StoreCraft Storage Solutions Ltd (“we”, “us”, or “our”) respects your personal data. This Privacy Policy explains how we collect, process, and protect your information when you visit or make a purchase from www.storecraftco.com (the “Website”).
We operate strictly within the United Kingdom, the European Union, and the United States.
1. Data Controller
For the purposes of applicable data protection laws, the Data Controller responsible for your personal data is:
- Company Name: StoreCraft Storage Solutions Ltd
- Company Registration Number: 14278563
- Address: Unit 12, Riverside Business Park, 47 Thames Industrial Way, London, SE16 2XB, United Kingdom
- Email: storage@storecraftco.com
- Telephone: +44 121 728 5519
2. Information We Collect
When you interact with our Website, we collect certain details necessary to process your transaction and manage your relationship with us. This includes:
- Identity and Contact Data: Name, email address, and telephone number.
- Transaction and Fulfilment Data: Billing address, shipping address, and details of the products ordered.
- Payment Data: All financial transactions are managed directly by our payment processor, Stripe. We do not store or retain full credit or debit card numbers on our servers.
3. Legal Basis and Purpose of Processing
We process your personal data under the following legal grounds:
- Fulfilment of a Contract: To process and ship your orders, manage your account, and provide customer support.
- Legal Obligation: To comply with statutory accounting, tax, and regulatory reporting requirements.
- Legitimate Interests: To maintain our business operations and to monitor transactions for fraud detection.
4. Payment Processing
Your transactions are handled exclusively by Stripe. Stripe operates as an independent controller or processor depending on the phase of processing. Stripe handles your payment data directly in accordance with its own privacy documentation. By initiating a purchase on our Website, you acknowledge that your transaction data will be processed by Stripe for these purposes.
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including the satisfaction of legal, accounting, and statutory reporting requirements.
- United Kingdom and European Union: For tax and commercial reporting purposes, transaction records containing personal data are retained for a period of six (6) years from the end of the financial year in which the transaction took place.
- United States: We maintain corresponding records for durations required by applicable federal and state laws.
Upon the expiration of these periods, your data will be permanently deleted or anonymised.
6. Data Sharing
We do not sell, lease, or distribute your personal data to unaffiliated third parties. We share information only with trusted entities necessary to conduct our business:
- Service Providers: Such as delivery couriers who manage the physical shipping of your storage boxes.
- Payment Processors: Specifically Stripe, as detailed in Section 4.
- Legal Authorities: We will disclose information where we are compelled to do so by law or to protect our legal rights.
- Customs and Tax Authorities: As we operate on a DDP basis, we share necessary transaction data with customs brokers and tax authorities to facilitate the prepayment of import duties and taxes on your behalf.
7. International Data Transfers
As a UK entity serving customers in Europe and the United States, your personal data may be transferred to and processed in countries outside your home jurisdiction. We implement standard contractual clauses and rely on recognised data transfer mechanisms to maintain the confidentiality of your information.
8. Data Integrity and Measures
We implement physical and electronic measures intended to maintain the confidentiality and integrity of your personal data. While we strive to implement commercially standard measures, no method of transmission over the internet or electronic storage is completely impenetrable. Therefore, we cannot state that data will be immune from unauthorised access.
9. Your Rights
Depending on your geographical location, you possess specific statutory rights regarding your personal data.
For United Kingdom and European Residents (GDPR / UK GDPR):
- Access: The right to request copies of your personal data.
- Rectification: The right to request correction of inaccurate information.
- Erasure: The right to request the deletion of your personal data under certain conditions.
- Object or Restrict: The right to object to or restrict processing.
- Data Portability: The right to transfer collected data to another entity.
For United States Residents (including California CCPA where applicable):
- Right to Know: The right to request disclosure of the specific pieces of personal data we have collected about you.
- Right to Delete: The right to request deletion of your personal data.
- Right to Opt-Out: We do not sell your personal data; however, you retain the right to opt-out of certain sharing practices defined by local state laws.
To exercise any of these rights, please contact us at storage@storecraftco.com.