GearShare
Legal

Privacy Policy

We take privacy seriously. This policy describes what personal data we collect, why, and your rights as a data subject (including rights under the GDPR and similar laws).

Last updated: April 2026

1. Who we are

GearShare operates the peer-to-peer tool rental marketplace at gearshare.it.com and in the GearShare mobile app. For purposes of the EU/UK GDPR we are the data controller of the personal data described in this policy. You can contact us at [email protected].

2. Data we collect

2.1 Data you provide

  • Account: name, email, phone number, profile photo, city.
  • Listings: tool descriptions, photos, pricing, location (approximate).
  • Transactions: booking dates, payment details (processed via our payment partner; we do not store full card numbers), identity verification documents where required.
  • Communications: in-app messages, reviews, contact-form submissions.

2.2 Data collected automatically

  • Device and usage data (IP address, device type, pages viewed, referrer).
  • Cookies and similar technologies (see our Cookie Policy).
  • Approximate location derived from IP or — with your permission — precise location from the mobile app.

3. How we use your data (legal bases)

  • Contract: to provide the marketplace, process bookings, and facilitate messaging.
  • Legitimate interest: to secure the service, prevent fraud, and improve features.
  • Consent: for marketing communications and non-essential cookies (you can withdraw at any time).
  • Legal obligation: to comply with tax, accounting, and safety laws.

4. Sharing your data

We share data only with:

  • Other users as needed to complete a rental (e.g., first name, city, profile photo).
  • Service providers who help operate GearShare (cloud hosting, analytics, payments, customer support) under strict confidentiality obligations.
  • Law enforcement or regulators when legally required.
  • Acquirers in a merger, acquisition, or sale of assets — with notice to you.

We do not sell your personal data.

5. International transfers

Some providers process data outside the EEA or UK. When we transfer data internationally we use appropriate safeguards (Standard Contractual Clauses, adequacy decisions) to protect it.

6. Retention

We keep personal data only as long as necessary for the purposes described. Account data is retained while your account is active and for up to 24 months afterwards, or longer where required by law (e.g., tax records).

7. Your rights

Under the GDPR and similar laws you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Erase data (“right to be forgotten”) where applicable.
  • Object to or restrict certain processing.
  • Request data portability.
  • Withdraw consent at any time.
  • Lodge a complaint with your local supervisory authority.

To exercise these rights, email [email protected]. We’ll respond within 30 days.

8. Security

We protect your data with encryption in transit (TLS), encryption at rest, role-based access controls, and regular security reviews. No system is perfectly secure, but we work hard to safeguard your information.

9. Children

GearShare is not directed to children under 18. We do not knowingly collect data from children. If you believe a child has shared data with us, please contact us and we will delete it.

10. Changes to this policy

We may update this policy. Material changes will be announced through the service or by email.

11. Contact

Privacy questions? Email [email protected].