Privacy policy

Who we are

LuggagePals (luggagepals.com and the LuggagePals apps) connects travellers with local businesses that store luggage. The data controller is [TO CONFIRM: legal entity name, registered address and company number]. Contact: support@luggagepals.com.

What we collect

Account details: your name, email address and password (passwords are handled by Google Firebase Authentication; we never see them in plain text). If you sign in with Google we receive your name, email address and profile photo. You can also browse as a guest with an anonymous account.

Bookings

The storage location, number and type of bags, drop-off and pick-up times, booking code, price and booking status.

Messages

Messages you send to partners or to support in the app.

Partners (hosts)

Business name and type, address, postcode, city, capacity, opening hours, description and listing photos. When partner payouts are switched on, identity and bank details are collected directly by Stripe, not by us.

Referrals

If you open a referral link, the referral code and the time you clicked are stored in your browser for 30 days, and we record the click (code and time) so the referrer can see a count. Referrers get a code, display name and business type, and an earnings record.

Payments

Card payments are processed by Stripe. We do not receive or store full card numbers. We keep the amount, currency and payment status of each booking, and the amounts owed to partners and referrers.

Stored on your device

The website keeps your app state, preferences and referral code in your browser’s local storage, and Firebase keeps your sign-in session. We do not use advertising or analytics cookies.

Who we share data with

The partner you book sees your name and booking code. Our service providers process data for us: Google Firebase (accounts, database and file storage; data is stored in the United States), Cloudflare (serves the website and sees your IP address), Google Fonts (loads the website fonts, which shares your IP address with Google) and Stripe (payments and payouts). We do not sell your personal data.

Why we use it (legal basis)

To provide the service you ask for (contract), to keep the service secure and prevent fraud (legitimate interests) and to meet tax and accounting rules (legal obligation).

How long we keep it

[TO CONFIRM: retention periods, e.g. account data until you delete your account; booking and payment records for the period required by tax law].

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing support@luggagepals.com. You can also complain to your data protection authority: the ICO (UK), the AEPD (Spain) or the CNIL (France).

International transfers

Some providers store data outside the UK and EU (for example Firebase in the United States). [TO CONFIRM: transfer safeguards, e.g. the providers’ standard contractual clauses.]

Changes

We will update this page when what we collect changes. Last updated: [TO CONFIRM: date of publication].