Privacy Policy

Last updated: 24 March 2026

Kerb Technology ("Kerb", "we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Kerb Technology operates the property intelligence platform at app.kerb.technology and the website at kerb.technology. We are the data controller for the personal data described in this policy.

Contact: connect@kerb.technology

2. What Data We Collect

Estate Agent Accounts

Data	Purpose	Lawful Basis
Full name	Account identification	Contract
Email address	Login & account communications	Contract
Company telephone number	Contact & support	Contract
Agency name / branch	Display on property listings	Contract
Password	Authentication (stored as bcrypt hash — never in plain text)	Contract

Property Enquiries (Buyers / Viewers)

Data	Purpose	Lawful Basis
Name	Lead identification for the estate agent	Legitimate interest
Email address	Allow agent to follow up	Legitimate interest
Phone number (optional)	Allow agent to follow up	Legitimate interest
Message (optional)	Context for the enquiry	Legitimate interest

Payment Data

When you subscribe to a paid plan, payment is processed securely by Stripe. We do not store your full card number, CVV, or bank details — these are handled entirely by Stripe in their PCI DSS Level 1 certified environment. We receive only a confirmation of payment status, plan type, and a Stripe customer ID to link your subscription to your account.

Analytics Data (Anonymous)

Data	Purpose	Lawful Basis
QR code scan timestamps	Scan analytics for agents	Legitimate interest
Page view timestamps	Engagement analytics	Legitimate interest
Browser user agent string	Device analytics	Legitimate interest

3. How We Use Your Data

To provide and maintain the Kerb platform
To authenticate estate agent accounts
To deliver buyer enquiries to the relevant estate agent
To provide analytics and reporting to estate agents
To communicate service updates and support information

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Security

All data is stored on encrypted servers hosted by Vercel (US) and Neon (US)
International transfers are covered by the UK-US Data Bridge agreement
Passwords are hashed using bcrypt (industry standard, irreversible)
All connections use TLS/SSL encryption
Property photos are stored in Vercel Blob Storage with access controls

5. Data Retention

Agent accounts: Retained while the account is active. Deleted within 30 days of account closure request.
Buyer enquiries (leads): Automatically deleted after 90 days.
Analytics data: Retained for up to 24 months in anonymised/aggregated form.

6. Your Rights

Under the UK GDPR, you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — ask us to delete your data ("right to be forgotten")
Restriction — ask us to limit how we use your data
Portability — receive your data in a structured, machine-readable format
Object — object to processing based on legitimate interest

To exercise any of these rights, contact us at connect@kerb.technology. We will respond within 30 days.

7. Cookies

Kerb uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Third-Party Services

Provider	Purpose	Location
Vercel	Hosting & deployment	US (UK-US Data Bridge)
Neon	Database	US (UK-US Data Bridge)
Vercel Blob	Image storage	US (UK-US Data Bridge)
Stripe	Payment processing	US/EU (Standard Contractual Clauses)

9. Children

Kerb is not intended for use by anyone under 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated to registered users via email.

11. Complaints

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113