Last updated: 21 May 2026
Kerb Technology ("Kerb", "we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Kerb Technology Ltd (company number 16356123, registered in England and Wales) operates the property intelligence platform at app.kerb.technology and the website at kerb.technology. We are the data controller for the personal data described in this policy and are registered with the Information Commissioner's Office (ICO) under registration number ZC143818.
Registered office: Little Tillingham, 103 Winchelsea Road, Rye, TN31 7EL, United Kingdom.
Contact: connect@kerb.technology
| Data | Purpose | Lawful Basis |
|---|---|---|
| Full name | Account identification | Contract |
| Email address | Login & account communications | Contract |
| Company telephone number | Contact & support | Contract |
| Agency name / branch | Display on property listings | Contract |
| Password | Authentication (stored as bcrypt hash — never in plain text) | Contract |
When a board is scanned, the buyer lands on a Kerb-hosted property page that displays the listing details, photos, and the agent's contact information. From that page the buyer can either click through to the agent's own listing or submit an enquiry directly to the agent through Kerb. Where a buyer chooses to submit an enquiry, we collect:
| Data | Purpose | Lawful Basis |
|---|---|---|
| Name | Forwarding the enquiry to the agent | Consent (the buyer voluntarily submits the form) |
| Email address | Forwarding the enquiry to the agent and confirming receipt | Consent |
| Phone number (optional) | Forwarding the enquiry to the agent if the buyer prefers a call back | Consent |
| Free-text message (optional) | Forwarding the enquiry to the agent | Consent |
| Property reference scanned | Linking the enquiry to the correct listing | Consent |
Enquiries are stored against the agent's account so the agent can review and respond. The agent who owns the board becomes the joint controller for any enquiry submitted via that board and is responsible for following up under their own privacy notice. Under Article 26 UK GDPR, the essence of the arrangement is: Kerb is responsible for capturing the enquiry on the property page and transmitting it to the agent; the agent is responsible for all substantive follow-up communication with the buyer and any downstream processing under their own privacy notice. Buyers who do not submit the enquiry form remain anonymous to Kerb beyond the analytics data described below.
When you subscribe to a paid plan, payment is processed securely by Stripe. We do not store your full card number, CVV, or bank details — these are handled entirely by Stripe in their PCI DSS Level 1 certified environment. We receive only a confirmation of payment status, plan type, and a Stripe customer ID to link your subscription to your account.
| Data | Purpose | Lawful Basis |
|---|---|---|
| QR code scan timestamps | Scan analytics for agents | Legitimate interest |
| Page view timestamps | Engagement analytics | Legitimate interest |
| Browser user agent string | Device-type analytics (mobile / tablet / desktop) | Legitimate interest |
| Country and city (derived from IP) | Geographic analytics for agents | Legitimate interest |
We do not store full IP addresses. At the moment a QR code is scanned, the IP is read only to derive an approximate country and city, and is then discarded — it is never written to our database. We do not create device fingerprints, persistent identifiers, or any technology designed to track an individual across visits.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
We will only send you service-related communications (account, billing, support, and platform updates) on the basis of our contract with you. We will not send you marketing emails or other electronic marketing communications unless you have given us explicit opt-in consent, in line with the Privacy and Electronic Communications Regulations (PECR). You can withdraw that consent at any time by emailing connect@kerb.technology or using the unsubscribe link in any marketing email.
We do not carry out automated decision-making or profiling within the meaning of Article 22 UK GDPR.
Under the UK GDPR, you have the right to:
To exercise any of these rights, contact us at connect@kerb.technology. We will respond within one calendar month, as required by UK GDPR. Where a request is particularly complex or where you have made several requests, we may extend this by up to a further two months and will let you know within the first month.
Kerb uses only strictly necessary cookies for authentication and session management on the agent dashboard. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We also do not use device fingerprinting, local storage trackers, or any other similar technology that would require consent under the Privacy and Electronic Communications Regulations (PECR).
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Hosting & deployment | US (UK-US Data Bridge) |
| Neon | Database | US (UK-US Data Bridge) |
| Vercel Blob | Image storage | US (UK-US Data Bridge) |
| Stripe | Payment processing | US/EU (Standard Contractual Clauses) |
| Resend | Transactional email delivery (lead notifications, account emails) | US (Standard Contractual Clauses) |
| Tailscale | Private network access to back-office services | US (Standard Contractual Clauses) |
| Hetzner | Property data scraping infrastructure | EU (Germany / Finland) |
Kerb is not intended for use by anyone under 18. We do not knowingly collect data from children.
We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated to registered users via email.
Kerb is registered with the Information Commissioner's Office (ICO) under registration number ZC143818. If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the ICO: