Privacy Policy
Last updated: 7 October 2026. This page explains what personal data CurbCast collects, why, how long we keep it, and the rights you have under UK GDPR.
Who we are
CurbCast is a mobile out-of-home advertising network operating in Norwich, UK. "We", "us", and "our" in this policy refer to CURBCAST LTD, a company registered in England and Wales (company number 17382364), registered office 110a Victoria Road, Ruislip, HA4 0AL, the data controller. Our contact email for data questions is hello@curbcast.co.uk.
What data we collect
When you submit the booking form on /book, we collect:
- Your full name
- Your business name
- Your email address
- Your phone number (optional)
- The campaign details you configured — dates, number of riders, duration, any uploaded ad creative
- Technical metadata your browser sends automatically (IP address, user-agent) — used for spam protection and rate limiting only
If you separately contact us via WhatsApp, email, or phone, we hold the message thread and your phone number / email as part of that conversation.
If you allow our analytics cookie, we also record how the public website is used: the pages you visit, the choices you make in the booking form (package, duration, slots, and whether you take up an offer), and clicks on buttons such as “Continue to payment”. We also note the type of device (phone, tablet or computer) and, if you followed a link from another website, that website’s address. These records carry a random ID, not your name, email or anything you type, and we do not store your IP address or browser details with them. See Cookies and analytics.
Why we use it
- To confirm your booking and arrange payment
- To run your campaign — schedule the ad onto our fleet, send you reports, contact you about live-campaign issues
- To answer questions you ask us
- To protect the form against spam and abuse
- If you allow it, to understand how the website is used, so we can improve it
Our legal basis under UK GDPR is (a) contract — we need the data to provide the service you've asked for; (b) legitimate interest — for fraud and spam protection; and (c) consent — for website analytics, which you can withdraw at any time. We do not sell your data or share it with third parties for advertising.
How long we keep it
We keep your booking details for as long as your campaign is active, plus six years afterwards to comply with HMRC record-keeping rules. After that, we delete or anonymise the personal fields (name, email, phone) and retain only anonymised campaign performance data.
Unsubmitted booking sessions are not stored at all — the form holds data in your browser until you submit, and we never see partial submissions. (If you allow analytics, we see which options were chosen, as described above, never what you typed.)
Website analytics records are deleted after 13 months.
Your rights
Under UK GDPR you can ask us to:
- Confirm what personal data we hold about you, and send you a copy
- Correct anything that's wrong
- Delete your data ("right to be forgotten") where we don't have an overriding legal obligation to keep it
- Object to or restrict our use of it
- Withdraw consent you've previously given
Email hello@curbcast.co.uk for any of the above. We aim to respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data.
Contact
CurbCast — Norwich, UK.
Email: hello@curbcast.co.uk
Phone: 07836 295351