Privacy Policy

1 Who we are

CurbCrave is a premium curbside food ordering platform operated by CURBCRAVE LTD, a company registered in England and Wales.

We are the data controller for personal data collected through the CurbCrave customer app, the CurbCrave Manager app, and the curbcrave.net website.

2 What data we collect

We collect the following categories of personal data:

Account information

• Full name
• Email address
• Phone number
• Authentication data (via email/password or Sign in with Apple)

Order information

• Items ordered and quantities
• Order total and timestamps
• Vehicle registration and colour
• Order status history

Location data

• Your approximate location when using the app (to show nearby restaurants and enable ordering)
• Your precise arrival location when you tap "I'm Outside" or when auto-arrival is triggered

Device data

• Device push notification token (for order alerts)
• App usage data

Restaurant partner data

• Business name, address, cuisine type
• Owner/manager contact details
• Opening hours and menu information
• Stripe Connect account information for payout purposes

3 How we use your data

We use your personal data to:

• Create and manage your account
• Process and fulfil your food orders
• Calculate your proximity to restaurants and enable curbside ordering
• Share your vehicle details and arrival location with the restaurant when you place an order
• Send you push notifications about your order status
• Process payments securely via Stripe
• Issue refunds where applicable
• Provide customer support
• Comply with our legal obligations
• Improve the platform and fix technical issues

4 Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance — processing your orders, managing your account, and processing payments
• Legitimate interests — improving our service, preventing fraud, and ensuring platform security
• Consent — sending push notifications (you can withdraw consent at any time in your device settings)
• Legal obligation — complying with applicable laws and regulations

5 Payment data

All payment processing is handled by Stripe. We do not store your full card details on our servers. Stripe processes payments securely in accordance with PCI-DSS standards.

We store payment-related metadata such as Stripe Payment Intent IDs, order totals, and payment status to manage orders and process refunds.

Stripe's privacy policy is available at stripe.com/gb/privacy.

6 Location data

The CurbCrave app uses your device location to:

• Show you restaurants within 5 miles
• Unlock ordering when you are within approximately 160 metres of a restaurant
• Automatically detect your arrival and notify the restaurant when you are within approximately 80 metres

You can revoke location permission at any time in your device Settings → Privacy → Location Services → CurbCrave. This will prevent ordering but you can still browse menus.

7 Push notifications

We send push notifications to update you on your order status (accepted, preparing, on the way, arrived). We also send notifications to restaurant managers when a new order is placed.

You can disable push notifications at any time in your device Settings → Notifications → CurbCrave.

8 Data sharing

We share your data only in the following circumstances:

• With the restaurant you order from — your vehicle registration, colour, order details, and arrival location are shared so staff can fulfil your order
• With Stripe — to process payments and payouts
• With Resend — to send transactional emails (order confirmations, welcome emails)
• With Google Firebase — for authentication, database storage, and push notifications (Google Cloud infrastructure)
• With law enforcement or regulators — if required by applicable law

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

9 Data retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data — retained while your account is active and for 2 years after deletion
• Order history — retained for 7 years for financial record-keeping purposes
• Location data — arrival coordinates are retained as part of the order record for 7 years
• Device tokens — invalidated when you log out or uninstall the app

10 Your rights

Under UK GDPR you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data in certain circumstances
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent for push notifications at any time

To exercise any of these rights, contact us at cc@curbcrave.net. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11 Cookies

The CurbCrave website (curbcrave.net) uses essential cookies for authentication and session management. We do not use advertising or tracking cookies.

The CurbCrave iOS apps do not use cookies.

12 Children

CurbCrave is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at cc@curbcrave.net and we will delete it promptly.

13 Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice in the app. The "Last updated" date at the top of this page will always reflect the most recent version.

Continued use of CurbCrave after changes are posted constitutes your acceptance of the updated policy.

14 Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: