We process your personal data so we can deliver your storage service properly. We do this on three legal bases under the GDPR: (a) our legitimate business interest — executing your booking, answering questions, invoicing, preventing fraud, and securing our systems; (b) your consent for specific purposes (such as marketing, newsletters, research); and (c) statutory obligations that apply to us (tax and retention duties). We only use your data for the purposes for which we originally collected it.

We collect your data when you voluntarily fill in a form on our website, request a quote or place a booking. Specifically: name and optionally company name, contact details (email, phone, address, postcode), your storage preferences (volume, service package, pickup date) and payment data you enter at our payment provider Mollie. For home pickups we need your pickup address. For business customers we additionally record VAT number and Chamber of Commerce details for invoicing.

If you've shared your contact details with us, we may reach out by phone, post, email or WhatsApp for marketing about our services — promotions, newsletters, feedback requests. Don't want this? Every marketing email contains an unsubscribe link, and you can opt out at any time free of charge by emailing hallo@inboxstorage.eu. Consent for marketing is optional; withholding it has no impact on your existing booking or access to our website.

We use cookies on our website for functionality, analytics and — where you consent — marketing. Our cookie statement describes per cookie what we use it for, how long we place it, and how to manage or disable it. Read it together with this privacy policy.

Some services we can't deliver alone. We share your data with carefully selected partners such as our payment provider (Mollie), CRM (HubSpot), accounting (Exact), planning system (Bumbal) and where applicable logistics partners. With each of these parties we have data processing agreements stipulating they only process your data per our instructions and this policy. We never sell your data to third parties.

Our website uses Google Analytics, a web analytics service from Google Inc. Google Analytics places cookies to understand visitor patterns. Your IP address is anonymised before storage, typically within the EU/EEA. In exceptional cases your full IP may be sent to a Google server in the US and shortened there. Google does not combine this IP with other data. You can disable Google Analytics cookies in your browser settings or via Google's opt-out browser plug-in. Note that some website features may then work in a limited fashion.

In certain cases we may disclose your data to regulators and law enforcement agencies — for example where we are legally obliged to, or where it's necessary to prevent or detect fraud or other criminal offences, or to safeguard network and information security.

We don't retain your personal data longer than necessary for the purpose for which it was collected. In practice that means: as long as you are an active customer, plus the statutory retention period applicable to invoice and accounting records (7 years for the Dutch tax authority). After that, we delete or anonymise your data. For specific deletion requests (see point 10) we action them as soon as possible, taking into account statutory periods that apply to us.

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. Specifically: storage on secured servers in a certified data centre, encryption where possible, strict access controls and regular audits. We cannot 100% guarantee the safety of internet transmissions — so we'd advise you never to share confidential information through unsecured channels.

Under the GDPR you have the right to: access the personal data we hold about you, request correction or deletion, object to processing, and withdraw your consent at any time. Such a request is free of charge unless manifestly unfounded or excessive. Send your request to hallo@inboxstorage.eu and we'll action it as soon as possible. If you feel we haven't handled your request properly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Our website occasionally links to external sites and services (e.g. social media, partners, payment providers). External services may also redirect you to our site. In either case, the terms and privacy rules of that third party apply alongside — or in place of — ours. Always read the privacy statement of the third party you land on; we're not responsible for their data processing.

We may update this privacy policy from time to time — for example following new legislation or changes in our processes. Updates are published on this page and take effect upon publication. For material changes we'll also actively notify existing customers, for example by email. Check this page from time to time to stay informed.