Privacy Policy
What personal data rentwifi-now collects, why, and what rights you have.
Privacy Policy
Last updated: 31 July 2026
Draft — not yet reviewed by a solicitor. Placeholders in
[SQUARE BRACKETS]must be completed and the whole document reviewed before taking real bookings. Seedocs/legal/RESEARCH.mdand issue #25.
[LEGAL ENTITY NAME] ("rentwifi-now", "we", "us") operates rentwifi-now, a marketplace connecting people who own Starlink kits ("hosts") with people who want to rent one ("renters"). This policy explains what personal data we handle, why, and what you can do about it.
We are the data controller for the personal data described here. Our ICO registration number is [ICO REGISTRATION NUMBER].
Contact: [DATA PROTECTION CONTACT EMAIL] · [POSTAL ADDRESS]
1. What we collect
Account and identity. Your name, email address, and password (stored hashed, never in readable form). If you verify a phone number, we store the number in international format along with its verification status and the time it was verified.
Host and listing data. For hosts: the full private address and postcode where the kit is kept, a public map point for the listing, the kit model, the last four characters of the kit serial number, listing photographs, and your pricing.
Booking and rental data. Which kit you booked, the rental period, the return method, the amounts charged, and the resulting booking status.
Handover evidence. Photographs taken at check-in and check-out, stored in our media storage; the network identifier (ASN) recorded at check-in; and speed-test results and related network metadata. Handover photographs may incidentally capture people, vehicles, property, or surroundings.
Damage claims. Claim descriptions, requested and approved withholding amounts, any evidence photographs, and the outcome.
Payment and payout data. We do not store full card numbers. Card payments are processed by our payment provider (see section 4). For host payouts we store a reference to encrypted bank details rather than the details themselves, plus payout amounts, status, and any bank reference for a completed payout.
Technical and usage data. IP address, approximate location derived from it, device and browser information, pages visited, and cookie identifiers. We also keep an audit log of consequential actions on the platform (for example listing approvals and claim decisions), recording who did what and when.
2. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Creating and running your account | Performance of a contract |
| Listing a kit, taking and managing bookings | Performance of a contract |
| Taking payment, holding and returning deposits, paying hosts | Performance of a contract |
| Handover photographs, ASN and speed-test evidence | Legitimate interests — proving the condition and connectivity of a kit at handover, so damage and connectivity disputes can be resolved fairly for both sides |
| Resolving damage claims and disputes | Legitimate interests — protecting hosts against loss and renters against unfair claims; and establishing or defending legal claims |
| Preventing fraud and misuse | Legitimate interests — protecting the platform, hosts, and renters |
| Service emails (booking confirmations, handover reminders, deposit outcomes) | Performance of a contract |
| Marketing emails | Consent, which you can withdraw at any time |
| Analytics and non-essential cookies | Consent |
| Keeping accounting and tax records | Legal obligation |
3. Who can see location data, and when
Precise locations are sensitive, so we release them in stages:
- Anyone, signed out: a listing shows only a general area — an approximate map point, not the address.
- Signed in: the general area, plus availability.
- After a confirmed, paid booking: the exact address, access and pickup instructions, and how many units are at that location — released only to the renter on that booking, and only while the booking is active.
Hosts see the name and contact details of renters who have booked their kit. Renters see the host's display name, and the exact location only after booking.
4. Who we share data with
We share personal data with service providers who process it on our behalf under contract:
- Airwallex — payment processing, deposits, and host payouts.
- Cloudflare — hosting, storage of photographs, content delivery, and security. Requests are handled at Cloudflare's edge, which is also where we read the network identifier used for connectivity verification.
[EMAIL PROVIDER]— transactional email.[SMS PROVIDER]— phone verification, if enabled.[ANALYTICS PROVIDER]— usage analytics, only where you have consented.
We also share data between hosts and renters as described in section 3, and with professional advisers, insurers, or authorities where we are legally required to, or where it is necessary to establish or defend a legal claim.
We do not sell personal data.
Where a provider processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement and UK Addendum as appropriate.
5. How long we keep it
- Account data: while your account is open, then
[RETENTION PERIOD]after closure. - Booking, payment, and payout records: six years from the end of the tax year they relate to, to meet UK accounting and tax requirements.
- Handover photographs and connectivity evidence:
[RETENTION PERIOD — SUGGEST 12 MONTHS]after the rental ends, or until any related claim is finally resolved, whichever is later. - Damage claim records: six years, being the limitation period for a contract claim.
- Audit logs:
[RETENTION PERIOD].
6. Your rights
Under UK GDPR you can ask us to: give you a copy of your data; correct it if it is wrong; delete it; restrict or object to how we use it (including objecting to processing based on legitimate interests); provide it in a portable format; and withdraw consent where we rely on it.
Some data we must keep even if you ask us to delete it — payment and payout records, for example, are subject to statutory retention.
To exercise any right, contact [DATA PROTECTION CONTACT EMAIL]. We will respond within one month.
7. Complaints
If you are unhappy with how we have handled your personal data, contact us at [DATA PROTECTION CONTACT EMAIL]. We will acknowledge your complaint within 30 days and tell you what we intend to do about it.
You can also complain to the Information Commissioner's Office at any time — ico.org.uk/make-a-complaint, helpline 0303 123 1113. We would appreciate the chance to address your concerns first.
8. Cookies
We use cookies that are strictly necessary to run the site and keep you signed in; these do not require consent. Analytics and marketing cookies are set only if you consent, and you can change your choice at any time through the cookie settings link in the footer. See our Cookie Policy for the full list.
9. Security
Passwords are hashed. Bank details for payouts are held encrypted, with our systems storing only a reference to them. Access to production data is limited to people who need it, and consequential administrative actions are recorded in an audit log.
10. Children
rentwifi-now is not intended for anyone under 18, and we do not knowingly collect data from children.
11. Changes
If we make material changes we will update the date at the top and, where the change significantly affects you, tell you by email before it takes effect.