Privacy Policy

Who we are

Leeds Storage is the data controller for the personal data described in this policy. You can contact us about anything in it at [email protected].

What we collect

• Booking details: your name, email address, mobile number, collection address and postcode, the items you're storing, your storage period and your collection and return dates.
• Payment records: the amount paid and a payment reference from Stripe. We never receive or store your card details.
• Messages: anything you send us by email or through Manage my booking.
• Technical data: basic server logs (such as IP address and browser type) kept briefly for security and to stop abuse.

How we use it

• To take your booking and payment, and collect, store and return your items (to perform our contract with you)
• To send booking confirmations, secure links to manage your booking, and service messages (contract)
• To keep financial records required by law (legal obligation)
• To keep our website secure and prevent fraud (our legitimate interests)

We don't send marketing emails unless you've asked us to, and you can opt out at any time.

Who we share it with

We share only what's needed with the companies that help us run the service:

• Stripe: to process payments
• Brevo: to send booking emails
• Our hosting and security providers (including Cloudflare): to run and protect this website
• Postcodes.io: the postcode you enter is checked against this public postcode service to confirm we cover your area

Some of these providers may process data outside the UK. Where they do, they use legal safeguards approved under UK data protection law. We may also share data if the law requires it. We never sell your data.

Cookies

We don't use advertising or tracking cookies. While you fill in the booking form, your progress is saved in your browser's session storage so you don't lose it if you refresh the page. It's cleared when you close the tab. Stripe may set cookies it needs to process your payment securely on its checkout page.

How long we keep it

We keep booking records for as long as your booking is active and then for up to 6 years, as required for tax and accounting. Secure login links expire after 30 minutes.

How we protect it

All traffic to this website is encrypted. Access to booking data is restricted and password protected, and login links are stored in a form that can't be reused if our database were ever exposed.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the data we hold about you
• ask us to correct anything that's wrong
• ask us to delete your data, where we don't need to keep it by law
• object to or ask us to limit how we use it
• withdraw your consent at any time, where we rely on it

Email [email protected] to use any of these rights. We'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.