Privacy Policy

Welcome to KitShare ("KitShare", "we", "us", or "our"). We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share your data when you use our services.

By using KitShare, you agree to the practices described in this Policy. If you have any questions, please contact us at support@kitshare.ie.

We collect various types of information to provide and improve our services. Below is an overview of the data we gather:

• Account & Profile Data: Your first name, last name, username, email address, and phone number (if provided).
• Location Data: A general suburb or town to show items near your area. We do not collect exact home addresses or display them publicly.
• Verification & Security Info: If you use our ID verification process (via Stripe Identity), we process necessary identification data. Verification checks are handled by Stripe and we store limited verification status and audit metadata needed for platform safety.
• Usage Data: This may include device information, IP addresses, or log data collected by Firebase. This helps us ensure site security and improve functionality.
• Communication Data: We store your email address for transactional emails (for example, confirmations and notifications) via SendGrid. We do not sell your email to third parties.

We use your data to:

• Provide and Personalize Services: Create and manage user accounts, show relevant items near your location, and tailor search results.
• Communicate: Send emails about your account, such as confirmations, updates, or important notices.
• Verify Identities and Prevent Fraud: Use third-party verification partners to help maintain a safe marketplace.
• Legal and Safety Requirements: Comply with legal obligations, protect user safety, and enforce our Terms.

Where required by law (for example, in the EEA or UK), we process your data on the following bases:

• Contract: To provide the services you request.
• Legitimate Interests: For site security, improvements, and business operations.
• Consent: Where you choose to opt in (for example, optional marketing communications).
• Legal Obligation: Compliance with laws, such as record-keeping or responding to lawful requests.

We do not sell your personal data. However, we may share it in the following ways:

• Service Providers: We store data on Firebase and send emails via SendGrid. These providers process data on our behalf.
• With Other Users: When you engage in rental transactions, essential details (for example, your username) may be shared.
• Legal Obligations or Rights: If required by law or necessary to protect user or public safety.

We retain your personal data as long as your account is active or as needed to provide services. We may also keep certain information to comply with legal obligations or resolve disputes.

We implement security measures such as encryption in transit and restricted access. While we strive to protect your data, no system can guarantee 100% security.

Depending on your jurisdiction, you may have the right to:

• Access and Correct: Request a copy of your data or correct inaccuracies.
• Delete: Ask us to delete your data (unless we're required to keep it).
• Object to Processing: For marketing or when based on legitimate interests.
• Withdraw Consent: If processing is based on consent.

To exercise any rights, contact us at support@kitshare.ie. We may need to verify your identity before complying with your request.

We may use cookies and similar technologies to provide and improve our services. You can control cookies via your browser settings, but disabling them may affect functionality.

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or within the app. Your continued use of KitShare after any changes indicates your acceptance of the updated Policy.

If you have any questions about this Privacy Policy, please contact us at support@kitshare.ie.

If you are located in the European Economic Area (EEA) or UK and believe your rights under GDPR are not being met, you can lodge a complaint with your local supervisory authority.