Privacy Policy
Last updated August 24, 2026. This is a fictional policy written for the Cedar Ridge public demo. No real customers are covered by it. Cedar Ridge Storage Co. is the operator and the data controller for the demo storefront.
1. Who we are
Cedar Ridge Storage Co. ("Cedar Ridge", "we", "us", "our") operates a self-storage facility and the website at cedarridgestorage.com (the "Site"). For the purposes of this Privacy Policy, Cedar Ridge is the data controller for any personal information you give us through the Site.
This is a public demo. All customer names, emails, phone numbers, and card details shown on the Site or in the operator console are fictional and used only to show how the product works.
2. What personal information we collect
We collect personal information in three ways: information you give us, information collected automatically when you visit the Site, and information collected when you reserve or rent a unit.
2.1 Information you give us
- Reservation inquiries. When you fill out a reservation form on the Site, we collect your name, email, phone number, the size of the unit you are interested in, and any message you include.
- Account creation. When you rent a unit and create a customer account, we collect your full name, email, phone, billing address (if provided), emergency contact name and phone, and a gate code you would like to use.
- Insurance records. If you provide proof of insurance for your stored goods, we store the provider name, policy number, and expiration date. We do not see or store the policy document itself unless you upload it to us.
- Communications. When you email or call us, we keep the contents of those messages so we can help you and so the operator can audit the history of your account.
2.2 Information collected automatically
- Device and usage data. When you visit the Site, our web server records your IP address, the pages you viewed, the time of your visit, the browser you used, and the site that referred you to us.
- Cookies. The Site uses a small number of cookies to remember your accessibility settings (such as high-contrast mode or large text) and to keep you signed in to the customer portal. We do not use advertising cookies and we do not share cookie data with third parties.
2.3 Payment information
Card payments are processed by Accept.blue, a third-party payment processor. When you pay a deposit or monthly rent, your card details are sent directly to Accept.blue and we receive back only a payment token, the last four digits of the card, the card brand, and the expiration month and year. We do not see or store your full card number, CVV, or bank account details.
3. Why we collect it (purposes and legal bases)
| Purpose | Data used | Legal basis |
|---|---|---|
| To respond to your reservation inquiry | Name, email, phone, message, unit size | Your request to be contacted |
| To set up your rental and bill you monthly | Name, email, phone, billing address, payment token | Performance of the rental agreement |
| To verify that stored goods are insured | Insurance provider, policy number, expiration date | Performance of the rental agreement |
| To grant you gate and unit access | Gate code, unit assignment | Performance of the rental agreement |
| To send service notices (gate code reminders, payment confirmations, lease renewal notices) | Name, email, phone, rental details | Performance of the rental agreement |
| To prevent fraud and protect the facility | Gate access history, surveillance footage (if applicable) | Our legitimate interest in running a safe facility |
| To meet tax, accounting, and legal record-keeping duties | Payment history, lease documents | Legal obligation |
4. How long we keep your information
- Active customers. We keep your account information for as long as your unit is rented.
- Former customers. After you move out, we keep basic account information (name, lease dates, unit, final balance) for seven (7) years for tax and accounting purposes. We delete your card token, gate code, and emergency contact at move-out.
- Reservation inquiries that did not turn into rentals. We keep these for ninety (90) days, then delete them.
- Payment records. We keep payment records for seven (7) years per IRS recordkeeping rules.
- Surveillance footage (if any). Kept for thirty (30) days, then deleted, unless the footage is part of an active incident investigation.
5. Who we share your information with
We do not sell your personal information. We share it only with the parties below, and only the minimum they need to do their job.
5.1 Service providers (processors)
| Provider | What they do | What they see |
|---|---|---|
| Accept.blue | Process card payments and store the recurring subscription | Your name, email, card details (held by them), billing amount, billing date |
| Email service (operator-configured SMTP) | Send reservation confirmations, payment receipts, lease renewal notices | Your name, email, and the contents of the notice |
| Hosting provider (SmarterASP) | Host the Site and store the database | All data the Site stores, encrypted at rest |
5.2 Parties you ask us to share with
If you ask us to share information with an insurance provider, lien-sale buyer, attorney, or other party, we will do so only after we verify the request and only with the information you authorize.
5.3 Legal requirements
We may disclose personal information when required to do so by law, such as in response to a valid subpoena, court order, or to report suspected illegal activity to law enforcement.
6. Your rights and choices
You can do the following at any time. Most of these can be done from inside the customer portal. For anything the portal cannot do, contact the operator using the details in section 11.
- Access. Request a copy of the personal information we hold about you.
- Correct. Update your name, email, phone, gate code, emergency contact, or insurance details.
- Update your card. Replace the card on file through the customer portal at any time.
- Cancel. End your rental and close your account. We will retain the records described in section 4.
- Request deletion. After your rental ends and the retention periods in section 4 expire, ask us to delete any remaining personal information. We will confirm deletion in writing.
- Opt out of non-essential emails. Service notices about your account cannot be opted out of while you are a customer, but marketing emails (if any) include an unsubscribe link.
7. Cookies and similar technologies
The Site uses the following categories of cookies:
- Strictly necessary. Authentication cookies for the customer portal and the operator console. These cannot be turned off while you are signed in.
- Preferences. A small local storage entry that remembers your accessibility settings (high-contrast mode, large text, reduced motion). It is stored only in your browser and is not sent to any third party.
- Analytics. None. The Site does not use Google Analytics, Meta Pixel, or any other third-party analytics service.
8. Children's privacy
The Site is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact the operator and we will delete it.
9. International data transfers
The Site is operated from the United States. If you visit the Site from outside the United States, your information will be transferred to and processed in the United States. By using the Site, you understand that your information may be transferred to the United States, which may have different data protection rules than your home country.
10. How we protect your information
We use industry-standard measures to protect your personal information, including:
- HTTPS for all traffic to and from the Site.
- PBKDF2-hashed passwords for operator accounts and customer portal access.
- Card data is held only by Accept.blue as a token, never on our servers.
- Encrypted backups of the database.
- Access to the operator console is limited to authorized staff and protected by a password.
No system is perfectly secure. If we ever discover a breach that affects your personal information, we will notify you by email at the address on file.
11. Contact us
To exercise any of the rights in section 6, ask a question about this policy, or report a privacy concern, contact the operator:
- Email: privacy@cedarridgestorage.com
- Phone: (555) 555-0123
- Mail: 1205 County Road 2414, Cedar Ridge, TX 75020
This is a public demo. The email and phone above are placeholders and will not be answered in this demo build.
12. Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page. If the changes are material, we will also post a notice on the Site and email active customers.