Please read this document carefully. It forms part of the information used to explain ITShop's rental service and customer obligations.
Information used for rental verification
ITShop collects contact, delivery, rental, payment, and identity information needed to review rental requests, prevent fraud, deliver equipment, manage returns, and meet legal obligations. Individuals may provide a NIN and date of birth. Companies and institutions provide representative and registration documents.
NIN verification and document storage
The complete NIN is sent securely to Dojah for a one-time government-record lookup and is not stored in the ITShop database. ITShop retains only a protected hash, the final four digits, match results, and review history. Uploaded identity documents are kept in private Cloudflare R2 storage and are available only through short-lived administrative links.
Sharing and purpose limitation
Identity information is used only for rental verification, fraud prevention, payment and refund handling, delivery approval, dispute resolution, and lawful compliance. ITShop does not sell identity information. Service providers receive only the data necessary to perform their contracted function.
Retention and customer rights
ITShop retains order and verification records only for the operational, security, accounting, and legal period that applies to the rental. Customers may contact ITShop to request access, correction, or deletion where the law permits. Some records may need to be retained for active rentals, disputes, fraud prevention, or legal obligations.
Security and contact
ITShop uses access controls, private object storage, masked identifiers, signed links, and audit records to protect customer data. Privacy requests or concerns can be submitted through the ITShop contact page.