Privacy in brief
- We use personal information to answer enquiries, manage rentals, take payment, verify renters, protect equipment and comply with law.
- We do not sell personal information.
- Payment card details are handled by the payment provider; Goodlees does not need to store complete card details.
- Stripe Identity processes your ID document and matching selfie. Goodlees reviews the verification outcome before equipment is handed over.
- You can contact us about your information at goodleesuk@gmail.com.
1. Who we are
Goodlees is the controller of personal information described in this policy. Contact: goodleesuk@gmail.com.
This policy should be read with our Cookie Policy and rental policies.
2. Information we collect
- Identity and contact details: name, email, telephone number, address, date of birth where required, and account details.
- Verification information: proof of address and the result of checks. Stripe Identity collects your ID document image and live selfie and may use biometric matching to check that they belong to the same person. Goodlees may review verification details made available to it where necessary.
- Booking and transaction data: equipment, dates, collection arrangements, price, payment status, refunds and booking history.
- Communications: enquiries, messages, complaints and support records.
- Rental evidence: handover and return records, signatures, equipment serial numbers, and condition photographs or videos.
- Technical information: basic device, browser, IP and website-use information that our hosting, security or booking providers may process.
We normally receive information directly from you. We may also receive it from payment, identity-verification, booking, fraud-prevention or delivery providers used for your transaction.
3. Why we use information
| Purpose | Typical lawful basis |
|---|---|
| Answer enquiries and take steps you request before booking | Steps before entering a contract |
| Confirm, manage and fulfil a rental | Contract |
| Take payment, issue refunds and recover valid charges | Contract and legitimate interests |
| Verify identity, prevent fraud, protect customers and equipment | Legitimate interests and, where applicable, legal obligation |
| Keep tax, accounting and legal records | Legal obligation |
| Handle complaints, disputes and legal claims | Legitimate interests and legal claims |
| Send marketing where you choose to receive it | Consent, or another basis permitted by law |
Our legitimate interests include operating a safe rental service, preventing fraud and theft, maintaining evidence of equipment condition, resolving disputes and improving customer service. We consider the effect on your rights before relying on legitimate interests. Facial matching may involve biometric data requiring additional legal protection. Stripe presents its own information and choices during the verification process; see Stripe’s Privacy Center. Contact us if you need to discuss an alternative way to verify your identity.
5. How long we keep information
We keep information only as long as needed for the purpose collected, including legal, accounting, fraud-prevention and dispute requirements. Our usual approach is:
- general enquiries with no booking: up to 12 months after the last contact;
- booking, payment and accounting records: generally six years after the relevant transaction or financial period;
- identity documents and selfies submitted through Stripe Identity: handled and retained by Stripe under its applicable policies and settings; Goodlees does not routinely download or keep copies outside Stripe. If we separately receive a copy or proof of address, we delete it when no longer needed for verification, security or a live dispute;
- verification outcomes and rental condition records: for the rental plus a reasonable claims period; and
- marketing preferences: until you opt out, plus a minimal suppression record so we respect that choice.
We may retain information longer where a complaint, chargeback, insurance matter, investigation or legal claim is active.
6. Your information rights
Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, objection, or transfer in a portable form. Where processing relies on consent, you may withdraw it at any time without affecting earlier use.
Some rights are qualified and we may need to verify your identity. Contact goodleesuk@gmail.com. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.
7. Security, changes and contact
We use reasonable organisational and technical measures appropriate to the information and risk. No system is completely secure, but we limit access and expect suppliers to protect information.
We may update this policy when services, suppliers or law change. Material changes will be highlighted where appropriate and the date above will be updated.
Privacy contact: Goodlees · goodleesuk@gmail.com