Privacy

dvd.club is run by Michael Wild, who is the data controller, and stores as little about you as it can. This page says what we hold, who sees it, and how to have it removed. Everything below goes to mike@dvd.club.

What we hold

Your email address, display name, country and postal address. The address (sans country) is encrypted at rest, and your password is hashed before being stored. We also hold a record of the copies you've listed and the loans you've been part of. Additionally we maintain a log of web page access, including IP address, user agent and request URI. If you've joined the waiting list, we hold the email address and country you gave us.

Why we hold it

This data is all required for dvd.club's core functionality. We do not collect any data that we do not need. The legal basis for holding it is the membership agreement between you and dvd.club.

Who sees it

Other members see your display name, your country and how many films you've lent and borrowed. When a borrow request is accepted, each member sees the other's postal address so the disc can be posted; it stops being visible once the loan is closed. Your email address is never shown to other members. Notification emails are delivered to members by Postmark on our behalf. We do not have any analytics or advertising, and thus do not share any user data with such third-parties.

How long

Your details stay for as long as you're a member. Loan records persist after your account is deleted, since a loan is an agreement by two parties, one of whom is still active; your name is removed from them. Waiting list entries stay until you join or ask us to remove them.

Cookies

We set a standard session cookie when you log in, which keeps you logged in for 30 days. Nothing else.

Deleting your account

Please email us from the email you used to create your account, and we'll delete your account, address and email address within a month.

Your rights

You can ask for a copy of what we hold, have it corrected, or have it erased. If you aren't happy with the answer you can complain to your national data protection authority — in the UK, the Information Commissioner's Office.