This privacy policy will help you understand what information the KERB Service collects, how that information is used, and what choices you have about the information we collect. Any reference to ‘The Company’ in this policy, relates to KERB Holdings Company Pty Ltd and its subsidiary companies (‘The Company’). Any reference to the ‘KERB Service’ or ‘we’, ‘our’ or ‘The KERB Service’ relates to the publicly available KERB iOS and Android applications, as well as the KERB website at www.kerb.app. The KERB Service is available for use via a web browser or applications specific to your desktop or mobile device.
Information the KERB Service collects and receives
The KERB Service collects different types of information. Some of this information is personally identifiable and some is non-identifying or aggregated. Here are the types of information the KERB Service collects or receives:
- Information about your parking site(s). When an organization or individual lists a parking bay or car park (collectively referred to as a “parking site”) on the KERB Service, we retain the information related to that parking site. This may include, but is not limited to, textual descriptions, photos and location details.
- Information about your vehicle(s). At some parking sites, the KERB Service uses automatic license plate recognition (ALPR) cameras to register your vehicle’s arrival at – or departure from – a parking site. Specifically, this license plate information is stored on a secure Internet server, or may be stored temporarily on an ALPR camera’s whitelist in order to open a parking site’s boom barrier or other security gate.
- Account and profile information. At some parking sites listed on the KERB Service, you will not be required to submit any personally identifiable information (“PII”) in order to use KERB. However, at certain parking sites, if stipulated by the parking site owner(s), you may be required to register a KERB account via the KERB Service. In such cases, the minimum information that we require of you includes your name, email address and mobile phone number. At certain parking sites, the parking site owner may stipulate that you provide additional information. This information might include, but is not limited to: vehicle license plate, driver’s licence, or vehicle insurance documentation.
- Billing information and bank account details. If you are a company or organisation wishing to list a parking site on the KERB Service, you will need to sign up for a merchant account via a payments platform that KERB nominates in your country. Payments providers include, but are not limited to, Stripe, WindCave, Fiuu, M-Pesa. There is no cost to sign up for a merchant account. You will need to submit certain information about your organisation to the payments platform, including your bank account details. KERB is not privy to this information. In some cases - eg, individuals listing residential or private parking spaces on the KERB Service, payments will be processed through KERB’s merchant account with the relevant payments platform. In such cases, we will required you to share bank account details so that we can transfer back to you any parking revenue collected through the KERB Service, minus any transaction and commission fees. These bank account details are secured on a secure server. If you use the KERB Service to pay for parking, we will require you to provide your credit card details or eWallet details. These details will be securely stored on the relevant payment Service, such as Stripe, WindCave, Fiuu or M-Pesa. The KERB Service does not store any credit card or eWallet details associated with any of its Parkers or Partners.
- Log data. When you use the KERB Service, our servers automatically record information, including information that your browser sends whenever you visit a website or your mobile app sends when you’re using it. This log data may include your Internet Protocol address, the address of the web page you visited before coming to the KERB Service, your browser type and settings, the date and time of your request, information about your browser configuration and plug-ins, language preferences, and cookie data. Log data does not contain message content and is not routinely deleted.
- Device information. In addition to log data, the KERB Service may also collect information about the device you are using. This log data might including the type of device, what operating system you’re using, device settings, unique device identifiers, and crash data. Whether we collect some or all of this information will be dictated by type of device you are using and the device’s settings.
- Geo-location information. In order for the KERB Service to function properly, KERB automatically detects the GPS location of any mobile device accessing its Service. In addition, WiFi and IP addresses received from your web browser or mobile device may be used to determine approximate location.
- Usage information. We collect information about how you interact with the KERB Service. Examples include, but are not limited to: frequency of use, session duration, and usage associated with specific days of the week.
- Communication content that you send and receive within the KERB platform. This information includes:
- The message content itself. This content can include text messages and emails, pictures, files and video among other types of files.
- When messages or files were sent and by whom, when or if they were seen by you, and where you received them (in a channel or direct message, for example).
- Information from partners or other 3rd parties. The KERB Service may receive information from partners or others that we could use to make our own information better or more useful. This might be aggregate level information about which IP addresses go with which zip codes or it might be more specific information about how well an online marketing or email campaign performed.
Cookie Policy
The KERB Service uses cookies, or similar technologies like single-pixel gifs and web beacons, to record log data. We use both session-based and persistent cookies. Cookies are small text files sent by us to your computer or phone and from your computer or phone to us, each time you visit a KERB or open the KERB iOS or Android app. They are unique to your KERB account or to your browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire.
Some cookies are associated with your KERB account and personal information, in order to remember that you are logged in and which parts of the KERB Service you are logged into. Other cookies are not tied to your KERB account but are unique and allow us to do site analytics and customization, among other similar things. If you access KERB through your browser, you can manage your cookie settings from your browser, but if you disable all cookies you may experience difficulty using the KERB Service.
The Company sets and accesses its own cookies on its various domains. In addition, we use 3rd party services with cookies, such as Google Analytics for website analytics.
How we use your information
We use your information for the following:
- To deliver KERB’s Service. We use information you provide to authenticate you and to deliver message content to you and from you.
- To understand and improve the KERB platform. To make the KERB Service better we need to understand how users are interacting with it. We collect usage data and may use it in different ways to improve KERB’s products, or for research purposes. This policy is not intended to place any limits on what we do with usage data that is aggregated or de-identified so it is no longer tied to a unique KERB Service user.
- To communicate with you in the following ways:
- Solving your problems and responding to your requests. If you contact us with a problem or question, we may use any information we have stored against your profile, in order to respond to that request and address your problems or concerns.
- In-product communications. We may use the information you provide to contact you through the KERB Service or via email, phone, SMS or in-app message.
- Email messages. We may send you service and administrative emails, particularly as they relate to a parking bay booking or transaction. We may also contact you to inform you about changes to services offered through the KERB Service, and important service-related notices, such as changes to this policy or security and fraud notices. These messages are considered part of the Service and you may not opt-out of them. In addition, we may send you certain marketing-related messages, from which you can opt out at any time.
Sharing and Disclosure of your Information
There are times when communications and related content and other user information may be shared by the Company. This section discusses only how the Company may share user information.
The Company may share information:
- With consent, to comply with legal process, or to protect the Company and users of the KERB Service.
- When we have your consent or if we believe that disclosure is reasonably necessary to comply with a law, regulation or legal request; to protect the safety, rights, or property of the public, any person, or the Company; or to detect, prevent, or otherwise address fraud, security or technical issues.
- If we receive a law enforcement or other third party request for information, we will provide prior notice to the subject of the request, where we are legally permitted to do so.
- With third party service providers and agents. We may employ third party companies or individuals to process personal information on our behalf based on our instructions and in compliance with this Privacy Policy. For example, we may share data with a security consultant to help us get better at preventing unauthorized access or with an email vendor to send messages on our behalf. We may also share data with hosting providers, payment processors, marketing vendors, and other consultants who work on our behalf.
Security
The Company takes reasonable steps to protect information you provide to us from loss, mis-use, or unauthorized access or disclosure. These steps take into account the sensitivity of the information we collect, process and store and the current state of technology. When you enter sensitive information (such as sign-in credentials) we encrypt the transmission of that information using secure socket layer technology (SSL). We follow generally accepted standards such as SOC-2 and ISO 20071 to protect the personal data submitted to us, both during transmission and once we receive it. However, no electronic or email transmission or digital storage mechanism is ever fully secure or error free.
‘Right to be Forgotten’ and how to delete your personal data from the KERB Service
You have control over your account settings, such as your account information and marketing email notifications. However, unless you completely unsubscribe from KERB’s service, there is some information on you that the Company needs to retain, in order to deliver KERB’s service. This information includes, but is not limited to, your name, email, mobile phone number and vehicle registration number. If you have any questions about reviewing or modifying your account information, you can contact us directly at support@kerb.app.
In addition, you have the right to request the deletion of your complete personal information by contacting us via email at support@kerb.app. Your personal data and account will be deleted within 48 hours of your deletion request.
Children's information
The KERB Service is not directed to children under 16. If you learn that anyone under 16 years of age has submitted their personal information through the KERB Service, please contact us via the details below.
Changes to this Privacy Policy
We may change this Privacy Policy from time to time, in which case we will post any changes on this page. If you continue to use the KERB Service after those changes are in effect, you agree to the revised policy. If the changes are significant, we may provide more prominent notice or seek your consent to the new policy.
If you do not agree with any aspects of any of the Privacy Policy outlined on this page, you must not use the KERB service. For the avoidance of doubt, your use of the KERB Service constitutes explicit acceptance of this Privacy Policy.
Contacting KERB
Please feel free to contact us if you have any questions about this Privacy Policy or practices. You may contact the Company at support@kerb.app or at the mailing address below:
KERB Holdings Company Pty Ltd
16 Cocupara Avenue,
Lindfield, NSW 2070
Australia
www.kerb.app
