CabSmart Seru Ltd Customer Privacy Policy

This privacy policy explains how CabSmart Seru Ltd collects, uses, stores and shares your personal information.

Last updated: 30 August 2026

1. Contact Details

Email: seru@cabsmart.co.uk

2. What Information We Collect, Use and Why

Providing our services

We collect or use the following information to provide services:

• Names and contact details
• Account information
• Website user information, including user journeys and cookie tracking
• Payment and transaction information, including payment status, subscription or purchase details, and billing-related information handled through our payment providers

Customer accounts and guarantees

We collect or use the following information for the operation of customer accounts and guarantees:

• Names and contact details
• Account information, including registration details
• Information used for security purposes
• Marketing preferences

Crime prevention and security

We collect or use the following information to prevent, detect, investigate or prosecute crimes:

• Names and contact information
• Account information
• Information used for security purposes

Service updates and marketing

We collect or use the following information for service updates or marketing purposes:

• Names and contact details
• Marketing preferences
• Website and app user journey information

Surveys, market research and prize draws

We may collect or use the following information for surveys, market research and prize draws:

• Name and email address
• Survey responses and feedback
• Information about awareness or use of our products and services
• Prize draw entry and administration information
• Marketing preferences, where you separately choose to receive marketing
• For a selected prize draw winner only, bank details reasonably required to pay a cash prize

We use this information to carry out market research, understand drivers’ needs, improve our products and services, administer prize draws, select and contact winners, pay prizes and analyse survey results.

Taking part in a survey or prize draw does not automatically subscribe you to marketing communications. Where we ask whether you would like to receive marketing, this will be a separate optional choice.

Legal requirements

We collect or use the following information to comply with legal requirements:

• Contact information
• Payment and transaction information where required for legal, tax, accounting, fraud prevention or regulatory purposes

Queries, complaints and claims

We collect or use the following personal information for dealing with queries, complaints or claims:

• Names and contact details
• Account information

3. Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights. Your main rights are summarised below.

Your right of access – You have the right to ask us for copies of your personal information. You can also request information such as where we obtained your personal information and who we share it with. Certain exemptions may apply.

Your right to rectification – You have the right to ask us to correct personal information you think is inaccurate or complete information you think is incomplete.

Your right to erasure – You have the right to ask us to delete your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to limit how we use your personal information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer certain personal information you gave us to another organisation, or to you, in certain circumstances.

Your right to withdraw consent – Where we use consent as our lawful basis, you have the right to withdraw your consent at any time.

You also have the right to object at any time to the processing of your personal information for direct marketing purposes.

If you make a request, we must respond without undue delay and in any event within one month. To make a data protection rights request, please contact us using the details in this privacy policy.

Our lawful bases for collecting and using your data

Providing services and goods

Consent – we have permission from you after we gave you all the relevant information. You can withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you.

This may include processing payment and transaction information where necessary to provide paid services, manage subscriptions or purchases, verify payments, prevent fraud, and comply with legal or accounting obligations.

Customer accounts and guarantees

Consent – we have permission from you after giving you the relevant information.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you.

Crime prevention and security

Legal obligation – we have to collect or use your information so we can comply with the law.

Legitimate interests – we collect or use information where it is necessary for our legitimate interests or those of another person, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests are:

We collect and use personal information to ensure the security and integrity of our platform. This includes preventing unauthorised access, fraud, misuse and suspicious activity, helping us protect users and maintain a secure service.

Service updates and marketing

Consent – where required, we ask for your permission before sending promotional communications. You can withdraw consent at any time.

Legitimate interests – we may use personal information for relevant service communications and certain marketing activities where permitted by law and where our interests do not override your rights and freedoms.

Surveys, market research and prize draws

Legitimate interests – we may use information provided through surveys to understand our customers and potential customers, carry out market research and improve our products and services, where our interests do not override your rights and freedoms.

Contract – where you enter a prize draw, we may process information necessary to administer the prize draw in accordance with its Terms & Conditions. This includes validating entries, selecting and contacting a winner and arranging payment of the prize.

Consent – where we separately ask for permission to send marketing communications, we rely on your consent. You can withdraw your consent at any time.

Legal requirements

Consent – where appropriate, we may process information with your permission.

Legal obligation – we have to collect or use information where necessary to comply with the law.

Queries, complaints and claims

Consent – where appropriate, we may process information with your permission.

Legitimate interests – we may process information where necessary to respond to enquiries, resolve complaints, defend or pursue claims and maintain good customer service.

4. Where We Get Personal Information From

• Directly from you

5. How Long We Keep Information

We retain personal information for as long as necessary to provide our services and fulfil the purposes outlined in this privacy policy, including legal, accounting or reporting requirements.

Name and email address

Where used for account creation and verification, these are retained until the user deletes their account or requests removal. If a user opts out of marketing, their information may be marked as unsubscribed and retained where necessary for audit, suppression and record-keeping purposes.

Payment and transaction information

Retained for as long as necessary to process payments, manage purchases, comply with tax, accounting, fraud prevention and regulatory requirements, and resolve payment-related queries or disputes.

Analytics data

This may be managed by third-party processors such as Amazon Web Services and Google Firebase. Retention is also subject to the configuration and policies of those services.

Support queries or feedback

Retained for up to 12 months from the last communication, unless required longer for customer support, dispute resolution or legal compliance.

Survey and prize draw information

We retain identifiable survey and prize draw information only for as long as reasonably necessary to conduct the research, administer the prize draw, contact the winner, deal with any queries or disputes, and meet applicable legal or regulatory requirements. Survey results may subsequently be anonymised and used for research, analysis and product improvement purposes.

Where a cash prize is paid by bank transfer, the winner’s bank details will be retained only for as long as reasonably necessary to make and record the prize payment and meet applicable accounting, legal or regulatory requirements.

Where a participant separately consents to receive marketing, their marketing contact details and preferences may be retained until they unsubscribe, withdraw their consent or request deletion, subject to any information we need to retain to record their marketing preferences.

For more information about how long we store your personal information or the criteria we use to determine this, please contact: seru@cabsmart.co.uk

6. Who We Share Information With

We use trusted service providers to help operate our services.

7. Sharing Information Outside the UK

Where necessary, personal information may be transferred outside the UK. Where this happens, we take steps intended to ensure appropriate safeguards are in place in accordance with UK data protection law.

For further information about international transfers or applicable safeguards, please contact us using the contact details above.

• Amazon Web Services (AWS) – may process information in the United States or other locations in accordance with applicable safeguards.
• Google Firebase – may process information internationally, including in the United States, subject to applicable safeguards.
• Stripe – may process information in the United States and other countries where Stripe or its sub-processors operate.
• Zoho / ZeptoMail / Zoho Campaigns – may process information in countries where Zoho or its service providers operate.
• Microsoft – where Microsoft Forms or Microsoft 365 is used, information may be processed in accordance with Microsoft’s applicable data hosting arrangements and safeguards.

8. How to Complain

If you have concerns about our use of your personal information, please contact us using the details at the top of this privacy policy.

If you remain unhappy with how we have used your information, you can also complain to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113

Website: www.ico.org.uk/make-a-complaint

Last updated: 30 August 2026