Privacy Policy

Picturental Ltd ("we") is the data controller for personal information you provide while using picturental.com. We are registered in the United Kingdom and follow the UK GDPR.

What we collect

• Account info: name, email, profile picture, city, and phone number if you add one. Provided by you or imported from your identity provider (Clerk).
• Listings: photos, descriptions, and pricing you upload for gear you list, plus the city and — if you provide one — the postcode where the gear is kept. We store the coordinates that postcode resolves to so renters can find kit near them. Other people only ever see the first part of a postcode, such as “SE1”, never the full code.
• Bookings + payments: dates, amounts, and Stripe identifiers needed to process payment. We do NOT see or store your card details — Stripe handles that.
• ID verification: when a renter or owner submits government-issued ID for verification, the document and selfie are processed by Stripe Identity. We never receive or store the document or the image. We retain the verification result and the name printed on the document, which we use only to check whether film credits you link are under the same name. That name is never shown publicly.
• Film credits, if you link them: the public profile you choose (for example an IMDb identifier), the name it is credited under, and — if you complete the optional verification — the address of the page you published our code on. All of this is information you choose to connect to a public profile.
• Fraud checks: Stripe assesses each payment for fraud risk and returns a rating. We store that rating against the booking and it is visible only to Picturental staff. To protect the marketplace against staged claims, we also record the IP addresses your account signs in from and an identifier for devices that use our mobile app. These are used solely to detect fraud between accounts (for example, a renter and an owner filing a claim from the same device), are visible only to Picturental staff, and are never used for advertising.
• Usage: page views, session durations, and feature interactions via Plausible analytics, which uses no cookies and does not track you across sites.
• Error reports: when something breaks, Sentry captures the technical detail (URL, browser, error message). It may include your user ID but does not include passwords or card details.

How we use it

• Run the marketplace (match renters with owners, process bookings)
• Send transactional emails about your bookings via Resend
• Keep the platform secure and prevent fraud
• Improve the product based on aggregate usage

We do not sell your data, share it with advertisers, or use it to train third-party AI models.

Who we share it with

Picturental relies on a small number of processors:

• Clerk (authentication, US)
• Stripe (payments + identity verification, UK/Ireland)
• Vercel (hosting, EU region)
• Neon (Postgres database, London)
• Upstash (rate-limit cache, London)
• Resend (transactional email, EU)
• Sentry (error tracking, Frankfurt)
• Plausible (analytics, Frankfurt, cookieless)

Each processor only sees what they need to do their part of the job.

How long we keep it

Account data: as long as your account is active. Bookings: 7 years after the rental ends for tax and dispute resolution. Verification result and document name: until you ask us to delete your account. Linked film credits: until you remove them or delete your account — you can unlink them yourself at any time from your settings.

Your rights

Under UK GDPR you have the right to access your data, correct it, delete it, export it, or object to its processing. Email contact@picturental.com and we'll respond within 30 days.

Children

Picturental is not intended for users under 18. We do not knowingly collect data from children.

Changes to this policy

If we change how we handle your data we'll update this page and notify existing users by email at least 7 days before the change takes effect.