Privacy policy
Last updated: 18 October 2026
This policy explains what personal data Kerbside collects through this website and the Kerbside apps, why, how long we keep it, who we share it with, and your rights. We've written it in plain English. If anything is unclear, email us at adam@kerbsidesystems.com.
Who we are
Kerbside is run by Kerbside Systems Ltd, a company registered in England and Wales (company number 17190622), registered office 47 Lees New Road, Oldham, England, OL4 5PL. We are registered with the Information Commissioner's Office (ICO), registration number ZC271200.
For the website, the beta list and your own Kerbside account, we are the controller of your personal data. We decide how it's used and we're responsible for protecting it.
When an operator uses Kerbside to keep records about its drivers, staff and vehicles, the operator is the controller of that data and we act as its processor: we only use it to provide Kerbside to that operator, on its instructions. If you're a driver or member of staff and want to use your rights over those records, please contact your employer first and we'll help them respond.
What we collect
When you join the beta list
- Your email address.
When you or your company use Kerbside (website or app)
- Account details: your name, work email address, phone number if you give it, your role and the company you work for.
- Operator records that your company adds: driver details such as licence, CPC, medical and training dates; vehicle details such as registrations, MOT, inspection and defect history; walkaround check results; drivers' hours and tachograph download records; and documents your company uploads.
- Photos you choose to take or upload, for example of a vehicle defect. The app only uses your camera or photo library when you ask it to.
- Support messages you send us.
Collected automatically
- A record of changes made in Kerbside (who changed what, and when). This audit trail is part of how Kerbside works for compliance.
- Technical information any website or app receives, such as IP address, device and browser type, app version and error reports. This is used for security and fixing problems.
We don't use advertising cookies or tracking for advertising, on the website or in the apps, and we don't sell personal data to anyone.
How we use it, and our lawful basis
| What we do | Data used | Lawful basis |
|---|---|---|
| Email you when there's room on the beta | Consent: you asked to join the list | |
| Provide your Kerbside account and the service your company has signed up for | Account details, operator records, photos | Contract with your company, and our legitimate interest in providing the service to the people it has authorised |
| Reply to support requests | Account details, support messages | Legitimate interests: helping you |
| Keep Kerbside secure, prevent misuse and fix faults | Technical information, audit trail | Legitimate interests: running a secure service |
| Meet our legal obligations, such as tax and accounting records | Billing and account details | Legal obligation |
Some operator records, such as driver medical or fitness-to-drive information, can be health data. Operators are responsible for having a lawful basis to record it; we process it only on their instructions and protect it with the same controls as everything else.
Who we share it with
We share personal data only with service providers who help us run Kerbside, under contracts that require them to keep it secure and use it only on our instructions:
- Vercel: hosts this website and passes beta list sign-ups to our email provider.
- EmailOctopus: stores the beta list and sends the emails we send to it.
- Amazon Web Services: hosts the Kerbside service and stores its data.
- Google Workspace: our business email.
- Apple and Google: distribute the Kerbside apps through the App Store and Google Play, under their own privacy policies.
We may also share data with professional advisers, where the law requires it (for example, with regulators or the police), or with a buyer if Kerbside or its business is ever sold. In that case your data would continue to be protected under this policy.
International transfers
Some of our service providers may process data outside the UK. When that happens, we make sure it's protected by a recognised safeguard, such as UK adequacy regulations or contracts based on the ICO's International Data Transfer Agreement or Addendum. Contact us if you'd like details.
How long we keep it
- Beta list: until you ask us to remove you, or until Kerbside has opened and you haven't signed up within 12 months.
- Account and operator records: for as long as your company uses Kerbside. When your company closes its account, we delete or return its data within 90 days, unless the law requires us to keep something longer.
- Your own account: if you delete your account, we remove your personal details. Entries you made in your company's audit trail may be kept as part of its compliance record, because operators may be legally required to keep them.
- Technical logs: kept for a short period and then deleted automatically.
Deleting your account
You can ask us to delete your Kerbside account at any time from inside the app, or by emailing adam@kerbsidesystems.com from the address on your account. See our support page for the steps.
How we keep it safe
All data sent between your device and Kerbside is encrypted in transit. Each operator's data is kept separate from every other operator's, access is checked on our servers for every request, and changes are recorded in an audit trail. If a data breach happens that's likely to put your rights at risk, we'll tell you and the ICO as the law requires.
Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Correct anything that's wrong or incomplete.
- Delete your data, where there's no good reason to keep it.
- Object to us using your data on the basis of legitimate interests.
- Restrict how we use your data while a concern is looked into.
- Move data you gave us to another service, in a commonly used format.
- Withdraw consent at any time where we rely on it.
To use any of these rights, email adam@kerbsidesystems.com. We may ask you to confirm your identity. We'll reply within one month. There's normally no charge.
Children
Kerbside is a business service for transport operators and is not intended for anyone under 18.
Complaints
If you're unhappy with how we've handled your data, please tell us first at adam@kerbsidesystems.com and we'll try to put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.
Changes to this policy
We'll update this policy when we change how we use personal data. The date at the top shows when it last changed. If a change is significant, we'll tell account holders by email.