Privacy & Cookies Notice

Version 2026-09-19 · Last updated 19 September 2026

1. Who we are

Yellow Iron operates this marketplace. For the purposes of the UK GDPR and the Data Protection Act 2018, we are the controller of the personal data described in this notice. We are [registered company name], company number [company number], registered office [registered office address]. Our data protection contact is support@yellowironrent.com. Our registration with the Information Commissioner’s Office (ICO) is [ICO registration number].

2. What we collect

We collect: account and contact details (such as name, email and phone); location and service-area information; enquiry and task details; listing content; consent records; and technical data (such as IP address, device and usage information) needed to run and secure the Service.

3. How and why we use it (lawful bases)

We process personal data: to provide the Service and put you in touch with providers you contact (performance of a contract); to keep the marketplace safe and prevent fraud ( legitimate interests); to meet our legal duties (legal obligation); and, where we rely on it, on the basis of your consent — for example optional analytics or marketing. Where we rely on consent you can withdraw it at any time.

4. Cookies and similar technologies

We use cookies and similar technologies under the Privacy and Electronic Communications Regulations (PECR). Essential cookies are needed to run the Service (for example session, security and remembering your cookie choice) and do not require consent. Optional cookies — such as analytics — are set only if you accept them through our cookie notice. You can change or withdraw your choice at any time via the cookie settings, and you can block or delete cookies in your browser.

Typical cookies: session/security (essential — keeps you logged in and protects forms); appearance (essential/preference — remembers light or dark mode); analytics (optional — helps us understand how the site is used, only after consent).

5. Who we share it with

When you send an enquiry we share the details you provide with the provider you contacted so they can respond. We use trusted service providers (for example hosting, email and analytics) under contract and only as needed. We may disclose information where the law requires it or to establish or defend legal claims.

6. International transfers

We aim to keep personal data within the UK/EEA. Where data is transferred outside, we use appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

7. Retention

We keep personal data only as long as necessary for the purposes above. Essential account and transaction records may be retained where law or fraud prevention requires it. Account changes are audit logged.

8. Your rights

Under the UK GDPR you may request access, correction, erasure, restriction or portability of your personal data, object to certain processing (including direct marketing), and withdraw optional consent at any time. Deletion requests place the account into a restricted state pending secure erasure or legally required retention. To exercise a right, email us.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and audit logging.

10. Changes

We may update this notice; the current version is shown at the top of this page.

11. Complaints

If you are unhappy with how we handle your data, contact us first at support@yellowironrent.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.