Introduction

At CurateOn, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

The data controller responsible for your personal data is:

Information We Collect

Personal Data You Provide

We may collect the following personal information that you voluntarily provide to us:

• Resource Suggestions: Name, email address, and any information you include when suggesting resources
• Contact Information: Name, email address, and any other information you provide when contacting us

Automatically Collected Information

When you visit our website, we may automatically collect certain information:

• Usage Data: Information about how you use our website, such as pages viewed, time spent on pages, and navigation paths
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Device Data: Device type, unique device identifiers, and other diagnostic data

Analytics Services

What We Collect:

• Page views and navigation paths
• Referrer information (where you came from)
• Browser and device information
• Geographic location (country/city level only)
• Performance metrics (page load times)

Important Information:

• Our analytics service is privacy-friendly and does not use cookies
• All data is anonymized and aggregated
• We only collect analytics if you consent via our cookie banner
• You can withdraw consent at any time
• Data is retained for approximately 26 months

How We Use Your Information

We process your personal data on the following legal bases:

• Legitimate Interests: To operate and improve our website, understand user preferences, and develop new features
• Consent: When you provide information through forms (such as resource suggestions), you consent to us using that information for the stated purpose
• Contractual Necessity: To provide services you have requested
• Legal Obligation: To comply with legal requirements and respond to lawful requests from authorities

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Resource suggestions: Retained until processed or declined, then deleted or anonymized
• Admin accounts: Retained for the duration of your access requirement
• Analytics data: Typically retained for 26 months

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information.

Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., authentication cookies for admin access)
• Analytics Cookies: Help us understand how visitors interact with our website (if implemented)

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our website.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website (e.g., hosting providers, database services)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business

All third-party service providers are required to maintain the confidentiality and security of your personal data and are prohibited from using it for any purpose other than providing services to us.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of the United Kingdom. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
• Transfers to countries with an adequacy decision from the UK government

Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Right of Access: You have the right to request copies of your personal data
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data
• Right to Erasure: You have the right to request deletion of your personal data (subject to certain conditions)
• Right to Restrict Processing: You have the right to request restriction of processing your personal data
• Right to Data Portability: You have the right to request transfer of your data to another organization or directly to you
• Right to Object: You have the right to object to processing of your personal data
• Rights Related to Automated Decision-Making: You have the right not to be subject to automated decision-making, including profiling

To exercise any of these rights, please contact us at hello@curateon.com. We will respond to your request within one month.

How to Exercise Your GDPR Rights

How to Submit a Request:

• Send an email to: hello@curateon.com
• Use the subject line: Data Request
• In your email, clearly state which right(s) you wish to exercise (e.g., access, deletion, portability)
• Include sufficient information to help us identify your data (e.g., email address used for submissions)
• We may request additional verification to confirm your identity before processing your request

Response Time:

We will respond to your request within one month of receiving it. In complex cases, we may extend this period by two additional months, and we will inform you if this is necessary.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Secure server infrastructure with encryption
• Access controls and authentication requirements
• Regular security assessments and updates
• Staff training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete such information.

Third-Party Listings and Links

Our website contains links to third-party websites and services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

Third-Party Privacy Practices: When you click on links to external websites or interact with third-party resources listed on CurateOn, those organizations may collect personal data from you according to their own privacy policies. CENE TECHNOLOGIES LTD is not responsible for the data collection, use, or security practices of any third parties.

No Endorsement: The inclusion of any third-party resource on our platform does not constitute an endorsement or guarantee of their privacy practices or data security measures.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Right to Lodge a Complaint

If you believe your data protection rights have been breached, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

Last updated: 26 October 2025