Privacy Policy

1. Who we are

kerbr ("we", "us", "our") operates the kerbr platform, connecting learner drivers with driving instructors. This policy explains how we collect, use, and protect your personal data when you use our website, mobile app, and related services.

2. Data we collect

Information you provide

• Account details — name, email address, phone number, date of birth
• Profile information — profile photo, driving licence details (instructors)
• Booking data — pickup addresses, lesson preferences, scheduling choices
• Payment information — processed securely through Stripe; we do not store card details
• Communications — messages sent through the platform, support enquiries

Information collected automatically

• Location data — used to calculate travel times and match you with nearby instructors
• Device and browser information — IP address, browser type, operating system
• Usage data — pages visited, features used, session duration
• Cookies and similar technologies — see our Cookie Policy for details

3. How we use your data

• To provide and improve our booking and matching services
• To calculate travel-time-based pricing and discounts
• To process payments and manage your account
• To send booking confirmations, reminders, and service updates
• To communicate marketing messages (only with your consent)
• To prevent fraud and ensure platform safety
• To comply with legal obligations

4. Legal basis for processing

We process your data under the following legal bases (UK GDPR):

• Contract — necessary to provide the services you've signed up for
• Legitimate interests — to improve our platform and prevent misuse
• Consent — for marketing communications and non-essential cookies
• Legal obligation — where required by law

5. Data sharing

We share personal data only when necessary:

• Between learners and instructors — name, pickup location, and contact details to facilitate lessons
• Payment providers — Stripe processes payments on our behalf
• Mapping services — Mapbox receives anonymised location data for travel time calculations
• Hosting and infrastructure — Vercel (hosting), Supabase (database)
• Email services — for transactional and marketing emails

We do not sell your personal data to third parties.

6. Data retention

We keep your account data for as long as your account is active. Booking records are retained for 6 years for tax and legal purposes. You can request deletion of your account and associated data at any time.

7. Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at privacy@kerbr.com.

8. Security

We use industry-standard security measures including encryption in transit (TLS), encrypted databases, and regular security reviews. Access to personal data is restricted to authorised personnel only.

9. Changes to this policy

We may update this policy from time to time. We'll notify you of significant changes via email or an in-app notice. Continued use of kerbr after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this policy or your personal data, contact us at privacy@kerbr.com.