Privacy notice

Updated 2 November 2026

This privacy notice covers stmatthew.co.uk in English, French, Italian and Spanish. It explains what personal data we process when you visit the website, write to us or place an order, what we use it for and who processes it on the technical side.

Who is responsible

The controller is STM Corporate Group LLC, trading as St Matthew, 8000 Centre Park Drive, Suite 130, Austin, TX 78754, USA. You can reach us through the contact form: “Send a message” in the contact panel at the bottom right of every page, or by phone on +1 512 838-3897.

When you visit the website

• Server logs: whenever a page is requested, Vercel, which hosts this website, processes technically necessary data such as your IP address, date and time, the page requested and details of your browser. Without this the website cannot be delivered or protected against attacks. Legal basis: Article 6(1)(f) GDPR and UK GDPR.
• Visitor statistics: we count visits with Plausible Analytics. Plausible uses no cookies and stores no IP addresses; we only see totals such as page views, where visits come from and forms sent, never individuals. Legal basis: Article 6(1)(f) GDPR and UK GDPR.
• Fonts: every font is served from our own server. Loading a page makes no connection to Google Fonts or any other font provider.
• No cookies: this website sets no cookies. If you put something in the cart, your browser's local storage keeps the cart and your checkout details until you order. They leave your browser only when you send the order, and you can delete them in your browser at any time.

The contact panel

The panel at the bottom right of every page holds a phone link, a link to our consultation page and the contact form. The phone link is a plain link: only when you use it do you leave our website, and your phone provider's terms apply.

When you write to us

If you write to us through a form on this website (the contact form, a consultation request or a quote request for a service), we process your name, your email address, your phone number and country if you give them, your message and the page you wrote from.

We store the enquiry in our client system, notify our team by email and send you a confirmation. Our emails go out through Resend. We also add your name and email address to our contact list at Mailchimp; you then receive our newsletter and can unsubscribe at any time through the link in every issue.

Legal basis: Article 6(1)(b) GDPR and UK GDPR where your enquiry is aimed at an engagement, otherwise Article 6(1)(f). The same applies to what you tell us by phone.

When you place an order

If you order a service, we process your name, email address, phone number if given, billing address, company name and VAT number if given, the services chosen and the payment method. We store the order in our client system and send you the confirmation and the invoice by email through Resend. We add your name and email address to our contact list at Mailchimp; you can unsubscribe at any time. Legal basis: Article 6(1)(b) GDPR and UK GDPR, and Article 6(1)(c) for keeping accounting records.

Ways to pay

• Card: you enter your card details directly with Stripe; we never receive them. Stripe processes your payment and contact details to handle the payment and prevent fraud, and tells us whether the payment has arrived.
• Bank transfer: if you choose a transfer, Stripe sets up bank details of your own and we send them to you by email. When you pay, Stripe and the banks involved receive your name, your account details and the payment reference.
• Crypto: if you pay in USDC or Bitcoin, we send you our wallet address by email. Blockchain transactions are publicly visible and cannot be deleted.

Passing on data for your order

When you instruct us on a matter, such as a formation, a registration or an application, we pass on the data that matter needs to the competent bodies and to third parties involved in carrying it out, including the identity checks UK law requires. Legal basis: Article 6(1)(b) GDPR and UK GDPR.

Technology and payment

• Vercel Inc., USA: hosting of this website.
• Plausible Insights OÜ, Estonia: visitor statistics without cookies.
• Plus Five Five, Inc. (Resend), USA: sending our emails.
• The Rocket Science Group LLC d/b/a Mailchimp, USA: contact list and newsletter.
• Stripe: card payments and bank details for transfers.

Data outside Europe

We are a US company, so your data is processed in the United States, and several of the services we use are based outside the EU and the UK. Where we transfer personal data outside Europe we rely on recognised safeguards such as the European Commission's standard contractual clauses and the UK's international data transfer addendum, unless the country benefits from an adequacy decision.

How long we keep data

We keep personal data for as long as we need it for your enquiry, your order or our advice, and beyond that where the law requires us to keep records or we need them to establish or defend legal claims.

Security

The connection to this website is encrypted. No protection is perfect, though, so please do not send especially confidential documents through a form; ask us for a secure route instead.

Your rights

• Access: you can find out what data we hold about you and how we use it.
• Correction: you can ask us to correct inaccurate data.
• Erasure: you can ask us to delete your data unless we must keep it by law.
• Restriction: you can ask us to restrict how we use it.
• Portability: you can ask for a copy of your data in a common format.
• Objection: where we rely on our legitimate interests you can object. You can leave the newsletter at any time through the unsubscribe link.

How to reach us

For any of these rights, a message through the contact form: “Send a message” in the contact panel at the bottom right of every page, or a call on +1 512 838-3897, is enough. We may need to confirm your identity before we answer. If you are not satisfied with our reply, you can complain to the data protection authority where you live; in the UK that is the Information Commissioner's Office.

Changes

We update this notice when our website, the services it uses or the legal requirements change. The version published here, with the date at the top, applies.