Legal

Privacy Policy

Last updated: October 2026

This Privacy Policy explains which personal data LocalKurb collects, why it is used, who receives it and the rights of every person whose data is processed, in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

Data Controller

The data controller responsible for the personal data processed on LocalKurb is:

Name:LocalKurb

Tax ID (NIF/NIE):B12345674

Address:Calle Marino Sirera 12, 46011 Valencia, Spain

Email:admin@localkurb.com

The Data We Collect

LocalKurb collects the following personal data, depending on how a person uses the platform:

Account:Name, email address, phone number, password (stored only as a one-way hash) and preferred language.

Profile details:Details a person chooses to add to their profile, such as legal name, surnames, gender, nationality, date of birth and postal address.

Hosts, service providers, couriers and referral partners:Legal name, tax identification number, address, date of birth, VAT and tax statements and documents uploaded for compliance. These are needed to pay out earnings and to meet Spanish tax reporting obligations.

Identity verification:Hosts, service providers, couriers, referral partners (including sales agents) and, where a host requires it, guests verify their identity with Stripe Identity by photographing an identity document. No facial recognition is used. LocalKurb receives from Stripe the result of the check and the name on the document and, where Stripe provides them, the date of birth and the document or identity number. LocalKurb compares these with the legal name, date of birth and tax identification number on the account, to confirm that the person verified is the holder of the account. The date of birth and the document number are used only for this comparison and are not stored by LocalKurb, except that for service providers LocalKurb keeps the name and document number, which are compared with the tax details provided.

Payout account holder:When a host, service provider, courier or referral partner sets up a Stripe payout account, LocalKurb receives from Stripe the name of the account holder, a person or a company, and compares it with the legal name on the LocalKurb account, so that earnings are paid only to the holder of the account. LocalKurb keeps the holder's name and the result of the comparison.

When the details do not match:If the person verified or the payout account holder is not the person on the account, the check does not count as completed and no payout is made. The person concerned is informed by email, with both names, and may correct the legal name in the profile, after which the comparison runs again automatically. This pause is not a final decision: a person at LocalKurb reviews every mismatch and may approve it after checking, and the person concerned may ask for that review at any time by writing to LocalKurb. Every approval is recorded with its reason, and each time staff open the details verified by Stripe, which are read from Stripe at that moment, the view is recorded.

Bookings and orders:Reservations, orders, appointments and tickets, including dates, items, prices, delivery or pickup details and, for stays in Spain, the guests’ countries of residence.

Payments:Payments are processed by Stripe. Card details are entered directly in Stripe’s payment form; LocalKurb keeps only the card brand and the last four digits.

Messages, reviews and support:Messages between users, reviews, and support tickets with any screenshots or screen recordings a person chooses to attach.

Location:Addresses of listings, stores, pickups and deliveries. While a courier is online or delivering, the courier’s current position is recorded; only the most recent position is kept.

Technical data:IP address and browser information, for security and to keep people signed in. At sign-up, the IP address and coded (hashed) browser and device identifiers are stored to prevent abuse of the referral programme.

Data needed to create an account, complete a booking or receive payouts is required; without it that service cannot be provided. Profile details beyond these are optional.

Purposes and Legal Basis

LocalKurb processes personal data only on the following legal bases:

Performance of a contract:To create and manage accounts, process bookings, orders and payments, pay out earnings to the holder of the account and provide support.

Legal obligation:To issue invoices, keep accounting and tax records and submit the reports required by law, including the DAC7 report on sellers to the Spanish Tax Agency, which requires LocalKurb to collect and verify sellers' identity and tax details, and the activity report on short-term stays in Spain.

Legitimate interest:To verify the identity of hosts, service providers, couriers and referral partners and to confirm that the person verified and the holder of the payout account are the holder of the LocalKurb account, to prevent fraud and payments to third parties, to keep the platform secure and to handle disputes about bookings and deliveries.

Consent:To send push notifications to a device where the person has allowed them. This permission can be withdrawn at any time in the device settings.

Who Receives Personal Data

Other users:Hosts and sellers receive the details needed to fulfil a booking or order, such as the guest’s name and the booking or delivery details. Messages are seen by the people in the conversation.

Couriers and guests:A courier receives the pickup and drop-off addresses of an order they accept. During a delivery, the guest sees the courier’s current position; this ends when the delivery is completed.

Public information:Store and listing pages, and the reviews and ratings shown on them, are public.

Public authorities:The Spanish Tax Agency (Agencia Tributaria) receives the DAC7 report on sellers and other tax information required by law. The Spanish authority responsible for housing receives the activity report on short-term stays in Spain. Other authorities receive data only where the law requires it.

Service Providers

LocalKurb uses the following service providers. Each receives personal data only for the purpose stated.

Stripe (Stripe Payments Europe, Limited, Ireland):Payments, payouts to sellers and identity verification. Stripe is also an independent data controller for its own legal obligations, under the Stripe Privacy Policy.

Resend (United States):Sending emails such as confirmations, receipts and notifications.

Google Firebase (Google):Delivering push notifications to the LocalKurb app.

Geoapify (European Union):Finding addresses entered on the site.

OpenStreetMap Foundation (United Kingdom and the Netherlands):Converting listing addresses into map positions.

Google Cloud Translation (Google):Translating listing and offering descriptions into the site languages. Names and contact details are not sent.

OpenFreeMap:Map images on the site are loaded from OpenFreeMap, which receives the visitor’s IP address when a map is displayed.

OpenAI (OpenAI Ireland Ltd.):Answering questions in the help assistant on the dashboards, and finding related help articles and earlier support tickets. OpenAI does not use data sent through its API to train its models.

Transfers Outside the European Economic Area

Resend and Google are based in the United States. Transfers of personal data to them rely on the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses. Stripe Payments Europe, Limited may transfer data to Stripe, LLC in the United States under the data transfer terms of its agreement with LocalKurb. OpenAI Ireland Ltd. may transfer data to OpenAI companies outside the European Economic Area under the Standard Contractual Clauses or an adequacy decision of the European Commission.

Delivery Records

To handle claims that an order was not delivered or an address was not found, LocalKurb keeps for each delivery: the confirmation that the guest scanned the courier’s QR code (or that the courier entered the guest’s code), the time of each step, every status change and who made it, and the pickup and drop-off addresses. The courier’s moving position during a delivery is not kept after the delivery ends.

Businesses contacted by our sales team

LocalKurb's sales team may contact businesses, such as restaurants, accommodation and service providers, to offer them a listing on LocalKurb. For this, LocalKurb uses publicly available business information (name, category, address, telephone and website) from the open Overture Maps dataset, and the notes its sales agents add. The legal basis is LocalKurb's legitimate interest in offering its services to businesses (GDPR art. 6.1.f). Telephone calls are made only after checking the Lista Robinson, and commercial emails are sent only with prior consent. A business may object at any time by writing to LocalKurb or telling the agent; it is then marked "do not contact" and is not contacted again. Sales agents process this information only on LocalKurb's behalf, inside LocalKurb's system.

How Long Data Is Kept

Accounts:For as long as the account exists. Accounts whose email address is never confirmed are deleted automatically after 24 hours.

Bookings, payments, invoices and tax records:For the periods required by Spanish commercial and tax law, generally six years.

Identity verification:The document images are held by Stripe under Stripe's own retention rules. LocalKurb keeps the result of the check, the verified name, the name of the payout account holder and the result of each comparison for as long as the account exists; for service providers it also keeps the document number. The record of each review and approval is kept in LocalKurb's audit log, also after the account is deleted, as evidence of the decision.

Messages, reviews and support tickets:For as long as the account exists, unless their deletion is requested earlier and no legal obligation requires keeping them.

Security

Sensitive data, such as property access codes and the tax identification numbers stored in seller accounts, is stored encrypted, and passwords are stored only as a one-way hash.

Your Rights

Every person whose data LocalKurb processes has the right to:

Access their personal data and receive a copy.
Have inaccurate data corrected.
Have their data deleted, unless a legal obligation requires keeping it.
Have the processing restricted.
Object to processing based on legitimate interest.
Receive their data in a structured, machine-readable format.
Withdraw consent at any time, without affecting processing carried out before.

To exercise these rights, write to admin@localkurb.com. LocalKurb answers within one month.

Anyone who considers that their data has been processed unlawfully may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Cookies and Browser Storage

LocalKurb uses a cookie to keep people signed in and stores the session, the shopping cart and the language choice in the browser’s local storage. These are necessary for the site to work. LocalKurb does not use advertising or tracking cookies. The payment form is provided by Stripe and is subject to Stripe’s own privacy policy.