Last updated 19 September 2026
This explains what DrumFleet collects, why, and what you can do about it. It covers the DrumFleet website and app. It does not cover what an operator does with their own renters’ information inside their own account — for that, see “Renter information” below.
1. Who we are
DrumFleet is operated by DrumFleet LLC, 7533 S Center View Ct Ste N, West Jordan, UT 84084 (“DrumFleet”, “we”, “us”). We provide software for appliance rental operators.
For information about the people who use DrumFleet — operators, their team members, affiliates and visitors to our site — we decide how it is used. For information an operator stores about their renters, the operator decides, and we handle it on their instructions under our Data Processing Agreement.
This policy explains our practices. It is not a contract and does not create rights beyond those the law gives you.
2. What we collect
When you use the site
- Pages you visit and how you reached us: referrer, and any campaign parameters in the URL.
- Standard server logs: IP address, browser and timestamp, kept for security and debugging.
- What you give us in a form, such as your name, company and email address when you ask for a template.
- Cookie and device identifiers, as described in section 3.
When you have an account
- Your name, email address, phone number and password (stored hashed, never in plain text).
- Your business details: name, address, timezone, logo, service area, default pricing.
- Billing details. Card numbers go straight to Stripe. We store only the plan, status and the last four digits Stripe reports back.
- Activity in the app, so an owner can see who on their team changed what.
- What you send us when you ask for support.
When you are an affiliate
- Your name, email address and password, how you plan to promote DrumFleet, and the payout account you nominate.
- Tax forms where the law requires us to collect them.
- The referrals and commissions credited to you.
Renter information
Operators store their renters’ names, addresses, contact details, identification, agreements and payment history. We hold it on their behalf. We access it only to run and secure the Service, to give support an operator asks for, or where the law requires. Signed agreements and identification are held in private storage and served only through an authorisation check. We do not use renter information for our own marketing, and we do not send it to advertising platforms.
3. Cookies and tracking
We set these cookies:
- Session and CSRF cookies. Required to log in and to submit forms safely. These cannot be turned off without breaking the site.
df_attr. Remembers how you first found us, for up to 90 days, so we know which marketing is worth doing.df_consent. Remembers your answer to the cookie banner.
On our public website we also use analytics and advertising tags from Meta (Facebook), Google Analytics 4, Google Ads and TikTok. They set their own cookies and receive identifiers, your IP address and a record of the pages you view, and they may combine that with what they know from other websites. They help us understand how the site is used, measure our ads and show DrumFleet ads to people who have visited. Where a conversion is sent to Meta from our server as well as from your browser, both copies carry the same event ID so it is counted once, and any email address is hashed before it is sent.
We do not load these tags inside the app, on agreement-signing pages, in the renter portal or on operators’ own domains.
Your choices
No advertising or analytics tag loads until you choose “Allow” on the banner. That applies wherever you are, not only in Europe. You can change your answer at any time from the banner or the cookie link in the footer. Essential cookies are exempt. We do not respond to the older Do Not Track signal, because there is no common standard for it.
Separately from our own tags, an operator may run their own Meta or Google tags on their booking page and enquiry form. Those are the operator’s, described in their own privacy notice, and they are subject to the same banner. They never load on signing pages or in the renter portal.
4. Why we hold it
- To run your account, bill you and send service email.
- To keep the Service secure, prevent fraud and understand which pages work.
- To advertise DrumFleet and measure that advertising, where you have allowed it.
- To send marketing email if you asked for a template or signed up for updates. Every such email has an unsubscribe link.
- To pay affiliates and meet our tax and accounting obligations.
5. Who else sees it
Service providers, each limited by contract to what they need: Stripe for subscription payments, and our hosting, storage, email and content delivery providers. The current list is in the Data Processing Agreement.
Advertising and analytics platforms, as described in section 3, where you have allowed it. These companies use what they receive for their own purposes under their own policies. They are not our service providers, and we cannot control what they do with it once it reaches them.
Legal reasons. We disclose information if the law requires it, or where needed to enforce our terms or protect the safety, rights or property of DrumFleet, operators, renters or the public. Where we reasonably can, we tell the person affected.
Sale of the business. If DrumFleet is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of it, and the recipient may continue to use it as this policy describes.
We do not sell personal information for money. Some state laws call our use of advertising tags “sharing” or “targeted advertising”. Because nothing loads until you choose “Allow”, that only happens if you have agreed to it, and you can withdraw at any time from the banner.
6. Where it is held
On servers in the United States. If you use DrumFleet from elsewhere, your information is transferred to and handled in the United States.
7. How long we keep it
- Account data. While your account is open. After you close it, it is deleted from our live systems within 90 days, and backups are overwritten within a further 35 days.
- Read-only accounts. At least 12 months after a subscription lapses, as our terms describe.
- Invoices, tax and affiliate payment records. For as long as the law requires, typically up to 7 years.
- Server logs. 30 days.
- Marketing attribution. 90 days, matching the cookie.
- Marketing contacts. Until you unsubscribe or ask us to delete them.
8. Your rights
You can ask for a copy of your information, correct it or delete it. Account holders can export machines, renters, agreements and payments to CSV from inside the app on any plan, without asking us.
Email hello@drumfleet.com. We respond within the time the law requires, usually within 30 days, and may need to confirm who you are first. We may keep information the law requires or allows us to keep. We will not treat you worse for making a request.
US state privacy rights. Some states give residents extra rights, including to opt out of targeted advertising and of “sales” or “sharing” of personal information, and to appeal a decision we make. Where those laws apply to us, we honour them. Use the banner to opt out, and email us for anything else, including an appeal. In the language of those laws: we collect identifiers, commercial information, internet activity and approximate location, from the sources and for the purposes described above, and we disclose identifiers and internet activity to advertising and analytics platforms. We do not knowingly sell or share the information of anyone under 16.
If you are a renter rather than an operator, the operator you rent from controls your information. Contact them first. Their details are on your rental agreement and in your renter portal. We will help them respond.
9. If you are in the UK or Europe
DrumFleet is offered to businesses in the United States. No advertising or analytics tag loads unless you agree, wherever you visit from. We rely on your consent for those tags and for marketing email, and on our legitimate interests or a contract with you for the rest. You can complain to your national data protection authority.
10. Security
We use reasonable technical and organisational measures to protect information. These currently include encryption in transit, hashed passwords, limiting production access to people who need it, activity logging and regular backups. No system is perfectly secure, and we cannot guarantee that information will never be accessed or disclosed. If a breach affects you, we will tell you and any regulator as the law requires.
11. Children
The Service is for businesses. We do not knowingly collect information from anyone under 16. If you believe we have, email us and we will delete it.
12. Changes
If we change this policy materially, we will tell account holders by email or in the app before it takes effect. The date at the top always reflects the current version.
13. Contact
hello@drumfleet.com, or hello@drumfleet.com, which reaches a person.
Questions about anything here? hello@drumfleet.com