Who we are
Stok is a licensed digital assets marketplace that connects creators and buyers through the sale and distribution of photos, video, digital art, design assets, and prints.
Our website address is: https://stok.land
Stok operates as a multi-vendor platform where independent artists, photographers, filmmakers, and digital creators can upload, license, and sell their work to customers worldwide.
Comments & User Interactions
When visitors leave comments, reviews, or feedback on the site, we collect the data shown in the comments form, including:
- Name
- Email address
- Website (if provided)
- Comment content
We also collect the visitor’s IP address and browser user agent string to assist with spam detection, fraud prevention, and platform security.
An anonymized string (hash) created from your email address may be provided to the Gravatar service to determine whether you are using it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/
Once approved, your profile image may be publicly visible alongside your comment or review.
Media & Digital Asset Uploads
If you upload images, videos, or digital assets to Stok as a creator or vendor:
- You are responsible for ensuring you hold the legal rights to distribute and license the content.
- You should avoid uploading files that contain embedded location data (EXIF GPS), as this data can be extracted by users who download the assets.
- Uploaded content may be processed, resized, watermarked, previewed, or compressed for marketplace display and licensing delivery.
Buyers who license assets may download files according to the licensing terms associated with each product.
Cookies
Stok uses cookies to enhance user experience, platform functionality, and analytics.
Comment Cookies
If you leave a comment or review, you may opt-in to saving your name, email, and website in cookies for convenience. These cookies last for one year.
Login Cookies
When you visit our login page, a temporary cookie is set to determine if your browser accepts cookies. This contains no personal data and is discarded when you close your browser.
When you log in, we set cookies to save:
- Login session information
- Display and interface preferences
Login cookies last two days, while screen preference cookies last one year.
Selecting “Remember Me” extends login persistence to two weeks. Logging out removes login cookies.
Creator / Vendor Dashboard Cookies
Additional cookies may store dashboard settings, upload states, and storefront preferences for platform functionality.
Embedded content from other websites
Assets and articles on Stok may include embedded content such as:
- Videos
- Portfolio previews
- Social media posts
- External galleries
Embedded content behaves exactly as if you visited the third-party website directly. These platforms may:
- Collect data about you
- Use cookies
- Track your interaction
- Monitor engagement if you are logged into their services
We encourage users to review the privacy policies of those external platforms.
Who we share your data with
We do not sell personal data.
However, we may share data with trusted third parties necessary to operate the marketplace, including:
- Payment processors
- Licensing and rights management systems
- Cloud storage providers
- Fraud prevention services
- Email and marketing platforms
If you request a password reset, your IP address will be included in the reset email for security verification.
How long we retain your data
Comments & Reviews
Comments and their metadata are retained indefinitely to help with moderation and platform continuity.
User Accounts
For registered users (buyers or vendors), we store the personal information provided in user profiles, including:
- Contact details
- Billing information
- Licensing history
- Sales records (for creators)
Users can view, edit, or delete personal information at any time (except usernames). Administrators can also access and edit this information for operational and legal purposes.
Transaction Records
Purchase and licensing records are retained for accounting, legal, and royalty reporting obligations.
Your Data Rights
If you have an account or have made purchases or uploads on Stok, you have the right to:
- Request an exported file of your personal data
- Request correction of inaccurate data
- Request deletion of personal data
This excludes data we must retain for:
- Legal compliance
- Financial reporting
- Security and fraud prevention
- Licensing enforcement
Data requests can be submitted through our official contact channels on the website.
Where your data is sent
User data may be processed through secure third-party services including:
- Automated spam detection systems
- Payment gateways
- Cloud hosting infrastructure
- Digital delivery networks
These services operate under strict data protection and confidentiality agreements.
Platform Security & Licensing Protection
To protect creators and buyers, Stok may use:
- Watermarking technologies
- License tracking systems
- Download monitoring
- Fraud detection tools
This ensures digital assets are used according to their licensed terms.
Absolutely — here is your enhanced Privacy Policy add-on with POPIA (South Africa) and GDPR (EU/EEA) compliance clauses, written to integrate seamlessly into your existing Stok Privacy Policy.
You can place this as a new section titled:
POPIA & GDPR Compliance
Stok is committed to protecting personal information in accordance with international and South African data protection laws, including:
- The Protection of Personal Information Act (POPIA) — South Africa
- The General Data Protection Regulation (GDPR) — European Union / EEA
We apply these principles to all users, regardless of geographic location.
Lawful Basis for Processing Personal Data
We collect and process personal data only where we have a lawful basis to do so, including:
Contractual necessity
To provide marketplace services such as:
- Account creation
- Asset licensing
- Payment processing
- Vendor payouts
- Customer support
Legitimate interests
To operate, secure, and improve the platform, including:
- Fraud prevention
- Platform analytics
- Licensing enforcement
- Content moderation
Legal obligations
To comply with financial, tax, copyright, and regulatory requirements.
Consent
Where required, such as:
- Marketing communications
- Newsletter subscriptions
- Optional cookies
- Promotional campaigns
Users may withdraw consent at any time.
Data Subject Rights (GDPR & POPIA)
Under POPIA and GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion (“Right to be Forgotten”)
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
To exercise these rights, users may contact us through the official contact details listed on https://stok.land.
International Data Transfers
As a global digital marketplace, your data may be transferred to and processed in countries outside your own, including jurisdictions that may not have the same data protection laws.
Where this occurs, Stok ensures appropriate safeguards, including:
- Secure cloud infrastructure
- Encrypted data transfers
- Contractual data protection agreements
- GDPR-compliant Standard Contractual Clauses (SCCs) where applicable
Data Minimization & Purpose Limitation
We only collect personal data that is:
- Relevant
- Necessary
- Limited to the purpose for which it is processed
We do not collect excessive or unrelated personal information.
Data is not retained longer than necessary unless required for:
- Legal compliance
- Financial auditing
- Licensing enforcement
- Dispute resolution
Security Safeguards
Stok implements appropriate technical and organizational security measures, including:
- SSL encryption
- Secure payment gateways
- Access control restrictions
- Two-factor authentication (where applicable)
- Secure cloud storage
- Platform monitoring and threat detection
These safeguards protect against:
- Unauthorized access
- Data breaches
- Loss or misuse of personal data
Children’s Information
Stok does not knowingly collect personal data from individuals under the age of 18 without parental or legal guardian consent.
If such data is identified, we will take steps to delete it promptly.
Information Officer (POPIA)
In accordance with POPIA, Stok has appointed an Information Officer responsible for:
- Data protection compliance
- Handling data requests
- Managing data breaches
- Ensuring lawful processing
Information Officer contact details are available upon request via our website.
Data Breach Notification
In the event of a data breach that poses a risk to user rights and freedoms, Stok will:
- Notify affected users
- Notify relevant regulatory authorities (where legally required)
- Take immediate steps to contain and remediate the breach
Notifications will occur within legally prescribed timeframes under POPIA and GDPR.
Complaints & Regulatory Authorities
Users have the right to lodge complaints with relevant authorities, including:
South Africa — Information Regulator (POPIA)
https://www.justice.gov.za/inforeg/
European Union — Data Protection Authorities (GDPR)
https://edpb.europa.eu/about-edpb/about-edpb/members_en
We encourage users to contact Stok first so we can resolve concerns directly and efficiently.
Thank you.
