Login
Sign UpBook Your Slot
Back to curbcast.co.uk

Privacy Policy

Last updated: 7 October 2026. This page explains what personal data CurbCast collects, why, how long we keep it, and the rights you have under UK GDPR.

Who we are

CurbCast is a mobile out-of-home advertising network operating in Norwich, UK. "We", "us", and "our" in this policy refer to CURBCAST LTD, a company registered in England and Wales (company number 17382364), registered office 110a Victoria Road, Ruislip, HA4 0AL, the data controller. Our contact email for data questions is hello@curbcast.co.uk.

What data we collect

When you submit the booking form on /book, we collect:

  • Your full name
  • Your business name
  • Your email address
  • Your phone number (optional)
  • The campaign details you configured — dates, number of riders, duration, any uploaded ad creative
  • Technical metadata your browser sends automatically (IP address, user-agent) — used for spam protection and rate limiting only

If you separately contact us via WhatsApp, email, or phone, we hold the message thread and your phone number / email as part of that conversation.

If you allow our analytics cookie, we also record how the public website is used: the pages you visit, the choices you make in the booking form (package, duration, slots, and whether you take up an offer), and clicks on buttons such as “Continue to payment”. We also note the type of device (phone, tablet or computer) and, if you followed a link from another website, that website’s address. These records carry a random ID, not your name, email or anything you type, and we do not store your IP address or browser details with them. See Cookies and analytics.

Why we use it

  • To confirm your booking and arrange payment
  • To run your campaign — schedule the ad onto our fleet, send you reports, contact you about live-campaign issues
  • To answer questions you ask us
  • To protect the form against spam and abuse
  • If you allow it, to understand how the website is used, so we can improve it

Our legal basis under UK GDPR is (a) contract — we need the data to provide the service you've asked for; (b) legitimate interest — for fraud and spam protection; and (c) consent — for website analytics, which you can withdraw at any time. We do not sell your data or share it with third parties for advertising.

How long we keep it

We keep your booking details for as long as your campaign is active, plus six years afterwards to comply with HMRC record-keeping rules. After that, we delete or anonymise the personal fields (name, email, phone) and retain only anonymised campaign performance data.

Unsubmitted booking sessions are not stored at all — the form holds data in your browser until you submit, and we never see partial submissions. (If you allow analytics, we see which options were chosen, as described above, never what you typed.)

Website analytics records are deleted after 13 months.

Cookies and analytics

Essential cookies. Logged-in advertisers and riders are issued a session cookie that keeps them signed into their dashboard, and our payment provider, Stripe, sets cookies during checkout to secure the payment. These are strictly necessary and need no consent.

Our analytics cookie, only if you allow it. With your consent we set one first-party cookie, cc_vid, holding a random ID, for up to 12 months, and keep a random session ID in your browser’s session storage while the tab is open, so we can count visits and see how the website is used (described under What data we collect). The records go to our own server only. We use no third-party analytics, tracking or advertising cookies, and we never share this data or use it for advertising. Analytics runs only on the public website, never in the advertiser, rider or admin dashboards.

You choose in the banner when you first visit, and we ask again after a year. You can change your mind here at any time: turning analytics off deletes the cookie and the session ID straight away and stops any further records.

Your rights

Under UK GDPR you can ask us to:

  • Confirm what personal data we hold about you, and send you a copy
  • Correct anything that's wrong
  • Delete your data ("right to be forgotten") where we don't have an overriding legal obligation to keep it
  • Object to or restrict our use of it
  • Withdraw consent you've previously given

Email hello@curbcast.co.uk for any of the above. We aim to respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data.

Contact

CurbCast — Norwich, UK.
Email: hello@curbcast.co.uk
Phone: 07836 295351