Privacy Policy
ShelfHire Ltd — United Kingdom
Effective date: 1 March 2026 | Version: 2026-03-01
1. Introduction
ShelfHire Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use the ShelfHire platform ("Platform").
We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data We Collect
2.1 Information you provide
- Full name, email address, phone number
- Business name and address (for Venues)
- Identity verification documents (processed by Stripe Identity)
- Payment information (processed by Stripe)
- Profile photos and uploaded content
- Communications sent through the Platform
2.2 Information collected automatically
- IP address and approximate geolocation
- Browser type, device information, operating system
- Pages visited, features used, time spent on the Platform
- Cookies and similar tracking technologies (see our Cookie Policy)
2.3 Information from third parties
- Stripe: payment and identity verification status
- Authentication providers: email verification
3. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
| Purpose | Legal Basis |
| Providing the Platform service | Performance of a contract (Art. 6(1)(b)) |
| Processing payments | Performance of a contract (Art. 6(1)(b)) |
| Identity verification | Legitimate interest / Legal obligation (Art. 6(1)(f) / Art. 6(1)(c)) |
| Marketing communications | Consent (Art. 6(1)(a)) |
| Fraud prevention | Legitimate interest (Art. 6(1)(f)) |
| Analytics and improvement | Legitimate interest (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
4. How We Use Your Data
- To create and manage your account
- To facilitate Bookings between Brands and Venues
- To process payments and transfers via Stripe
- To verify your identity where required
- To send transactional notifications (booking confirmations, reminders)
- To improve the Platform and develop new features
- To detect and prevent fraud or misuse
- To comply with legal obligations
5. Data Sharing
We share your data with:
- Stripe — for payment processing and identity verification
- Supabase — for database hosting and authentication (data stored in EU)
- Other users — limited profile information visible to booking counterparts
- Law enforcement — when required by law or to protect rights and safety
We do not sell your personal data to third parties.
6. International Transfers
Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions.
7. Data Retention
- Account data: retained for the duration of your account plus 6 years after deletion
- Booking records: retained for 7 years for tax and legal compliance
- Identity verification data: retained by Stripe per their retention policy
- Marketing preferences: until you withdraw consent
8. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Erase your personal data ("right to be forgotten")
- Restrict processing of your personal data
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time for consent-based processing
To exercise these rights, contact us at privacy@shelfhire.com.
9. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews.
10. Children
The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Platform.
12. Contact and Complaints
Data Protection Officer
ShelfHire Ltd
Email: privacy@shelfhire.com
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113