Legal
Privacy policy
Last updated 28 October 2026.
This policy explains what personal data Cube Drop Limited collects when you use this website or hire a cube from us, why we collect it, and what you can ask us to do with it.
Who we are
Cube Drop Limited is the data controller. We are registered in England and Wales, company number [COMPANY NUMBER]. Our registered office is [REGISTERED OFFICE ADDRESS].
We are registered with the Information Commissioner’s Office, registration number [ICO REGISTRATION NUMBER].
For anything about your data, email drop@cubedrop.co.uk or call 01565 662244.
What we collect
| When | What |
|---|---|
| Checking a postcode | The postcode you type. It is sent to Postcodes.io to find its location, so we can tell you whether we deliver there. Nothing else is sent with it. |
| Reserving dates | Your name, phone number, postcode, area, delivery and collection dates, number of weeks and the guide price shown. |
| The cancellation list | Your name, phone number, the day you need a cube and for how many weeks. |
| The out-of-area list | Your email address and the postcode you checked. |
| When you hire a cube | Your delivery address, notes about access to the drive, and payment records. Card payments are handled by [PAYMENT PROVIDER]. We do not keep your full card number. |
| When you call or email us | What you tell us, and your phone number or email address. |
| Visiting the site | Our hosting provider records technical data such as your IP address, browser and the pages requested, to keep the site running and secure. |
| Analytics and adverts, only if you agree | Pages viewed, how you arrived, device and browser type, rough location from your IP address, and whether you sent a booking request. Collected by Google Analytics and Meta Pixel through cookies. |
Why we use it, and the lawful basis
- To arrange and deliver your hire. Taking the £50 deposit on the website, calling you to go through the details, taking the balance after that call, then delivering and collecting the cube. Basis: taking steps at your request before a contract, then performing the contract.
- To call you if a cube comes free. Only for the dates you gave us on the cancellation list. Basis: your consent, which you can withdraw at any time.
- To email you when we reach your area. One email when the round grows, not a newsletter. Basis: your consent, which you can withdraw at any time.
- To keep accounts and meet the law. Basis: legal obligation.
- To keep the website secure and working. Basis: our legitimate interest in running a safe website.
- To improve the site and measure our adverts. Google Analytics and Meta Pixel. Basis: your consent, given in the cookie banner, which you can withdraw at any time under “Cookie settings”.
We do not sell your data. Your name, phone number and email are never sent to Google or Meta. We do not make automated decisions about you. The postcode check only tells you whether you are inside our delivery area. A person confirms every booking by phone.
Who we share it with
Only the companies that help us run the service, and only what they need:
- Vercel Inc. hosts the website and keeps short technical logs.
- Resend delivers the booking, cancellation-list and out-of-area entries to our inbox by email.
- Postcodes.io (run by Ideal Postcodes Ltd) looks up the postcode you type.
- Google serves the fonts on this site. Your browser fetches them from Google, which receives your IP address.
- Google Ireland Ltd runs Google Analytics for us, only if you accept analytics cookies.
- Meta Platforms Ireland Ltd runs Meta Pixel, only if you accept marketing cookies. Meta may combine this with what it already knows about you if you use Facebook or Instagram, under its own privacy policy.
- [PAYMENT PROVIDER] processes card payments.
- [EMAIL AND PHONE PROVIDER] hosts our inbox and phone line.
- [ACCOUNTANT] sees financial records when preparing our accounts.
We may also share data if the law requires it, or to protect our rights or someone’s safety.
Data stored outside the UK
Vercel, Resend, Google and Meta may process data in the United States. Where they do, we rely on the safeguards UK law allows: the UK Extension to the EU–US Data Privacy Framework, or the International Data Transfer Agreement or Addendum issued by the ICO.
How long we keep it
| Data | Kept for |
|---|---|
| Booking requests that don’t go ahead | [12 MONTHS], then deleted. |
| Hire and payment records | 6 years after the end of the hire, because accounting law requires it. |
| The cancellation list | Until the dates you gave have passed, then deleted. |
| The out-of-area list | Until we email you, or until you ask us to remove you. At most [24 MONTHS]. |
| Website logs | For the period our hosting provider keeps them, usually a few days to a few weeks. |
| Google Analytics data | [14 MONTHS], then deleted by Google. |
| Your cookie choice | 12 months, in your own browser. |
Your rights
You have the right to:
- ask for a copy of the data we hold about you;
- have it corrected if it is wrong;
- have it deleted, unless we must keep it by law;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw consent at any time, for the cancellation list, the out-of-area list, or cookies.
To use any of these, email drop@cubedrop.co.uk. We reply within one month. It is free.
Complaints
If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Keeping it safe
The site is served over HTTPS. Form entries go straight to our inbox and are not stored on the website. Only people at Cube Drop who need your details to arrange your hire can see them.
Children
Our service is for adults. We do not knowingly collect data from anyone under 18.
Cookies
We use analytics and marketing cookies only if you agree. See our cookie policy, or change your choice under “Cookie settings” at the bottom of any page.
Changes
If we change this policy, we will update the date at the top of this page.