KERNL LIMITED (“Crewdax”, “we”, “us”) is the controller of personal data processed through crewdax.com, the Crewdax dashboard and related features. We are registered in England and Wales under company number 16974545. Contact: contact@crewdax.com.
1. Data we collect
We collect account details, authentication records, business contact and listing information, selected professions and services, billing identifiers and subscription status, messages sent through forms, support correspondence, uploaded images, service usage, interaction and device information, and security logs. If a business submits public Google review links, we may collect public reviewer names, avatars, ratings, relative dates, comments, owner responses and source links.
2. How we use data and our lawful bases
We process account, listing and billing data to perform our contract; security and service analytics for our legitimate interests in operating a safe and reliable service; legal records to comply with legal obligations; and optional communications with consent where required. We do not sell, rent, share, or disclose consumers’ personal information, including mobile phone numbers, to third parties or affiliates for marketing or lead-generation purposes.
3. Public listings
The professions, selected services, and other details included in published business profiles are publicly accessible and may be indexed by search engines. The account owner controls the listing and can edit or remove it. Contact requests are delivered to the listed business, which then becomes responsible for how it handles the requester’s information.
4. Data obtained from public sources
Selected review data is obtained from public Google URLs submitted by the listed business. We identify the source as Google and retain the source link. Review import uses automated extraction and may preserve the relative date label rather than calculate an exact date.
5. Service providers
We use service providers including Vercel (hosting), Supabase (database, authentication and storage), Stripe (billing), Resend (email), PostHog and Microsoft Clarity (product analytics and user experience insights), Mapbox (map display), Geoapify and OpenStreetMap contributors (address search and geocoding), Jina AI (web-to-text conversion for submitted public review URLs) and Google services. These providers process information under their own terms and our applicable agreements.
6. International transfers
Our providers may process data outside the United Kingdom. Where required, we rely on adequacy regulations or approved contractual safeguards. Contact us to request more information about applicable safeguards.
7. Retention
We keep account and listing data while the account is active. Deleted listing content is removed from active systems promptly and from backups according to normal rotation. Contact requests are normally retained for up to 24 months, security logs for up to 12 months, and financial records for the period required by applicable law.
8. Cookies and analytics
Crewdax uses necessary cookies for authentication, security and session continuity. PostHog and Microsoft Clarity may use cookies or similar browser storage to help us understand page visits, interactions, device information and user experience. Third-party checkout and map services may also set their own storage when opened. We do not use this information to sell personal data.
9. Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it. Contact contact@crewdax.com. We may need to verify your identity.
10. Complaints
You can complain to the UK Information Commissioner’s Office at ico.org.uk, although we would appreciate the opportunity to address your concern first.
11. Updates
We may update this notice as Crewdax changes. Material changes will be highlighted through the service or by email where appropriate.