Privacy Policy

Who we are

Kerb is a UK vehicle history intelligence service operated as a sole trader business. We provide plain English MOT history reports and vehicle data to help consumers make informed decisions when purchasing used vehicles. You can contact us at [email protected].

What data we collect

We collect the following data:

• —Email address when you create an account
• —Your choice about emails from Kerb: yes or no, when you made it, the wording you were shown and where (sign-up, your account page or a prompt)
• —Your answers if you reply to a question we email you, such as whether you bought a car you checked
• —Vehicle registration plates you search for
• —IP address for anonymous usage limiting
• —Search timestamps and frequency
• —Anonymous analytics data (pages visited, device type)
• —Advertising data, only if you allow advertising cookies: which of our public pages you visit, and whether you sign up or buy a plan (with the plan and price)

Why we collect it

• —Email — to provide your account and send service communications
• —Search history — to show you your past searches and enforce fair usage limits
• —IP address — to enforce the anonymous free check limit
• —Analytics — to understand how the service is used and improve it
• —Advertising — to measure whether our Facebook and Instagram ads lead to sign-ups and purchases, and to show our ads to people more likely to find Kerb useful

Legal basis for processing

We process your data under the following legal bases under UK GDPR: contract performance (to provide the service you signed up for), legitimate interests (to prevent abuse and improve the service), and consent (for analytics and advertising cookies, and for emails from Kerb).

Who we share data with

We use the following third party services to operate Kerb:

• —Supabase — database and authentication (EU hosted)
• —Stripe — payment processing (card details are handled entirely by Stripe; we never see or store them)
• —Anthropic — AI analysis of vehicle data (no personal data sent)
• —DVSA / DVLA — UK government APIs for vehicle data
• —Railway — hosting infrastructure
• —Vercel Analytics — anonymous usage analytics (no personal data)
• —Meta Platforms (Facebook and Instagram) — advertising measurement, only if you allow advertising cookies. Meta receives your IP address, browser details, the public page you are on, and sign-up or purchase events. We never send Meta your email address, number plates you check or report pages. Meta uses this data under its own privacy policy and may transfer it outside the UK.

We do not sell your data to third parties.

Emails from Kerb

We send account emails, such as sign-up confirmations and password resets, to everyone with an account. These are needed to run your account.

We only send other emails, such as new features, offers and the occasional question about how your car search went, if you have said yes. You can say yes or no when you sign up, and change your mind at any time on your account page. Every one of these emails will include a link to unsubscribe. If you answer a question we send, for example whether you bought a car you checked, we use your answer to understand how Kerb is used and to improve it, and in anonymised totals (for example, how many people bought a car they checked). We do not sell your answers or your email address.

How long we keep your data

• —Account data — until you delete your account
• —Your email choice and any answers to our questions — until you delete your account
• —Search history — 12 months from the date of search
• —Anonymous IP records — 30 days

Your rights

Under UK GDPR you have the right to:

• —Access the data we hold about you
• —Correct inaccurate data
• —Request deletion of your data
• —Object to processing
• —Data portability

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

Cookies

We use essential cookies for authentication (keeping you logged in), which cannot be turned off as the service needs them. With your consent we also use analytics cookies to understand usage, and advertising cookies from Meta (the Meta Pixel) to measure our ads. Both are off until you turn them on in the cookie banner, and you can change your choice at any time with the “Cookie settings” link at the bottom of every page.

ICO registration

Kerb is registered with the Information Commissioner's Office (ICO) as a data controller. If you have concerns about how we handle your data that we have not resolved, you have the right to lodge a complaint with the ICO at ico.org.uk.