Kerb

Privacy Policy

Last updated: 24 March 2026

Kerb Technology ("Kerb", "we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Kerb Technology operates the property intelligence platform at app.kerb.technology and the website at kerb.technology. We are the data controller for the personal data described in this policy.

Contact: connect@kerb.technology

2. What Data We Collect

Estate Agent Accounts

Data	Purpose	Lawful Basis
Full name	Account identification	Contract
Email address	Login & account communications	Contract
Company telephone number	Contact & support	Contract
Agency name / branch	Display on property listings	Contract
Password	Authentication (stored as bcrypt hash — never in plain text)	Contract

Property Enquiries (Buyers / Viewers)

Data	Purpose	Lawful Basis
Name	Lead identification for the estate agent	Legitimate interest
Email address	Allow agent to follow up	Legitimate interest
Phone number (optional)	Allow agent to follow up	Legitimate interest
Message (optional)	Context for the enquiry	Legitimate interest

Analytics Data (Anonymous)

Data	Purpose	Lawful Basis
QR code scan timestamps	Scan analytics for agents	Legitimate interest
Page view timestamps	Engagement analytics	Legitimate interest
Browser user agent string	Device analytics	Legitimate interest

3. How We Use Your Data

• To provide and maintain the Kerb platform
• To authenticate estate agent accounts
• To deliver buyer enquiries to the relevant estate agent
• To provide analytics and reporting to estate agents
• To communicate service updates and support information

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Security

• All data is stored on encrypted servers hosted by Vercel (US) and Neon (US)
• International transfers are covered by the UK-US Data Bridge agreement
• Passwords are hashed using bcrypt (industry standard, irreversible)
• All connections use TLS/SSL encryption
• Property photos are stored in Vercel Blob Storage with access controls

5. Data Retention

• Agent accounts: Retained while the account is active. Deleted within 30 days of account closure request.
• Buyer enquiries (leads): Automatically deleted after 90 days.
• Analytics data: Retained for up to 24 months in anonymised/aggregated form.

6. Your Rights

Under the UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interest

To exercise any of these rights, contact us at connect@kerb.technology. We will respond within 30 days.

7. Cookies

Kerb uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Third-Party Services

Provider	Purpose	Location
Vercel	Hosting & deployment	US (UK-US Data Bridge)
Neon	Database	US (UK-US Data Bridge)
Vercel Blob	Image storage	US (UK-US Data Bridge)

9. Children

Kerb is not intended for use by anyone under 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated to registered users via email.

11. Complaints

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113