Privacy Policy

Last updated: April 2026

Stirling Student Storage is committed to protecting your personal data and respecting your privacy. This policy explains what information we collect, how we use it, and your rights in relation to it.

This policy applies to all personal data collected through our website and booking system at stirlingstudentstorage.co.uk (or your actual domain).

1. Who we are

Stirling Student Storage is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us at the email address shown on our website.

2. What data we collect

When you make a booking or create an account with us, we collect the following personal information:

Identity data: your first name and last name
Contact data: your email address and mobile phone number
Address data: your collection address and return delivery address
Booking data: your booking reference, items booked, collection date and time, and any access notes you provide
Account data: your username and encrypted password
Payment data: payment is processed by Stripe. We do not store your card details — these are held securely by Stripe and never passed to us
Technical data: your IP address and browser type, collected automatically when you use our website

3. How we collect your data

We collect data directly from you when you:

Create an account on our website
Place a booking
Update your account details or return delivery address
Contact us by email

We also collect limited technical data automatically when you visit our website through cookies and similar technologies (see Section 8).

4. How we use your data

We use your personal data for the following purposes:

To fulfil your booking: we use your name, contact details, and address to arrange collection and delivery of your items
To communicate with you: we send booking confirmations, collection reminders, and return delivery reminders by email and SMS
To manage your account: we store your details so you can log in and update your return address
To process payment: your payment is handled by Stripe, our third-party payment processor
To comply with legal obligations: we may need to retain certain records for accounting and legal purposes
To improve our service: we may use anonymised booking data to understand demand and improve our operations

We will never sell your personal data to third parties or use it for unsolicited marketing without your explicit consent.

5. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

Contract: processing is necessary to fulfil your booking and provide the service you have requested
Legitimate interests: we have a legitimate interest in communicating with you about your booking and improving our service
Legal obligation: we may need to process certain data to comply with our legal and regulatory obligations

6. Who we share your data with

We share your personal data only where necessary:

Stripe: our payment processor, who handles all card transactions securely. Stripe’s privacy policy is available at stripe.com/gb/privacy
Our storage and delivery team: your name, contact number, collection address, and item details are shared with our driver so they can carry out your collection and delivery
Email service provider: we use Brevo (formerly Sendinblue) to send transactional emails. Your email address is passed to Brevo solely for this purpose

We do not share your data with any other third parties. All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.

7. How long we keep your data

We retain your personal data for the following periods:

Booking and account data: we keep your booking records for up to 3 years after your last booking. This allows us to handle any queries or disputes that may arise
Payment records: retained for 7 years to comply with HMRC requirements
Email correspondence: retained for up to 2 years

After these periods your data will be securely deleted or anonymised.

8. Cookies

Our website uses cookies — small text files stored on your device — to make the site work correctly. We use the following types of cookies:

Essential cookies: required for the website and booking system to function, including keeping you logged in to your account. You cannot opt out of these.
Functional cookies: used by WordPress and WooCommerce to remember your preferences and session data

We do not currently use advertising or tracking cookies. If this changes, we will update this policy and ask for your consent.

9. Your rights

Under UK GDPR you have the following rights regarding your personal data:

Right of access: you can request a copy of the personal data we hold about you
Right to rectification: you can ask us to correct any inaccurate data we hold
Right to erasure: you can ask us to delete your data in certain circumstances
Right to restriction: you can ask us to restrict how we use your data in certain circumstances
Right to data portability: you can ask us to provide your data in a portable format
Right to object: you can object to us processing your data in certain circumstances

To exercise any of these rights, please contact us by email. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

10. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:

Encrypted passwords — we never store passwords in plain text
Secure HTTPS connections on our website
Payment processing handled entirely by Stripe — we never see or store your card details
Access to booking data restricted to authorised staff only

Please note that no internet transmission or electronic storage method is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

11. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

12. Changes to this policy

We may update this privacy policy from time to time. The current version will always be published on our website with the date it was last updated. If we make significant changes, we will notify you by email where we have your contact details.

13. Contact us

If you have any questions about this privacy policy or how we handle your personal data, please contact us at the email address shown on our website.