Privacy
Last updated 14 September 2026
Who is responsible for what
For your own staff accounts and your billing details, we are the data controller. For your customers' data — their names, addresses, ID documents and hire history — youare the controller and we are your processor. We only handle it to run the service for you, on your instructions.
What we hold
- · Your account: name, email, phone, yard name and address.
- · Your billing: handled by Stripe. We store their customer and subscription references, never card numbers.
- · Your operational data: machines, hires, customers, documents, condition reports.
- · Identity documents your customers upload, and the result of the automated checks on them.
- · Server logs, which include IP addresses, kept for thirty days.
Where it lives
On servers in the EU. Each yard has its own database, separated at the database level rather than by a column in a shared table. Identity documents, signatures and damage photographs are on private storage and are never served from a public URL.
Who we share it with
Stripe, for payments. Our email provider, for the mail we send you. Our hosting provider, for the servers. Nobody else, and we do not sell it or use it for advertising.
How long we keep it
While your account is open, and for thirty days after you cancel in case you come back. Then it is deleted. Identity documents can be deleted sooner from your dashboard, and we would encourage it — you only need them until the hire is over and your insurer is satisfied.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email us and we will do it — we are not going to make you fill in a form. If you think we have got it wrong you can complain to the Information Commissioner's Office.
Cookies
This marketing site sets no cookies and runs no analytics or tracking. The dashboard sets one session cookie so you stay signed in. That is all of them.