Privacy Policy

Who is responsible for your data

Isaac Camilleri, trading as Kerb
Blk B2 Fl 3, Triq Pietro Rossel, Pembroke PBK 1561, Malta
VAT number: MT33162609
Contact: admin.kerb@gmail.com

What we collect

• Account details: your email address and name. If you sign in with Google, we receive your name, email address and profile picture from Google. We don’t use passwords.
• Orders: what you bought, prices, discounts, your country and the date. Payments are handled by Paddle (see below). We never receive your card details.
• Memberships: your plan, its status and billing dates (from Paddle), and your credit history: credits added, claimed and expired, and what you claimed.
• Teams: if you’re in a team (Agency) membership, the team’s name and your role in it. The team’s owner and admins can see your name, email address and what you’ve claimed from the team’s credits. If someone invites you to a team, we store your email address to send and check the invitation.
• Downloads: which files you download and when, plus the IP address and browser used, to protect against abuse and help with support. Downloaded files are named with a licence ID linked to your account. We’re alerted when an account downloads an unusually large number of files in a day.
• Email sign-ups: your email address, where you signed up, the consent wording you agreed to and when.
• Messages: anything you send through the contact form.
• Basic usage statistics: anonymous page-view counts, collected without cookies.

Why we use it

• To provide your account, deliver your purchases, run your membership and send order and membership emails, such as renewal reminders (to perform our contract with you).
• To keep accounting records (a legal obligation).
• To prevent fraud and abuse of downloads and forms (our legitimate interest).
• To send news and free resources, only if you’ve signed up (your consent, which you can withdraw any time).
• To understand which pages are useful, using anonymous statistics (our legitimate interest).

Paddle, our reseller

Purchases are sold by Paddle.com as Merchant of Record. Paddle collects your payment and billing details directly and processes them under its own privacy policy. Paddle shares with us what we need to deliver your order: your email address, what you bought, your country and the amounts paid.

Other services we use

These providers process data only on our instructions, to run Kerb:

• Vercel: website hosting and anonymous analytics
• Neon: database hosting
• Cloudflare: secure file storage
• Resend: sending sign-in links and order emails
• Kit: sending our newsletter, if you’ve subscribed
• Google: only if you choose “Continue with Google”

Some of these providers process data outside the European Economic Area. Where they do, they use approved safeguards such as the EU Standard Contractual Clauses. We never sell your data.

How long we keep it

• Account data: until you delete your account.
• Order and membership payment records: as long as tax and accounting law requires, even if you delete your account.
• Credit history: for as long as your account exists.
• Email list: until you unsubscribe or ask us to delete it.
• Download and security logs: up to 12 months.

Your rights

You can ask to access, correct, export or delete your personal data, or object to how we use it. You can change your name, unsubscribe, or delete your account any time in your account settings. For anything else, contact us. You also have the right to complain to a data protection authority. In Malta that’s the Information and Data Protection Commissioner (IDPC).

Cookies

We only use cookies needed for the site to work, such as keeping you signed in and remembering your cart. See our Cookie Policy.