You own the data we collect from you. You have the rights to have your data: Deleted, Rectified and Returned.

The personal data we collect concerns: Name, telephone number, email address, location, IP address. When we collect it and how we process it is described below. We limit the data we collect to a minimum and only collect data that has a specific purpose. The main purposes are:

• Providing better customer support.

• Improving our service in terms of our apps and in how our Kiddy Cars are distributed and maintained.

• Kiddy Cars is hosted in the UK but also use third party data processors which are located both in the US. An example of that is Stripe who facilitate our customer payments. We have Data Processor Agreements (DPA) with all the external data processors we use. That ensures that the data processors also live up to GDPR regardless of where they run their business.

• We collect your consent to process your data when you sign up.

• We are obliged to notify you in case we have any breach of your data.

GDPR is a comprehensive data protection law in the UK/EU, which replaces the many different national legislations currently in place. It strengthens the protection of personal data and gives UK residents a greater say in how, why, when and where their personal data is processed. Any organisation that works with data of UK residents has obligations to protect the data regardless where it is stored and whether the processor is a third party data processor. We fully understand this, so we collect as little personal data as possible and safeguard it as well as we can.

More information on GDPR is available here: https://ec.europa.eu/info/law/law-topic/data-protection_en

The GDPR applies to all organisations operating in the UK/EU that process personal data or processing personal data from EU.

GDPR applies to all personal data. The concept of personal data covers everything that can be used to identify a person in a larger group. That includes name, address, email, ip address, cookies, location, unique identifiers, etc.

When you register

• We collect email addresses for the account system. Every account is unique due to the uniqueness of the email address, which is used to identify you as a user, log you in and enable you to rent Kiddy Cars using our system.

• We collect names so that we know what to call you when we interact and quicker identification on our back-office system rather than just a list of telephone numbers.

• We collect phone numbers to contact you if needed. We use the country code of your phone number to estimate your country of residence.

• We collect IP addresses and location information in order to detect the misuse of the system, combat abuse and for logging purposes.

• We do not collect your payment information as this is sent directly to our payment provider (Stripe) in encrypted form. Kiddy Cars Ltd is a PCI compliant service

When you make a rental and during your rental in the app:

• We collect the Parking Station location and timestamp of some actions you took using the Kiddy Cars App. They include some page views in the app, some actions in the app, parking bay locks and unlocks during your rentals, errors among others. We aggregate the information, analyse the resulting data to drive our strategic and operations decisions such as where to place parking stations or frequency of engineering visits based on usage or detect faults to take care of our Kiddy Cars. We also use the data to optimise our apps.

• Identifying the location of the hire is collected by the scanning of the unique QR code read from the Kiddy Car. Each Bay has an RFiD reader which reads the unique tag of each car which together identify which Station any car is parked at, the Parking Station does not use your location services to pinpoint your location.

• We never sell or profit directly from any of your personal data.

When you’re on www.kiddycars.com

• We use Google Analytics to track user behaviour on www.kiddycars.com. This helps us understand how our website visitors get to www.kiddycars.com, and what webpages are most relevant for them. Google Analytics sets web browser cookies to identify users returning to the website, optimise performance, and to provide information about our Google AdWords campaigns you have interacted with.

• You can read more about cookie usage here: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

• We have a data processing agreement with Google Analytics which obliges its data processing practise to follow GDPR.

• We set web browser cookies on www.kiddycars.com to improve the user experience on the website. This includes:

• Identification of the visitor by a translation plugin to remember what language you prefer to view the website in.

• Serving assets e.g. images from a server cache to make the website load faster.

• Identification of the visitor by a security plugin to prevent attacks on the web.

• We share conversion events with Facebook Ads and Snapchat Ads

• You can delete any cookies set on your web browser by www.kiddycars.com in your browser settings.

• We collect user information sent through contact forms on www.kiddycars.com. This information is stored on the website for 90 days and then deleted. However, the information is forwarded securely to internal email addresses and customer support systems.

We store all user data in our UK data centre. Additionally, we use some data processors which may be hosted outside of EU mainly in the US. You can see more details in the table below.

3rd parties with whom personal information may be shared…

Stripe

Payment portal/facility – Stripe hold all payment information.

Country: US

Microsoft Azure

Mobile App Platform – hold customers name & phone number for us to be able to facilitate and process hires.

Country: UK

Google Playstore

Downloading App Portal – playstore does not hold information but we do draw analytics such as number of hits, etc.

Country: UK

Apple App Store

Downloading App Portal – Apple do not hold information but we do draw analytics such as number of hits, etc.

Country: UK

Access your data. You can contact us at info@kiddycars.com and ask for a copy of your personal data.

• Update your data. You can contact us at info@kiddycars.com and ask us to update your personal data such as phone number, name and email address.

• Delete your data (“The right to be forgotten”). You can achieve that by contacting us at info@kiddycars.com. We do not keep your personal information after your account is deleted. We will also ensure that your personal data is removed from third party services. Removal of data will be done as soon as reasonably practicable and within a maximum period of 180 days, unless UK/EU or Member State law requires storage.

We kindly ask you not to share any personal information when contacting us on social media platforms like Facebook, Instagram and Twitter.

Kiddy Cars Ltd has internal policies in place that prohibits employees from sharing and personal user data in internal communication tool.

We reserve the right to make changes to this policy at any time by giving notice on this page. It is strongly recommended to check this page often, referring to the date of the last modification listed at the top. If you object to any of the changes to this policy, you must cease using this service and can request removal of the personal data.

If you have any concern about your personal data, please contact us info@kiddycars.com.

Last updated 01-10-2021