds. For the information in their hub (staff, drivers’ hours and locations, vehicles, customers and proof of delivery), the delivery company is the controller, and Stanley Apps Ltd processes it on their behalf, under our agreement with them. Drivers’ locations are only shared while they are working, and sharing pauses during breaks. If you are a driver, member of staff or customer of a delivery company, please contact that company first about this information.
We use these services to run the hub:
- Cloudflare: hosting, database and file storage, stored in Western Europe.
- Mapbox: maps, road routes and traffic. Mapbox receives the map positions being looked up and your IP address, and may process them in the United States under UK transfer safeguards.
- postcodes.io: UK postcode look-ups.
For the hub’s account and billing contacts, Stanley Apps Ltd is the controller and the rest of this notice applies.
3. What we collect and why
| Information | Why we use it | Legal basis |
|---|---|---|
| Messages you send us: your name, email address and anything you include in your message | To reply to you and deal with your question, feedback or business enquiry | Legitimate interests (answering people who contact us) |
| Basic technical information when you visit this website, such as your IP address, browser type and the page requested | To deliver the website and keep it secure, for example to block attacks. This is handled by our hosting provider. | Legitimate interests (running a secure website) |
| Business and payment records, for example if you pay for an app subscription | To keep accounts and meet tax and legal duties. Card details are handled by our payment provider, Stripe, and are never seen or stored by us. | Contract and legal obligation |
4. Cookies and tracking
This website does not use advertising or analytics cookies, and we do not track you across other websites. Our hosting provider may use strictly necessary security measures to protect the site.
5. Who we share information with
We only share information with trusted service providers who help us run our business, and only as much as they need:
- Cloudflare: hosts this website and passes on emails sent to our addresses.
- Google (Gmail): where our business email is stored.
- Stripe: processes payments for our apps.
- Mapbox and postcodes.io: maps, routes and postcode look-ups in Legends Transport Hub (see section 2).
We may also share information if the law requires it, or with professional advisers such as our accountant. We never sell personal information.
6. International transfers
Some of our providers may process information outside the UK, for example in the United States. Where this happens, they use recognised safeguards such as the UK International Data Transfer Agreement or the UK Extension to the EU–US Data Privacy Framework.
7. How long we keep information
- Emails and enquiries: for as long as needed to deal with them, then up to 2 years in case you get in touch again.
- Business and payment records: for 6 years after the end of the financial year they relate to, as UK law requires.
- Website security logs: kept by our hosting provider for a short time only.
8. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- object to, or ask us to limit, how we use your information;
- ask us to send your information to you or another organisation in a common format.
To use any of these rights, email [email protected]. We will reply within one month. There is normally no charge.
9. Children
This company website is not aimed at children. Little Legends is a family app used by children with a parent in charge; how it protects children’s information is explained in its own privacy policy.
10. Keeping information safe
We use secure, well-known providers, encrypted connections (HTTPS) and strong account security, and we limit who can access personal information.
11. Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.