ShowReady Customer Privacy Notice

ShowReady is a trading name of Milena Patrycja Tomaszewska, who is the controller responsible for your personal information. (ICO registration number: to be added once registered.)

Email: getshowreadyuk@gmail.com

We collect or use the following information to provide services and goods, including delivery: names and contact details; addresses; date of birth (to confirm you are 18 or over, which is a condition of using ShowReady); purchase or account history; payment details (card payments are processed securely by Stripe; we do not store full card numbers); account information; and photographs or video recordings (for example, listing images of items).

We collect or use the following information for the operation of customer accounts and guarantees: names and contact details; addresses; payment details (processed by Stripe); purchase history; account information, including registration details; and information used for security purposes.

We collect or use the following information to prevent, detect, investigate or prosecute crimes: names and contact information; customer or client accounts and records; financial transaction information; and technical identifiers such as IP address and device or user-agent information, used for fraud prevention.

We collect or use the following information to keep our platform safe (content moderation): photographs or video recordings (uploaded listing images); and account and listing information. We use automated tools to check images uploaded to ShowReady for prohibited, unsafe or unlawful content.

We collect or use the following information for analytics, to understand and improve our service: usage and product interaction data; device information and technical identifiers, including IP address; and app and website journey information.

We collect or use the following information to comply with legal requirements: name; contact information; financial transaction information; and any other personal information required to comply with legal obligations.

We collect or use the following personal information for dealing with queries, complaints or claims: names and contact details; addresses; payment details; account information; purchase or service history; financial transaction information; and correspondence.

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. The lawful basis we rely on may affect your data protection rights, which are set out in brief below. You can find out more about your rights, and the exemptions which may apply, on the ICO’s website.

Right of access — you can ask us for copies of your personal information.

Right to rectification — you can ask us to correct or complete information you think is inaccurate or incomplete.

Right to erasure — you can ask us to delete your personal information.

Right to restriction of processing — you can ask us to limit how we use your personal information.

Right to object to processing — you can object to the processing of your personal information.

Right to data portability — you can ask us to transfer your information to you or another organisation.

Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

If you make a request, we must respond without undue delay and within one month. To make a request, contact us using the details above.

Providing services and goods: Contract.

Operation of customer accounts and guarantees: Contract, and Legitimate interests (for the security element only).

Preventing, detecting, investigating or prosecuting crimes: Legitimate interests.

Keeping our platform safe (content moderation): Legitimate interests.

Analytics, to understand and improve our service: Consent. You can withdraw your consent at any time.

Complying with legal requirements: Legal obligation.

Dealing with queries, complaints or claims: Legitimate interests.

Account and security: We use limited account and security information, such as login activity and fraud-risk signals, to keep ShowReady accounts secure, to confirm that the person using an account is its genuine owner, and to protect renters and lenders from account takeover and misuse. We use only the minimum information needed for this, we do not use it to make significant automated decisions about people, and because it is limited to security and safety it does not override the interests or rights of the people concerned.

Preventing and investigating crime: We collect and use information such as names, contact and account details, financial transaction records and technical identifiers like IP address and device information to detect and prevent fraud, non-payment, chargeback abuse and misuse of our rental and payment systems, and where necessary to investigate and pursue such activity. The information is limited to what is necessary to identify and stop fraudulent or criminal activity, and it is not used to profile honest users for unrelated purposes.

Content moderation and platform safety: We use automated tools to check images and content uploaded to ShowReady for prohibited, unsafe or unlawful material, so we can detect and remove it and keep our users and the public safe. We use only what is necessary to check the content and do not use it to profile people.

Dealing with queries, complaints or claims: We use personal information such as contact details, account and order history, correspondence, payment records and photographs to answer questions, resolve complaints, and handle disputes and claims, including damage and deposit disputes between renters and lenders. We use only the information relevant to the query or claim and keep it no longer than needed to resolve the matter and meet our record-keeping duties.

Directly from you.

Suppliers and service providers (for example, payment outcomes and verification from Stripe, and delivery tracking from Sendcloud).

We keep your personal information only for as long as we need it for the purposes set out in this notice, then delete or anonymise it. In particular:

Account and profile information: kept while your account is open and deleted within 30 days of you closing it, unless we need parts of it for the reasons below.

Order, rental and transaction records: kept for up to 6 years to meet tax, accounting and legal obligations and to handle disputes.

Financial and payment records: kept for up to 6 years to comply with tax and accounting law. Card details are processed by Stripe and are not stored by us.

Messages and records of queries, complaints or claims: kept for as long as needed to resolve the matter and then for up to 6 years where relevant to a potential legal claim.

Analytics and usage data: kept for up to 14 months, then deleted or aggregated, and deleted sooner if you withdraw consent.

Fraud and security logs (including technical identifiers such as IP address): kept for up to 12 months unless needed for an ongoing investigation.

Where the law requires us to keep information for longer, or we need it to establish, exercise or defend legal claims, we will keep it for that longer period.

Data processors — we share only the information each provider needs for its purpose:

Stripe Payments Europe, Limited (Ireland) and Stripe, Inc. (United States) — payment services provider. Processes card payments, holds and transfers funds, pays out to sellers, and carries out seller identity verification.

Sendcloud B.V. (Netherlands) — shipping and delivery software provider. Generates delivery labels, passes the delivery name and address to carriers, and provides parcel tracking.

Supabase, Inc. (United States) — cloud database and hosting provider. Hosts our application database and file storage, including user accounts, listings, messages and uploaded images.

650 Industries, Inc. (Expo) (United States) — push notification provider. Delivers push notifications to users’ devices.

Functional Software, Inc. (trading as Sentry) (United States) — crash and performance diagnostics provider. Collects crash and error diagnostics so we can fix problems and keep the apps stable.

Resend, Inc. (United States) — email delivery provider. Sends our transactional emails, such as account, order and delivery notifications.

PostHog, Inc. (EU Cloud, hosted in the EU) — product analytics provider. Helps us understand how the apps are used so we can improve them.

Sightengine SAS (France) — content moderation provider. Automatically checks uploaded images for prohibited or unlawful content.

Others we share with: professional or legal advisors (our accountant for tax and accounting, and legal advisors where needed); organisations we are legally obliged to share with (such as the police, courts, HMRC and the ICO); and other ShowReady users who are party to your transaction — we share your delivery name, address and order and contact details with the lender/renter or buyer/seller so the item can be sent, returned and any issue resolved.

Where necessary, our data processors may share personal information outside the UK. When they do, they comply with UK GDPR and make sure appropriate safeguards are in place. Transfers to the United States (Stripe, Supabase, Expo, Sentry, Resend) rely on an Addendum to the EU Standard Contractual Clauses (SCCs). Transfers within the EU (Sendcloud in the Netherlands, PostHog EU Cloud, Sightengine in France) rely on the EU/UK adequacy bridge.

If you have any concerns about our use of your personal information, you can make a data protection complaint to us by email at getshowreadyuk@gmail.com. Please tell us what happened and what you would like us to do. We will acknowledge your complaint within 5 working days and give you a full response within one month. If your complaint is complex and we need more time, we will let you know and explain why.

If you remain unhappy with how we have used your data after raising a complaint with us, you can also complain to the ICO: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. Website: https://ico.org.uk/make-a-complaint

Some interface icons used on ShowReady require attribution. Current icon credits are listed below.

Location icon: made by Freepik from Flaticon (flaticon.com).

Birthday icon: made by srip from Flaticon (flaticon.com).