Collect only what you need: first name, contact preference, item details, and safety notes. Explain lawful basis, retention period, and how you handle photographs or mailing lists under UK GDPR. Use a short waiver clarifying shared responsibility and no guarantee, while reaffirming your duty of care. Store forms securely, restrict access, and anonymise statistics. Digital sign-in tools can streamline this, provided devices are protected and exports are responsibly managed.
For mains-powered items, implement a basic protocol: visual inspection, earth continuity, insulation resistance where appropriate, and function testing via an RCD. Tag items under test, isolate suspect devices, and quarantine anything failing safety checks. Keep calibrated equipment and a log of results. Use insulated tools, fume extraction for soldering, and a failsafe rule that no one bypasses. Documentation protects volunteers and reassures visitors that care is non-negotiable.