Privacy Policy

Last updated: October 2026

This policy explains what personal data Natterio collects, why, and what your rights are under UK GDPR and the UK Data Protection Act 2018.

Who we are

Natterio (operated at natterio.com) is a trading name of Seamstack Ltd, a company registered in England and Wales under company number 17308485, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Seamstack Ltd is the data controller for the account data described in this policy.

Seamstack Ltd is registered with the Information Commissioner's Office (ICO) as required, registration reference ZC186082.

Two layers of data processing

Natterio operates two distinct roles depending on whose data is involved:

• Data we collect from you (the community owner): When you sign up and manage your account on natterio.com, Natterio is the data controller. This policy covers that data.
• Data collected by your community site: When your community members interact with the site you build on Natterio, you (the community owner) are the data controller for their personal data. Natterio acts as your data processor under Article 28 UK GDPR. You are responsible for having a lawful basis for processing your members' data and for maintaining your own privacy policy for your community site.

If you are a community owner looking for guidance on your members' data obligations, contact us at privacy@natterio.com.

What data we collect and why

Account and sign-in

If you sign in, we collect your email address and store a session record. We use this solely to authenticate you. We only send transactional, account-related, and platform-update emails; we do not send third-party marketing emails. The legal basis is the performance of a contract (providing you access to member features you have requested).

Server logs

Like all web servers, our hosting provider (Cloudflare) automatically records standard access logs (IP address, browser type, pages visited, timestamps). These are retained for up to 30 days for security and diagnostic purposes. When someone submits a contact or enquiry form on a site built with Natterio, we also keep the submitter's IP address for up to 30 days, solely to limit spam, then delete it. The legal basis is legitimate interests.

Billing

If you subscribe to a paid plan, Stripe processes your payment. We store your Stripe customer and subscription identifiers and your plan status, but never your full card number. The legal basis is performance of a contract.

Consent records

When you create an account or import a site, we record that you accepted our terms — including the wording you agreed to, a timestamp, and the IP address and browser the request came from. We keep the record of consent as proof, but remove the IP address and browser details after 12 months. The legal basis is compliance with a legal obligation and our legitimate interest in maintaining accurate records.

Analytics

We collect basic first-party analytics — anonymous events such as page views, sign-ups, and feature usage — to understand how the platform is used and improve it. These events do not include your name or email and are not shared with any third-party analytics service. We do not use advertising or cross-site tracking cookies. The legal basis is legitimate interests.

Cookies

We only use cookies that the service needs to work, which do not require your consent: the sign-in session and security cookies (authjs.*), a short-lived cookie that records that you accepted our terms while signing up with Google, and a sign-in cookie for members of a community site (ms_*). We do not use advertising, analytics, or tracking cookies.

One further cookie is optional and set only if you say yes: if you arrive through a partner's referral link we ask whether we may set a first-party cookie (nt_ref, 90 days) that remembers which partner referred you so they can be credited if you sign up. If you decline, nothing is stored and the partner is not credited. Your choice is remembered in your browser's local storage.

Who we share data with

We do not share your data with third parties, except with the trusted sub-processors listed below to provide the service. We never sell or rent your data. Our sub-processors are:

• Neon — database hosting (UK, London region), where your account data is stored.
• Cloudflare — hosting, content delivery, and security; processes request metadata (including IP addresses) to serve and protect the site.
• Resend — email delivery, used to send sign-in links and account or site notifications.
• Stripe — payment processing for paid plans. Your card details are entered directly with Stripe and are never stored on our systems; we receive only a token and your billing status.
• Anthropic — AI generation. When you use the site builder, the details you enter (such as your community name and description) are sent to Anthropic to generate your site. Your inputs are not used to train their models.
• Unsplash and Pexels — stock photo search. Only search terms taken from your site brief are sent; no personal data.
• Google — our business email, and “Sign in with Google” if you choose it.
• cron-job.org — runs our scheduled maintenance jobs. It receives no personal data.

The same list, with what each one does and where, is on our Sub-processors page, and is part of our Data Processing Addendum for community owners.

International data transfers

Some of our sub-processors (including Cloudflare, Stripe, Resend, and Anthropic) are based in, or process data in, the United States or other countries outside the UK and European Economic Area (EEA). Where personal data is transferred outside the UK/EEA, we ensure an appropriate safeguard is in place as required by UK GDPR — relying on UK ‘adequacy’ regulations where they apply, and otherwise the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. We keep your account data in the UK or EU where the option is available (for example, our database is hosted in London).

How long we keep your data

Account data is kept for as long as you have an account. If you request deletion, we will erase your account and associated data within 30 days. Server logs and the spam-prevention IP addresses described above are deleted after 30 days. IP addresses held with consent records are removed after 12 months.

GCSE revision service

If you use our GCSE revision site, we store your sign-in email and the self-ratings you give each topic, so your progress is saved for you. We do not use this for marketing. You can ask us to delete it at any time using the contact details below.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (“right to be forgotten”)
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

To exercise any of these rights, email us at privacy@natterio.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the ICO at ico.org.uk.

Security

We use HTTPS for all data in transit. Our database provider encrypts data at rest. We use passwordless authentication (magic links) so no passwords are ever stored. We review security practices regularly.

Changes to this policy

We will update this page if our practices change. Continued use of the site after a change constitutes acceptance of the updated policy.

This policy is provided for transparency. It is not professional legal advice. If you have questions, contact us at privacy@natterio.com.