What we collect
When you reserve: your name, email, phone number, university, halls, building and room, check-in date, the country you are arriving from, your notes, and the kit you chose. When you pay by card, the payment is handled by Stripe; we never see your card number, only a reference and the amount.
Why we use it
To hold and deliver your box, to email you about your order (confirmation, deposit, the week-before reminder, delivery, receipts) and to message you on WhatsApp about the delivery itself. We do not send marketing unless you tick the storage box, in which case we tell you once when booking opens.
Who else sees it
Stripe (card payments), our email provider (order emails), Cloudflare (hosting and the database, stored in the EU/UK region) and WhatsApp when you message us there. Halls reception only sees the name on the box. We never sell or share your details for advertising.
How long we keep it
Order records, including the audit trail of changes, are kept for six years for accounting. Emails and messages are kept for the same period. You can ask us to delete anything that is not needed for accounts at any time.
Cookies and storage
The order page sets no tracking cookies. It remembers your language, colour mode and design choice in your browser's local storage, and nothing else. There are no analytics or advertising scripts.
Your rights
You can ask for a copy of what we hold about you, have it corrected or deleted, or object to how we use it. Email us with your order reference and we answer within a month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).