Privacy Policy

Last updated: 28 August 2026

This notice explains how Stor-a-File Ltd ("we", "us", "our") collects, uses and protects personal data when you visit this website, make an enquiry, or use our services. We are committed to protecting your privacy and handling your data in line with the UK GDPR and the Data Protection Act 2018.

1. The information we collect

When you contact us through this website or by phone or email, we collect the details you provide — typically your name, organisation, email address, telephone number, the service you are interested in, and any information in your message. When you visit the site, our hosting and analytics providers may also collect standard technical information such as your IP address, browser type, and the pages you view.

If you become a client, we process the personal data necessary to deliver our storage, scanning, data-capture and destruction services under a separate agreement, in which we act as your data processor.

2. How we use your information, and our lawful basis

• To respond to your enquiry and provide a quote — on the basis of your consent and our legitimate interest in responding to prospective customers.
• To provide and manage our services to clients — on the basis of our contract with you.
• To improve and secure our website — on the basis of our legitimate interests in running a safe, effective site.
• To meet legal and regulatory obligations — where we are required to keep certain records.

3. Cookies and analytics

We use Google Analytics to understand how visitors use the site so we can improve it. This sets cookies that collect information in an aggregated form. You can control or block cookies through your browser settings. The site does not use advertising cookies.

4. Who we share your information with

We do not sell your personal data. We share it only with trusted providers who help us operate, and only as needed:

• Our email and productivity provider (Microsoft 365) and our email-delivery provider (Mandrill / Mailchimp Transactional), used to receive and handle enquiries.
• Our website hosting and content-delivery provider (Cloudflare).
• Our analytics provider (Google Analytics).

Each acts under contract and may only use your data on our instructions. We may also disclose information where required by law.

5. International transfers

Some of our providers are based outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK's International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, so your data receives an equivalent level of protection.

6. How long we keep it

We keep enquiry information only for as long as needed to deal with your enquiry and for a reasonable period afterwards for our legitimate business records. Client data is retained in line with the terms of our service agreement and the retention rules that apply to it, after which it is securely destroyed under BS EN 15713.

7. How we protect your information

Information security is central to what we do. Our operations are certified to ISO 27001 (information security), ISO 9001 (quality) and ISO 14001 (environmental), and our records-management practices align with BS 10008 (evidential weight) and BS EN 15713 (secure destruction). We apply appropriate technical and organisational measures to keep personal data secure.

8. Your rights

Under UK data-protection law you have the right to access the personal data we hold about you, and to ask us to correct it, erase it, restrict or object to its use, or provide it in a portable form, in certain circumstances. To exercise any of these rights, contact us using the details above.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we would ask that you contact us first so we can try to put things right.

9. Changes to this notice

We may update this notice from time to time. Any changes will be posted on this page with a revised "last updated" date.