# Privacy Policy
**Last updated:** 30 April 2026
This privacy policy describes how **Student Pack And Store** (“**we**”, “**us**”, “**our**”) collects, uses, stores and shares personal information when you use the **Student Pack & Store** mobile application (the “**App**”) and related services we provide in connection with student storage and logistics (together, the “**Services**”).
We are the data controller for personal information processed through the App and our Services, unless we tell you otherwise (for example, where we process data only on behalf of another organisation).
—
## 1. Who we are
**Legal name:** [Student Pack And Store]
**Registered address:** 46 Bridge Street, Tranent, East Lothian, United Kingdom, EH33 1AL
**Contact (privacy):** info@studentpackandstore.com
**Website:** https://studentpackandstore.com
If you are in the UK or the EEA and have questions about your personal information, contact us using the details above.
—
## 2. Information we collect
We collect information you give us, information generated when you use the App, and limited technical information from your device.
### 2.1 Account and identity
– Email address and password (for authentication)
– Full name
– Phone number (where you provide it)
### 2.2 Customer and order information
– Customer reference details and university or location information you provide
– Postal address and postcode (including delivery or redelivery addresses where relevant)
– Order details (items, quantities, dates, status, references)
– Invoice and payment status information held in our systems
– Photographs of items or orders where you or our staff upload them in connection with your storage or service
### 2.3 Preferences and communications
– Notification preferences (for example email, push, SMS where available)
– Messages or information you send us for support or in relation to an order
### 2.4 Technical and usage data
– Device and app technical information needed to run the App securely
– Push notification tokens, so we can deliver alerts you have agreed to receive
– Diagnostic and usage information to fix bugs and improve reliability (for example crash or performance data)
– Session and interaction information collected by our analytics and quality tools (see section 5), which may include how you navigate the App
We do not intentionally collect special-category (“sensitive”) data such as health data. Please do not submit such information through the App unless we explicitly ask for it.
—
## 3. How we use your information
We use personal information to:
– Provide, operate and improve the Services (including storage, collection, delivery and account management)
– Authenticate you and maintain your account
– Process payments and manage invoices (via our payment provider; we do not store full card numbers on our servers)
– Send service-related messages and, where you have opted in, marketing or operational notifications
– Respond to enquiries and provide customer support
– Maintain the security of the App and our systems, detect abuse, and comply with legal obligations
– Analyse usage in aggregate or identifiable form (depending on the tool) to improve the product experience
We do not sell your personal information.
—
## 4. Legal bases (UK / EEA)
Where UK GDPR or EU GDPR applies, we rely on one or more of the following:
– **Contract:** processing necessary to provide the Services you request
– **Legitimate interests:** for example improving the App, security monitoring, and analytics that are proportionate and respect your rights (you may object in some cases)
– **Consent:** where required for certain notifications or cookies-like technologies (where applicable)
– **Legal obligation:** where we must process data to comply with the law
—
## 5. Sharing with third parties
We share personal information with trusted providers who help us run the App and the Services. They are only permitted to use your information for the purposes we specify.
Typical categories of provider include:
| Category | Examples of role |
|———-|—————–|
| Cloud and database hosting | Secure storage of account, customer and order data |
| Authentication | Sign-in and account security |
| Payments | Processing card payments (card data is handled by the payment provider under their rules) |
| Push notifications | Delivering notifications you have enabled |
| Analytics and session diagnostics | Understanding crashes, performance and usage to improve the App |
| Mobile platform services | Apple and Google as operators of the device/platform stores |
We may also share information if required by law, or to protect our rights, users or the public.
A list of sub-processors or key providers can be supplied on request at **[privacy@yourdomain.com]**.
—
## 6. International transfers
Some of our providers may process data outside the UK or EEA. Where we transfer personal data to countries not considered to provide an adequate level of protection, we use appropriate safeguards (such as standard contractual clauses) as required by applicable law.
—
## 7. Retention
We keep personal information only for as long as needed for the purposes in this policy, including legal, tax and accounting requirements. When data is no longer needed, we delete or anonymise it in line with our internal retention practices. Exact periods can vary depending on the type of data and the Service.
—
## 8. Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss or alteration. No method of transmission over the internet is completely secure; we encourage you to use a strong, unique password and keep your device updated.
—
## 9. Your rights
Depending on where you live, you may have the right to:
– Access the personal information we hold about you
– Correct inaccurate data
– Request deletion, restriction, or objection to certain processing
– Data portability (where applicable)
– Withdraw consent where processing is based on consent
– Lodge a complaint with a supervisory authority (in the UK, the **ICO**: [https://ico.org.uk](https://ico.org.uk))
To exercise your rights, contact **[privacy@studentpackandstore.com]**. We may need to verify your identity before responding.
—
## 10. Children
The Services are not directed at children under the age required to enter a contract in your country without parental consent. If you believe we have collected information from a child inappropriately, please contact us and we will take appropriate steps.
—
## 11. Third-party links and services
The App may contain links to other websites or features operated by third parties. This policy does not apply to them. Please read their privacy notices.
—
## 12. Changes to this policy
We may update this policy from time to time. We will post the updated version on **[your website URL / in-app link]** and change the “Last updated” date. For significant changes, we will provide a clearer notice where required by law.
—
## 13. Contact
For any privacy questions or requests: **[privacy@studentpackandstore.com]**
Postal address: **[46 Bridge Street, Tranent, East Lothian, United Kingdom, EH33 1AL]**
—
*© student pack and store. All rights reserved.*