Kendall Go - Privacy Policy

Last Updated: September 2026

Kendall Cars Limited (“Kendall Cars”, “Kendall Go”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and share your personal information when you register for or use the Kendall Go car-sharing service, including through the Kendall Go website and mobile application.

1. Who We Are

Kendall Go is a car-sharing service operated by Kendall Cars Limited.

Kendall Cars Limited is the data controller responsible for determining how and why your personal data is processed in connection with the Kendall Go service.

Kendall Cars Limited
Company Number: 02114744
Registered Office: 34 Aldershot Road
Guildford
Surrey
GU2 8AF

If you have any questions about this Privacy Policy or how we use your personal data, you can contact us using the details provided in Section 14.

2. Our Technology Provider

To provide the Kendall Go service and mobile application, we use the shared-mobility platform provided by Wunder Mobility Austria GmbH (“Wunder Mobility”), based in Austria.

Wunder Mobility acts as a data processor on behalf of Kendall Cars Limited and processes personal data in accordance with our instructions and our Data Processing Agreement.

Wunder Mobility processes personal data as necessary to enable customers to use Kendall Go and to support the management and operation of the service.

The information processed through the Wunder Mobility platform may include account and contact information, payment information, identification and driving licence information, vehicle and user GPS data and, where applicable, mobile application usage and device information.

Wunder Mobility also uses authorised sub-processors to provide certain functions within its platform. The following services are relevant to the Kendall Go mobile application:

Amplitude – used for product and usage analytics to help us understand how customers interact with the Kendall Go application and improve the service and user experience.

Where you have consented to analytics, this may include usage and event data, such as interactions with the application, screens viewed and timestamps, together with device information and a pseudonymous user identifier.

Amplitude analytics are optional and are only activated where you have provided consent through the application’s consent management system.

Wunder Mobility’s DPA identifies Amplitude, Inc. as the provider and states that the data is hosted in the EU using AWS Frankfurt, with additional safeguards specified for any residual access from the United States.

Usercentrics – used to provide the consent management system within the Kendall Go mobile application and to manage your privacy and consent choices.

Wunder Mobility’s DPA identifies Usercentrics GmbH, based in Germany, as the provider of the consent management platform.

Sentry – used for essential crash and error reporting so that technical problems with the Kendall Go application can be identified, diagnosed and resolved.

Sentry may receive technical information relating to an error together with a pseudonymous customer identifier. It does not receive the customer’s name or contact details for this purpose.

This processing helps us maintain the security, reliability and technical operation of the Kendall Go application.

Wunder Mobility’s DPA identifies Functional Software, Inc. d/b/a Sentry as providing error analysis.

3. Information We Collect

When you register for and use Kendall Go, we may collect and process the following categories of personal information:

• Identification Information:
  Your name, date of birth, driving licence information, driving licence images and other information required to verify your identity and eligibility to drive.
• Address Information:
  Your residential address and information or documentation used to verify your address where required.
• Contact Information:
  Your email address and telephone number.
• Customer Photograph:
  A photograph of you may be collected as part of our identity and customer-verification procedures.
• Account and Booking Information:
  Information relating to your Kendall Go membership, bookings, rentals, vehicle usage, charges and account activity.
• Payment Information:
  Information necessary to process payments, deposits, charges and refunds associated with your Kendall Go account and rentals. Payment information may be processed by authorised payment service providers.
• Driving Licence and Verification Information:
  Information required to verify your identity, driving licence and eligibility to use Kendall Go.
• Vehicle and Telematics Information:
  Information generated when you use a Kendall Go vehicle, which may include the vehicle’s GPS location, mileage and vehicle-status information.
• Location Information:
  Where required to provide Kendall Go functionality, we may process GPS or location information relating to the vehicle and/or your device. For example, this may be necessary to help you locate and access a vehicle or to manage your rental.
• App and Device Information:
  Technical information associated with your use of the Kendall Go application, which may include your device model, operating system, application version and technical identifiers.
• Analytics Information:
  Where you have consented to optional analytics, we may collect information about how you interact with the Kendall Go application. This may include screens viewed, interactions within the application, timestamps, device information and a pseudonymous user identifier.
• Customer Service Information:
  Information you provide when contacting us, including enquiries, complaints, feedback and correspondence.
  Wunder Mobility’s DPA confirms that the information processed through its platform may include IP addresses, request information, email address, payment information, identification and driving licence data, GPS data, payment tokens, invoices and optional app usage, event and device information.

4. How We Use Your Information

We use your personal information where necessary to provide and manage Kendall Go. This may include:

• creating, administering and managing your Kendall Go account;
• verifying your identity, driving licence and eligibility to use the service;
• managing bookings and rentals;
• providing access to Kendall Go vehicles;
• processing payments, deposits, refunds and other charges;
• providing vehicle and location-based functionality;
• communicating with you regarding your account, bookings and rentals;
• providing customer support and responding to enquiries, complaints or feedback;
• monitoring and managing the appropriate use of Kendall Go vehicles;
• preventing, detecting and investigating fraud, misuse and security incidents;
• establishing, exercising or defending legal claims;
• complying with our legal and regulatory obligations;
• maintaining the security, reliability and technical operation of the Kendall Go service and application;
• identifying, diagnosing and resolving application crashes, errors and other technical problems; and
• where you have consented, analysing how customers interact with the Kendall Go application so that we can understand usage and improve the service and user experience.

Wunder Mobility’s DPA states that personal data is processed to enable end users to use the service and, where activated, to analyse use of the mobile application to provide usage insights.

5. Our Lawful Bases for Processing

Under UK data-protection law, we must have a lawful basis for processing your personal information.

The lawful basis we rely upon depends on the information involved and the reason for processing it.

• Performance of a Contract
  We process personal information where it is necessary to enter into or perform our contract with you. This includes creating and managing your account, administering bookings and rentals, processing relevant charges and providing the Kendall Go service.
• Legal Obligation
  We may process personal information where necessary to comply with our legal or regulatory obligations.
• Legitimate Interests
  We may process personal information where necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your data-protection rights and freedoms.This may include protecting our vehicles and systems, preventing and investigating fraud or misuse, providing customer support, and maintaining the security, reliability and technical operation of Kendall Go.This includes essential crash and error reporting through Sentry, which helps identify, diagnose and resolve technical failures within the Kendall Go application.
• Consent
  Where required, we will ask for your consent before carrying out particular processing.Optional product and usage analytics through Amplitude are based on your consent and will only be activated where you have made the appropriate choice through the consent management system within the Kendall Go application.Where we rely on your consent, you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

6. Sharing Your Information

We do not sell or rent your personal information.

We may share or make personal information available to trusted third parties where this is necessary to provide and operate Kendall Go.

These may include:

• Wunder Mobility, which provides the technology platform used to operate Kendall Go;
• authorised sub-processors used by Wunder Mobility to provide functions within its platform;
• identity and driving licence verification providers;
• payment service providers;
• vehicle telematics and technology providers;
• mapping, navigation and geolocation service providers;
• communications providers;
• IT, hosting and technical support providers;
• insurers and professional advisers where necessary; and
• law enforcement agencies, courts, regulators or other authorities where we are legally required or permitted to disclose information.

Wunder Mobility’s DPA contains an authorised list of sub-processors supporting different elements of its service, including identity verification, payments, hosting, mapping, navigation, vehicle data and technical services.

Service providers processing personal information on our behalf are required to handle it appropriately and in accordance with applicable data-protection requirements.

7. App Analytics and Your Consent Choices

The Kendall Go mobile application uses Usercentrics to manage privacy and consent choices relating to optional processing.

Optional product and usage analytics are provided through Amplitude.

Amplitude analytics will only be activated where you have provided consent through the application’s consent management system.

Where you consent to analytics, information about how you interact with the application may be collected to help us understand how Kendall Go is being used and how we can improve the service and user experience.

You can change or withdraw your analytics consent through the consent settings available within the Kendall Go application.

Withdrawing consent for optional analytics will not prevent you from using the essential functionality of Kendall Go.

Some technical processing is necessary to operate and maintain the application. Sentry crash and error reporting is an essential technical service and is not dependent upon your consent to optional analytics.

Sentry may receive technical error information together with a pseudonymous customer identifier but does not receive your name or contact details for this purpose.

8. International Transfers

Some of the service providers and sub-processors involved in providing Kendall Go may be located outside the United Kingdom.

Where personal information is transferred outside the UK, appropriate safeguards will be used as required by applicable data-protection law.

Depending on the circumstances, these safeguards may include transfers to countries covered by an applicable adequacy decision or the use of approved contractual safeguards.

For Amplitude, Wunder Mobility’s DPA states that data is hosted in the EU using AWS Frankfurt. It also specifies safeguards for any residual access from the United States.

For Sentry, Wunder Mobility’s DPA specifies Standard Contractual Clauses in relation to processing in the United States.

9. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

This includes the period during which you hold or use a Kendall Go account and any additional period necessary for us to meet legal, accounting, insurance, regulatory or reporting requirements, resolve disputes, investigate incidents, or establish, exercise or defend legal claims.

Different categories of personal information may therefore be retained for different periods.

When personal information is no longer required, we will delete or anonymise it in accordance with our applicable retention requirements.

Wunder Mobility’s DPA states that its processing is performed for the duration of the Software as a Service Agreement with Kendall Cars Limited.

10. How We Protect Your Information

We take appropriate technical and organisational measures to protect your personal information against unauthorised or unlawful access, use, alteration, disclosure, loss or destruction.

We also require service providers processing personal information on our behalf to implement appropriate safeguards.

Where appropriate, measures such as pseudonymisation may be used to reduce the amount of directly identifiable information made available to a service provider.

Although we take reasonable measures to protect personal information, no internet-based service or method of electronic transmission can be guaranteed to be completely secure.

11. Your Data Protection Rights

Under UK data-protection law, depending upon the circumstances, you may have the right to:

• request access to the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• request deletion of your personal information in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain processing based on legitimate interests;
• request the transfer of certain personal information to you or another organisation;
• withdraw your consent at any time where processing is based on consent; and
• complain about how your personal information has been handled.

These rights are subject to certain conditions and exemptions under data-protection law.

If you wish to exercise any of these rights, please contact us at go@kendallcars.com

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s independent data-protection regulator.

12. Children’s Privacy and Eligibility

Kendall Go is a vehicle-sharing service and is only available to customers who meet our applicable membership and driving eligibility requirements.

We do not knowingly provide Kendall Go services to children.

If we become aware that personal information has been collected from an individual who is not eligible to hold a Kendall Go account, we will take appropriate steps to address this.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Kendall Go, our technology, our service providers, the way we process personal information, or our legal and regulatory obligations.

Where a change is significant, we will take reasonable steps to bring it to your attention. This may include notification through the Kendall Go application, our website, email or another appropriate communication method.

The “Last Updated” date at the top of this Privacy Policy indicates when it was most recently revised.

14. Contact Us

If you have any questions, concerns or complaints about this Privacy Policy or how Kendall Go processes your personal information, please contact:

Kendall Go Support Team

Kendall Cars Limited
4 Doman Road
Camberley
Surrey
GU15 3DR

Email: go@kendallcars.com

You also have the right to raise a concern with the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal information.