Privacy Policy
Last updated: 27 October 2026
Who we are
Borrowed is run by Jamil Raji, trading as Borrowed, a sole trader in Scotland ("we"). We're the controller of your personal data. Contact: hello@getborrowed.com.
What we collect
| What | Why | Legal basis |
|---|---|---|
| Email, password (encrypted), legal name | Your account; legal name kept private, never shown to other users | Contract |
| Display name, profile info | Shown to other users | Contract |
| Listings, item photos | Showing your items | Contract |
| Check-in and damage photos, notes | Evidence of condition at pickup and return, resolving disputes | Contract / legitimate interests |
| Messages between users | Arranging borrows, evidence in disputes | Contract / legitimate interests |
| Payment info | Handled by Stripe. We never see or store full card numbers. We store payment IDs and amounts | Contract / legal obligation |
| Postal tracking numbers | Posted returns | Contract |
| Waitlist: email, town, borrow/lend interest | Telling you when Borrowed launches near you | Consent (you can withdraw any time) |
| Basic technical logs | Security and fixing bugs | Legitimate interests |
Check-in photos can show where you are, for example your home. Only the two people in that borrow can see them, plus Borrowed if there's a dispute. They're never public.
Who we share it with
- Stripe (payments and payouts)
- Supabase (database and file storage)
- Cloudflare (hosting and security, including spam/bot protection on signup)
- The other person in your borrow (display name, messages, check-in photos only)
- Banks or Stripe, if a payment is disputed (evidence only)
- The police or courts, if the law requires it
We don't sell your data or use it for advertising profiles.
International data transfers
Some of our service providers (such as Stripe, Supabase and Cloudflare) may process your data outside the UK. Where they do, we rely on safeguards approved under UK data protection law, such as the UK International Data Transfer Addendum or adequacy regulations.
How long we keep it
- We keep your account data while your account is open. If you delete your account, we delete or anonymise your personal data within 30 days, except records we must keep longer by law (such as payment and tax records, kept for up to 6 years).
- Borrow records, check-in photos, messages and payment records: up to 6 years after the borrow, because they may be needed for disputes, chargebacks and tax/legal records.
- Waitlist: until launch in your area, or until you unsubscribe.
Your rights
You can ask to see, correct, delete or download your data, object to or restrict how we use it, and withdraw consent. Email hello@getborrowed.com. Some borrow records may have to be kept for the reasons above. If you're unhappy, you can complain to the ICO (ico.org.uk).
Cookies
We only use cookies needed to keep you logged in and the site working. If we ever add analytics or advertising cookies, we'll ask first.
Age
Borrowed is for people aged 18 and over.
Changes
We'll update this page and tell you about major changes.