Privacy Policy

Companion to our Terms of Service (v1.1).

Short version: we collect what we need to get boots to you and back, we never see your full card number, we don't sell anything about you, and a person answers any request you make.

1. Who controls your data

BootBorrow is operated by BootBorrow LLC, a Texas limited liability company (Texas Secretary of State file number 806713162). We decide what personal data is collected on this site and why, and we are responsible for looking after it.

2. What we collect

Account details: your name, email address and phone number, and the password or Google sign-in you use to get in.

Delivery and billing details: the shipping and billing addresses you save, and the size and fit preferences you set so we can show you pairs that actually fit.

Order and rental records: what you rented, when, the dates, the price paid, discount codes used, returns, damage assessments and late-return balances.

Payment details: we never see or store your full card number. Our payment processor stores the card and returns a reference to us; what we keep is that reference plus the card brand, last four digits and expiry month and year, so we can show you which card is on file and warn you if it expires before your rental ends.

Text-message consent records: if you tick the box asking us to text you, we record the mobile number you gave, the exact wording you agreed to, its version, and the date, time, IP address and browser used — that record is how we prove your consent was real, and we keep it whether you later opt in or out.

Messages you send: anything you write in the contact form or reply to our emails, so a person can answer you.

Event details: if you organise or join a group event, the event name, date, venue details you enter and the members you invite by email.

3. Why we hold it, and on what basis

To perform the rental contract: taking and fulfilling orders, shipping boots to you, handling returns, refunds, damage and late returns, and settling anything owed.

Because we have to: tax, accounting and fraud-prevention records we are legally required to keep.

Because we have a legitimate interest: keeping the service secure, preventing abuse of discount codes, and improving how the site works.

With your consent: marketing emails and marketing text messages, if you have opted in to each separately. Every marketing email has a one-click unsubscribe link, and unsubscribing never affects emails about an order you have placed.

4. Who we share it with

We do not sell your personal data, and we do not share it for anyone else's advertising.

We share only what is needed with the services that run BootBorrow: our payment processor (card details and payment records), our email provider (your address and the contents of the emails we send you), our hosting and database provider (everything stored on the site), and shipping carriers (your name, address and phone number so a parcel can reach you).

We may also disclose data where the law requires it, or to establish or defend a legal claim.

5. How long we keep it

Order, rental and payment records are kept for as long as tax and accounting rules require, because they are financial records.

Your account details are kept while your account is open. Close your account and we delete or anonymise what we are not required to keep.

Contact messages are kept while we deal with them and for a reasonable period afterwards, so we have context if you write again.

Discount-code attempt logs, which exist only to stop code guessing, are automatically deleted after 24 hours.

6. Your choices

You can view and change your name, phone number, addresses and preferences at any time in your account settings, and you can remove or replace the card on file there too.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Write to us and a person will handle it — we will explain anything we are legally required to keep.

You can unsubscribe from marketing email at any time using the link in any such email.

You can turn marketing text messages on or off at any time in your account settings, or by replying STOP to any text. Withdrawing consent is recorded the same way consent was.

7. Security

Access to customer data is restricted to the people who need it, and our database enforces those rules at the row level rather than relying on the app alone. Card numbers never touch our servers: they go directly to our payment processor.

No system is perfect. If a breach ever affects your data, we will tell you and the relevant authority as required.

8. Cookies

We use only the cookies and local storage needed to keep you signed in, remember your cart and rental dates, and keep the checkout secure. We do not run advertising or cross-site tracking cookies.

9. Text messages

We only send marketing text messages to a mobile number you gave us for that purpose, after you ticked a separate, unticked box asking for them. Agreeing to texts is never a condition of renting, and the box is never bundled with our terms of service.

We do not share or sell your mobile number or your text-message opt-in data to third parties for marketing purposes. The only parties who ever see the number are the messaging provider that delivers the message on our behalf and, for deliveries, the shipping carrier.

Message and data rates may apply, and message frequency varies. Reply STOP to any message to stop receiving them and HELP for help. Stopping texts never affects emails about an order you have placed.

Text messages about an order you have already placed — shipping, returns and anything owed — are part of the rental service and are not marketing.

10. Children

BootBorrow is for adults aged 18 and over, and we do not knowingly collect data from children. If you believe a child has given us data, tell us and we will delete it.

11. Contact

BootBorrow LLC, a Texas limited liability company (Texas Secretary of State file number 806713162).

Reply to any email from us, or use the contact form on this site, and a person will answer. Privacy requests are handled by a person, not a form.