Privacy & Data Protection Policy — Condensed (Storage Innovation Ltd / Sturij)
Purpose
Explains what personal data Storage Innovation Limited (trading as Sturij) collects, how it is used, who it is shared with, how long it is retained, and the rights individuals have under UK GDPR.
Last updated: 3 Feb 2026
1) Who we are (Data Controller)
Storage Innovation Limited (T/A Sturij)
- Data Protection Officer: Mark Walton
- Company number: 12903072
- Registered address: 7 Woodland Close, Wetherby, LS22 6BJ
- Email: contact@sturij.com
- Website: www.sturij.com
2) What information we collect
We collect only what is necessary to provide our bespoke furniture services.
2.1 Contact & identity
- Name
- Email address
- Mobile number
- Home address (installation address)
2.2 Project information
- Requirements/specifications
- Measurements and relevant property details
- Photos of the space (with permission)
- Design preferences and consultation notes
2.3 Financial
- Payment information (card payments processed by Stripe; we do not store full card details)
- Bank transfer details (if used)
- Invoicing and payment history
- Finance application information (if using Ideal4Finance)
2.4 Communications
- Emails/messages/phone notes
- Project documents, quotes, contracts
- Feedback, reviews, satisfaction certificates
2.5 Website / portal
- Login credentials and preferences for the customer portal
3) How we use your information (legal bases)
3.1 Contract performance
- Design proposals and quotations
- Manufacture and installation
- Payments and invoicing
- Scheduling and supplier coordination
- After-sales support and warranty
3.2 Legal obligations
- Financial records for tax/accounting (7 years)
- Insurance records
- Responding to legal/regulatory requests
3.3 Legitimate interests
- Service and customer experience improvement
- Fraud prevention and legal claim protection
- Business performance analysis
- Supporting our lifetime furniture support commitment
3.4 Consent
- Marketing communications (you can opt out any time)
- Using photos of completed installations in marketing
4) Who we share information with
We do not sell or share personal data for third-party marketing.
We share information only when needed to deliver services:
- Material suppliers (delivery/fulfilment details, once an order is placed)
- Stripe (payment processing; they act under their own privacy policy)
- Ideal4Finance (only if you choose finance)
- Other trade specialists (e.g., electricians/plumbers) where relevant and with your knowledge/consent
- Legal/regulatory bodies (e.g., HMRC, police, ICO) when required
- Insurance provider: Zurich Insurance Company Limited (claims/policy administration)
5) How long we keep information
- Enquiries that don’t proceed: deleted immediately once you confirm you are declining the proposal
- Customer orders: retained indefinitely to honour lifetime support and warranty purposes
- Financial records: 7 years (HMRC requirement)
- Contracts/legal documents: 6 years after project completion
- Marketing communications: until you unsubscribe/withdraw consent
6) Marketing & photography
6.1 Marketing
If you place an order, we may send occasional marketing communications based on our legitimate interest in maintaining a customer relationship.
You can opt out any time via:
- www.sturij.com/login (preferences)
- ‘unsubscribe’ link in emails
- contacting contact@sturij.com
6.2 Photography
We may photograph completed installations for our portfolio (with AI used to remove personal effects/identifiable features).
You can withdraw consent at any time and we will remove images from marketing materials.
7) Your rights under UK GDPR
You have the right to:
- Access
- Correction
- Erasure (subject to legal retention duties)
- Restrict processing
- Data portability
- Object (including to direct marketing)
- Rights related to automated decision-making (we do not currently use ADM with legal/similarly significant effects)
To exercise rights: contact Mark Walton at contact@sturij.com. We respond within one month.
8) Security
We use appropriate technical/organisational measures, including:
- Secure cloud storage (Base44 database security policies)
- PCI-DSS compliant payment processing (Stripe)
- Password-protected systems and encrypted storage
- Role-based access
- Regular security reviews
- Secure disposal of paper records
Note: no method of electronic transmission/storage is 100% secure. If you suspect a breach, contact us immediately.
9) International transfers
Data is stored/processed in the UK. We do not routinely transfer personal data outside the UK/EEA. If this changes, appropriate safeguards will be used.
10) Changes to this policy
We may update this policy. Significant changes will be communicated via email (existing customers) and/or a prominent website notice.
11) Complaints
If you have concerns, contact Mark Walton at contact@sturij.com.
You may also complain to the ICO:
- Website: www.ico.org.uk
- Helpline: 0303 123 1113
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
