How we collect, use and protect your personal data — in plain English. We only use your information to run your storage and keep you updated.
This Privacy Policy explains how UNILUG Ltd ("UNILUG", "we", "us") handles your personal data when you use our student storage service or website. We are the data controller. We follow the UK GDPR and the Data Protection Act 2018. Questions? Email info@unilug.co.uk.
UNILUG Ltd (company number 17073113), registered in England and Wales, is the controller of your personal data. You can contact us about privacy at info@unilug.co.uk.
We collect the information you give us when you book and use our service:
We use your data to:
We do not sell your personal data, and we do not share it with third parties for their own marketing.
Under the UK GDPR we rely on: contract (to provide the storage you booked), legal obligation (for example keeping accounting records), legitimate interests (running and improving our service and keeping it secure), and consent (for non-essential cookies and marketing analytics, which you can withdraw at any time).
Payments are handled securely by Stripe. You enter your card details directly with Stripe on their hosted checkout — they are never passed through or stored on UNILUG's systems. Stripe processes your payment data as its own controller under its privacy policy.
We share data only with trusted providers who help us run the service, under appropriate agreements:
We may also disclose data where required by law, or to protect our rights, property or safety.
We use essential cookies to make the site work, and — only with your consent — analytics and advertising cookies (via Google Analytics, Google Tag Manager and Google Ads) to understand how the site is used and measure our marketing. You choose your preference in our cookie banner, and you can change it at any time in your browser settings.
We contact you by email, SMS and WhatsApp using the details you give us, to confirm and manage your booking. These are service messages relating to your order. If we ever send optional marketing, we will rely on your consent and you can opt out at any time.
We keep your personal data only as long as needed for the purposes above, including legal, accounting and reporting requirements — typically up to 6 years after your last booking. After that we securely delete or anonymise it.
Some of our providers (such as Stripe, Google and Resend) may process data outside the UK. Where they do, we rely on appropriate safeguards recognised under UK data protection law (such as adequacy decisions or standard contractual clauses) to protect your information.
You have the right to access your data; to have it corrected or deleted; to restrict or object to certain processing; to data portability; and to withdraw consent where we rely on it. To exercise any of these, email info@unilug.co.uk. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.
We take reasonable technical and organisational measures to protect your data — including secure hosting, restricted staff access, and encrypted payment handling through Stripe. No system is completely secure, but we work to keep your information safe and to respond quickly if anything goes wrong.
Our service is intended for students aged 18 or over. We do not knowingly collect data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this policy from time to time; the "last updated" date above shows the latest version. For any privacy question or request, email info@unilug.co.uk.
See also our Terms & Conditions.