Last updated: January 6th 2026
rentaset (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains what we collect, how we use it, and your rights.
1. Who we are (Data Controller)
Controller: rentaset
Website: rentaset.co.uk
Contact email: privacy@rentaset.co.uk
If you have any questions about this policy or your data, contact us using the details above.
2. The personal data we collect
We collect only the information needed to run the service, process orders, and meet legal obligations. This can include:
Account and identity data
- Name
- Email address
- Phone number (if provided)
Order and rental data
- Billing and delivery address
- Order history, rental dates, and communications about the order/rental
Payment data
- Payments are processed by Stripe. We do not store full card details on our servers.
Delivery/returns data
- Delivery details required to ship and return rentals using Royal Mail
Technical data
- IP address and basic device/browser data (typically via standard website logs and WooCommerce/WordPress functionality)
3. Why we use your data (purposes)
We use personal data to:
- Create and manage your account (if you register)
- Process and fulfil orders and rentals, including delivery and returns
- Communicate with you about orders (confirmation, dispatch, issues, returns)
- Provide customer service and resolve disputes
- Prevent fraud and protect the security of our website and customers
- Comply with legal and accounting requirements
We do not sell your personal data to third parties.
4. Our lawful bases for processing (UK GDPR)
Under UK GDPR, we rely on the following lawful bases:
- Contract: to process and fulfil your rental/order and provide the service you request
- Legitimate interests: to operate and improve our business, prevent fraud, and keep our systems secure (balanced against your rights)
- Legal obligation: to keep records required by law (e.g., tax/accounting)
- Consent (where applicable): for optional marketing communications or non-essential cookies (if used). You can withdraw consent at any time.
5. Who we share your data with (processors)
We share personal data only where necessary to operate the service, including:
- WooCommerce / WordPress (our ecommerce platform and website administration)
- Stripe (payment processing)
- Royal Mail (delivery and return shipping)
We may also share data with:
- Hosting and IT providers who support our website infrastructure (acting under our instructions)
These parties are required to protect your data and only use it for providing their services to us.
6. International data transfers
Some service providers (for example, payment processors) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as adequacy decisions or approved contractual protections) to keep your data protected in line with UK GDPR.
7. Data storage, hosting, and security
- Customer data is secured on UK-hosted servers (website hosting and databases).
- We use appropriate technical and organisational measures to protect personal data, such as access controls, encryption where applicable, and secure configuration of systems.
- No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information and reduce risk.
8. How long we keep your data (retention)
We keep personal data only for as long as necessary for the purposes described in this policy, including legal and accounting requirements. Typical retention periods may include:
- Order and invoice records: retained for the period required by UK tax/accounting rules
- Account data: retained while your account is active, and for a reasonable period afterwards unless you request deletion (and we are legally able to comply)
Where we cannot delete certain records immediately (e.g., legal obligations), we will restrict use of those records to compliance purposes only.
9. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (where legally permissible)
- Restrict processing in certain circumstances
- Object to processing based on legitimate interests
- Data portability (for data processed by automated means under contract/consent)
- Withdraw consent at any time (where we rely on consent)
To exercise your rights, contact us at privacy@rentaset.co.uk. We may need to verify your identity before responding.
10. Cookies and similar technologies
Our site may use cookies and similar technologies to enable core ecommerce functionality (such as keeping items in your basket and enabling checkout). If we use non-essential cookies (e.g., analytics/marketing), we will present a cookie notice/banner where required and allow you to manage your preferences.
Please refer to our full Cookie Policy.
11. Marketing
We do not send marketing emails unless you have opted in (where applicable). You can unsubscribe at any time using the link in our emails or by contacting us.
12. Complaints
If you have concerns about our handling of your personal data, please contact us first and we will attempt to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (the UK supervisory authority for data protection).
13. Changes to this policy
We may update this Privacy Policy from time to time. The most recent version will always be posted on this page with the “Last updated” date.