Effective Date: 10.09.2025

This privacy policy explains how Loftopia (“we”, “our”, “us”) collects, uses, and protects your personal information when you use our website, contact us, or book a service. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR).

1. Who we are
Loftopia is a UK-based loft boarding business providing storage solutions for newer homes. We are the data controller responsible for your personal data. If you have any questions, you can contact us at:
‍
Email: hello@loftopia.co.uk
Phone: +44 7888 867411
Address: 137 Golden Cross Lane, Catshill, Bromsgrove, B610LA

2. What personal data we collect
We may collect and process the following categories of personal data:
• Identity and Contact Information: name, phone number, email address, and address details
• Property Information: property type, access notes, or installation preferences
• Booking Information: dates, times, and service selections
• Payment Information: collected and processed securely via Stripe (we do not store card details)
• Technical Information: approximate location (e.g. region), pages visited
• Marketing and Communications Data: preferences, communication history, and interactions with our ads
• Correspondence Data: messages sent via forms, email, or WhatsApp

3. How we collect your data
We collect data in the following ways:
When you visit or interact with our website
When you submit a form or send us a message
When you book an appointment or service
When you make a payment through our booking system
When you engage with our advertising or social media content
When you communicate with us via phone, WhatsApp, or email

4. Why we collect and use your data
We only collect personal data where necessary to:
• Provide you with a quote or respond to your enquiry
• Book and deliver your installation or service
• Process and confirm payment securely
• Maintain customer records and manage ongoing services
• Improve our website and user experience
• Monitor the effectiveness of our marketing
• Comply with legal or financial obligations

Our lawful bases for processing your data may include:
• Contractual necessity (e.g. to provide a service)
• Legal obligation (e.g. tax records)
• Legitimate interest (e.g. marketing analysis)
• Consent (where required, for marketing communications)

5. How we store and protect your data
We take appropriate technical and organisational measures to secure your data, including:
• Secure access controls
• Encrypted communications (HTTPS)
• Use of trusted service providers with GDPR-compliant practices
Personal data is only accessible to those who need it to perform their job. We retain data only for as long as necessary for the purposes for which it was collected, or as required by law.

6. Third-party services and processors
To help deliver our services, we use third-party tools and services that may process data on our behalf, including:
• Website & hosting: Webflow
• Booking system: SimplyBook.me
• Payment processing: Stripe
• Analytics and tracking: Google Analytics 4 (GA4), Google Tag Manager
• Advertising: Meta Pixel (Facebook/Instagram) and Google Ads
• Lead and order management: Pipedrive, Google Workspace
• Customer communications: WhatsApp Business

All third-party services are subject to appropriate data protection agreements and operate under their own privacy policies. Data is processed either in the UK, EEA, or in countries deemed to offer adequate protection under UK data protection law.

7. Cookies and tracking technologies
We use cookies and similar technologies to enhance your experience and analyse website usage. These may include:
• Essential cookies – required for site functionality
• Performance cookies – to monitor and improve performance (e.g. via GA4)
• Marketing cookies – to measure ad effectiveness (e.g. via Meta Pixel)You can manage cookie preferences through your browser settings.For more information, please see our [Cookie Policy].

8. Your rights under UK GDPR
You have the following rights in relation to your personal data:
• The right to access the personal data we hold about you
• The right to correct inaccurate or incomplete data
• The right to request deletion of your data (“right to be forgotten”)
• The right to restrict or object to how we process your data
• The right to data portability
• The right to withdraw consent (where applicable)

To exercise any of your rights, please contact us at hello@loftopia.co.uk.

You also have the right to lodge a complaint with the UK’s Information Commissioner’s Office (ICO): https://ico.org.uk/

9. Changes to this policy
We may update this policy from time to time to reflect changes in law or our services. The latest version will always be available on our website with the date of last update noted at the top.