Privacy Notice

Who we are

KerbGrub (kerbgrub.com) is a business based in the United Kingdom. For the personal data described here, KerbGrub is the data controller. Contact: hello@kerbgrub.com.

What we collect and why

• Account data (email address, sign-in credentials or Google account identifier) — to create and secure your trader account. Legal basis: performance of our contract with you.
• Listing data (van name, type, tagline, pitch description, town, menu, prices, opening times, contact details you add) — published on the public site so customers can find you. Legal basis: contract.
• Location data — traders: your device's GPS position, but only while you switch "Go live" on, so your pitch shows on the map. Visitors: the town you type in, or your approximate coordinates if you use "Locate me", used in your browser to sort results by distance and not stored on our servers. Legal basis: consent, which you can withdraw at any time by switching tracking off or declining the browser prompt.
• Support messages — to answer your questions. Legal basis: legitimate interests in running the service.
• Technical data (IP address, device and browser information, basic usage logs) — for security, fraud prevention and to fix problems. Legal basis: legitimate interests.
• Purchase records (subscription, boost and event-page status, plus identifiers from our payment provider) — to give you access to what you paid for and to keep accounting records. Legal basis: contract and legal obligation. Card details are never seen or stored by us.

Who we share it with

• Stripe, our payment processor, for payments, subscription management, invoicing and tax compliance.
• Hosting and infrastructure providers who run the website, database and authentication on our behalf under contract.
• Professional advisers (accounting, legal) where needed.
• Authorities where we are required to disclose by law.

Anything you publish on your listing or van page is public by design and visible to anyone, including search engines.

International transfers

Some of our providers process data outside the UK and EEA. Where that happens we rely on UK/EU adequacy decisions or standard contractual clauses with the appropriate safeguards.

How long we keep it

Account and listing data are kept while your account is open and for up to 12 months afterwards, then deleted or anonymised. Live GPS positions are only kept as your current pitch and are overwritten as you move. Transaction records are kept for 6 years to meet UK tax and accounting requirements.

Your rights

Under UK GDPR you can ask us to give you access to your data, correct it, delete it, restrict or object to its use, or provide it in a portable format, and you can withdraw consent at any time. Email hello@kerbgrub.com and we'll respond within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database permissions so traders can only reach their own records.

Cookies and similar storage

We only use storage that is essential to run the site: keeping you signed in, remembering your chosen location for the current session, and supporting secure checkout with Stripe. We do not use advertising or cross-site tracking cookies. You can clear this storage at any time in your browser settings, though signing in may then stop working.

See also our Terms & Conditions and Refund Policy.