People, privacy and GDPR

How borrowers’ data is handled, removed and answered for.

People are added automatically when you lend something out or take a booking. Under People you can search, see each person’s loans and change their contact details.

Your organization’s responsibility

Your organization is the controller of its borrowers’ data, and we are your processor under our Data Processing Agreement, which you accepted at signup. Only store what you need: a name is enough for a loan. Don’t write sensitive information, such as health data or national ID numbers, in notes or messages. If your borrowers are children, take particular care, and inform them and their guardians where needed.

Removing a person

Open the person and press Remove person. The name and contact details are deleted, while the loan history stays without them. Anything they have on loan must be returned first.

Removing someone also frees a place, if you’re on the Free plan with its limit of 50 borrowers.

Automatic removal

Under Settings → Organization, choose how long inactive borrowers are kept under Remove inactive borrowers after. It’s 24 months unless you change it, counted from their last loan or return. People with something on loan are never removed.

If someone asks for their data

You can answer yourself: the person’s page shows their data, and People can be exported to Excel. See also Export and delete data.