Privacy policy
The short version. We only collect what we need to build your website, run your review stand and take payment. We never sell your details, and we don't use advertising trackers on this site.
Questions about your data? Email hello@kerbup.com.
1. Who we are
Kerbup is a trading name of a sole trader based in Harrow, North West London. We build websites and supply Google review stands for independent local businesses. In this policy, "we" and "us" means Kerbup, and "you" means anyone who visits kerbup.com, contacts us, or becomes a customer.
We are the "controller" of the personal data described here, which means we decide how it's used and we're responsible for looking after it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Contact: hello@kerbup.com, or WhatsApp on +44 7442 801099.
2. What we collect
When you contact us
If you use the form on our site, email us or message us on WhatsApp, we receive what you send: usually your name, business name, phone number, email address, area and anything you write in your message.
When you become a customer
- Contact details for you and your business.
- Content for your website: your logo, photos, videos, menus, prices, opening hours, booking details and wording. Some of this may include photos of you or your staff, if you choose to send them.
- Notes about what you've asked for and the work we've done.
- Payment records: what you've paid, when, and for what.
When you pay
Payments are handled by Stripe. Your card or bank details are entered on Stripe's secure page and go straight to Stripe; we never see or store your full card number or bank account details. Stripe tells us your name, email, phone number, business name, the amount and whether the payment worked.
When you visit kerbup.com
Our website host keeps basic technical logs (such as your IP address, browser type and the pages requested) to keep the site running and protect it from attacks. We don't use Google Analytics, advertising pixels or tracking cookies.
3. Why we use it
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry and send you a free mock-up you asked for | Taking steps at your request before a contract |
| Build, host and update your website; set up your review stand | Performing our contract with you |
| Take payments, send receipts, chase missed payments | Performing our contract with you |
| Keep financial records for tax | Legal obligation |
| Keep the website secure and working | Legitimate interests |
| Show your website in our examples or portfolio | Only with your permission, which you can withdraw at any time |
We will not send you marketing messages unless you've agreed to them. We don't make automated decisions about you.
4. Who we share it with
We never sell your data. We only share it with services we need to run the business:
- Stripe: processes payments.
- Cloudflare: hosts kerbup.com and the websites we build, and protects them from attacks.
- Google: email (Gmail), and Google Fonts, which loads the typefaces on this site and our example pages. If you press "Show the map" on an example page, Google Maps loads and Google may set its own cookies. If we manage your Google Business Profile, we do it inside Google's own tools.
- WhatsApp (Meta): if you message us there.
- Domain registrar: when we register your web address, your details go to the registrar, because the domain is registered in your name.
- Accountant or HMRC: when needed for tax.
Some of these companies may store data outside the UK. Where they do, they use legal safeguards approved under UK law, such as the UK International Data Transfer Addendum or adequacy regulations.
We may also share information if the law requires it.
5. How long we keep it
- Enquiries that don't go ahead: up to 12 months, then deleted.
- Customer details and website content: for as long as you're a customer, then up to 12 months after you leave, in case you come back or need a copy.
- Payment and tax records: as long as HMRC requires, currently at least 5 years after the 31 January Self Assessment deadline for the tax year they relate to.
6. Keeping it safe
We keep customer records on password-protected devices and accounts with two-step verification turned on. Only Kerbup has access. If something ever went wrong that put your data at risk, we would tell you and, where required, the Information Commissioner's Office.
7. Cookies and storage
kerbup.com doesn't use tracking or advertising cookies, so there's no cookie banner. The example websites remember which style you last looked at (Basic, Premium, Bold or Heritage) using your browser's local storage. This stays on your device, is never sent to us, and you can clear it in your browser settings.
Maps on the example pages don't load until you press "Show the map". Until then, nothing is sent to Google Maps.
8. Your rights
Under UK law you have the right to:
- get a copy of the personal data we hold about you;
- ask us to correct anything that's wrong;
- ask us to delete your data (unless we have to keep it, for example for tax);
- object to or ask us to limit how we use it;
- ask for your data in a format you can take elsewhere;
- withdraw permission you've given, such as for us to show your website as an example.
To use any of these rights, email hello@kerbup.com. We'll reply within one month and won't charge you.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
9. Changes to this policy
If we change this policy, we'll update the date at the top. If the change affects existing customers in a significant way, we'll let you know directly.