At Curious London (“us”, “we”, “our” or the “Company”) we value your privacy and the importance of safeguarding your data. This Privacy Policy (the “Policy”) describes our privacy practices for the activities set out below. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. In this Policy, personal data (“Personal Data”) refers to any information that on its own, or in combination with other available information, can identify an individual.

This Privacy Policy will explain how Curious uses the personal data we collect from you when you use our website (www.curiouslondon.com). This Privacy Policy applies to the website and all the products and services offered by Curious.

The office locations of where Curious London can be found www.curiouslondon.com/contact/

We are committed to protecting your privacy in accordance with the highest level of privacy regulation.

 

Scope

This policy applies to the Curious London websites, domains, applications, services, and products.

This Policy does not apply to third-party applications, websites, products, services or platforms that may be accessed through (non-Curious London) links that we may provide to you. These sites are owned and operated independently from us, and they have their own separate privacy and data collection practices. Any Personal Data that you provide to these websites will be governed by the third-party’s own privacy policy. We cannot accept liability for the actions or policies of these independent sites, and we are not responsible for the content or privacy practices of such sites.

 

Processing Activities

This Policy applies when you interact with us by doing any of the following:

  • Make use of our application and services as an authorised user
  • Visit any of our websites that link to this Privacy Statement
  • Receive any communication from us including newsletters, emails, calls, or texts / SMS

 

What personal data do we collect

While using our website or products, we may ask you to provide us with personal data that can be used to contact you or identify you. Personally identifiable information may include, but is not limited to:

  • Email address

  • First name and last name

  • Address, County, Postcode, City, Country

  • Cookies and usage data

We may use your personal data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications by contacting us.

 

How do we collect your data

We collect Personal Data from the following sources:

From You
You may give us your Account Information, Payment Information, Financial Information, Demographic Data, Purchase Information, Content, Feedback, Product Information, by filling in forms, using our products or services, entering information online or by corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide, for example, when you:

  • Create an account or purchase products on our website;
  • Use our products or services;
  • Create content through our products or services;
  • Express interest in our products or services;
  • Downloading software and/or our mobile application;
  • Subscribe to our newsletter;
  • Complete a voluntary market research survey;
  • Contact us with an inquiry or to report a problem (by phone, email, social media, or messaging service);
  • When you log in to our website via social media;

 

Automated technologies or interactions
As you interact with our website, we may automatically collect the following types of data (all as described above): Device Data about your equipment, Usage Data about your browsing actions and patterns, and Contact Data where tasks carried out via our website remain uncompleted. We collect this data by using cookies, server logs and other similar technologies. Please see our Cookie Policy for further details.

 

Third parties
We may receive Personal Data about you from various third parties, including:

  • Device and Usage Data from third parties, including analytics providers such as Google;
  • Content from communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks;

If you provide us, or our service providers, with any Personal Data relating to other individuals, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Policy. If you believe that your Personal Data has been provided to us improperly, or to otherwise exercise your rights relating to your Personal Data, please contact us by using the information set out in the “Contact us” section below.

 

Device and Usage Data

When you visit a Curious London website, we automatically collect and store information about your visit using browser cookies (files which are sent by us to your computer), or similar technology. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help Feature on most browsers will provide information on how to accept cookies, disable cookies or to notify you when receiving a new cookie. If you do not accept cookies, you may not be able to use some features of our Service and we recommend that you leave them turned on.

We also process information when you use our services and products. This information may include:

  • Device IDs
  • IP Address
  • Time stamps
  • Location information
  • Time zone

 

Data we collect from third parties

We may receive your Personal Data from third parties such as companies subscribing to Curious London services, partners and other sources. This Personal Data is not collected by us but by a third party and is subject to the relevant third party’s own separate privacy and data collection policies. We do not have any control or input on how your Personal Data is handled by third parties. As always, you have the right to review and rectify this information. If you have any questions you should first contact the relevant third party for further information about your Personal Data. Where that third party is unresponsive to your rights, you may contact the Data Protection Officer at Curious London (contact details below).

Our websites and services may contain links to other websites, applications and services maintained by third parties. The information practices of such other services, or of social media networks that host our branded social media pages, are governed by third parties’ privacy statements, which you should review to better understand those third parties’ privacy practices.

 

Purpose and Legal Basis for the Processing of Personal Data

We collect and use your Personal Data with your consent to provide, maintain, and develop our products and services and understand how to improve them.

These purposes include:

  • Providing, Developing, and Improving our Products and Services
  • Deliver, maintain, debug and improve our products and services.
  • Enable you to access Curious London services and set up accounts.
  • For research and development

Where we process your Personal Data to provide a product or service, we do so because it is necessary to perform contractual obligations. All of the above processing is necessary in our legitimate interests to provide products and services and to maintain our relationship with you and to protect our business for example against fraud. Consent will be required to initiate services with you. New consent will be required if any changes are made to the type of data collected. Within our contract, if you fail to provide consent, some services may not be available to you.

 

Third Party Tools

We use these third party tools to store your information:

  • Hubspot
  • Google Analytics
  • Hotjar
  • Cloudflare

 

International Data Transfer and Storage

Where possible, we store and process data on servers within the general geographical region where you reside (note: this may not be within the country in which you reside). Your Personal Data may also be transferred to, and maintained on, servers residing outside of your state, province, country or other governmental jurisdiction where the data laws may differ from those in your jurisdiction. We will take appropriate steps to ensure that your Personal Data is treated securely and in accordance with this Policy as well as applicable data protection law.In regions that are not considered adequate, we will enter into EU standard contractual clauses (or equivalent measures) with parties outside the EEA and ensure adequate controls are in place for the security of your data.

 

Sharing and Disclosure

We will share your Personal Data with third parties only in the ways set out in this Policy or set out at the point when the Personal Data is collected.

We also use Google Analytics to help us understand how our customers use the site. You can read more about how Google uses your Personal Data here: https://policies.google.com/privacy

You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout?hl=en

 

Legal Requirement

We may use or disclose your Personal Data in order to comply with a legal obligation, in connection with a request from a public or government authority, or in connection with court or tribunal proceedings, to prevent loss of life or injury, or to protect our rights or property. Where possible and practical to do so, we will tell you in advance of such disclosure.

 

Service Providers and Other Third Parties

We may use a third party service provider, independent contractors, agencies, or consultants to deliver and help us improve our products and services. We may share your Personal Data with marketing agencies, database service providers, backup and disaster recovery service providers, email service providers and others but only to maintain and improve our products and services. For further information on the recipients of your Personal Data, please contact us by using the information in the “Contacting us” section below.

 

How will we use your data

Curious collects your data so that we can provide an enhanced online experience. We continually strive to improve our website, based on your user behaviour, feedback and information we receive from you. We use your information to process enquiries or respond to an expression of interest in one or more of our products and services. We also use your data to notify you about changes to our service, to provide customer support, to monitor usage of our service and to detect, prevent and fix technical issues.

If you decide to opt-in to our mailing list (managed through Hubspot) you will receive emails that include company news, product and service information, updates and insights etc. You can unsubscribe at any time to our newsletter by following the ‘Unsubscribe’ link found at the top of our emails to you.

We do not sell, trade, or rent your personal identification information to others. We use third party service providers to help us operate our business, our website or administer activities on our behalf, such as sending out newsletters or surveys. We may share your information with these third parties for those limited purposes provided that you have given us your permission.

 

How We Keep Your Data Safe

We have appropriate organisational safeguards and security measures in place to protect your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

The communication between your browser and our website uses a secure encrypted connection wherever your Personal Data is involved.

We require any third party who is contracted to process your Personal Data on our behalf to have security measures in place to protect your data and to treat such data in accordance with the law.

In the unfortunate event of a Personal Data breach, we will notify you and any applicable regulator when we are legally required to do so.

 

How do we store your data and for how long?

Curious will only retain your personal data for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.

All information you provide to us is stored on our secure servers. The security of your data is important to us but unfortunately no method of transmission over the Internet or method of electronic storage is completely secure. Although we do our best to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

 

Your rights

Curious would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

  • Right to Access (PIPEDA, GDPR Article 15, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA) – You have the right to learn whether we are processing your Personal Data and to request a copy of the Personal Data we are processing about you. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. We may charge you a small fee for this service.

  • Right to Rectification (PIPEDA, GDPR Article 16, CPRA, CPA, VCDPA, CTDPA, LGPD, POPIA) – You have the right to have incomplete or inaccurate Personal Data that we process about you rectified.

  • Right to be Forgotten (right to erasure) (GDPR Article 17, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA) – You have the right to request that we delete Personal Data that we process about you, unless we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.

  • Right to Restriction of Processing (GDPR Article 18, LGPD) – You have the right to restrict our processing of your Personal Data under certain circumstances. In this case, we will not process your Data for any purpose other than storing it.

  • Right to Portability (PIPEDA, GDPR Article 20, LGPD) – You have the right to obtain Personal Data we hold about you, in a structured, electronic format, and to transmit such Personal Data to another data controller, where this is (a) Personal Data which you have provided to us, and (b) if we are processing that data on the basis of your consent or to perform a contract with you or the third party that subscribes to services.

  • Right to Opt Out (CPRA, CPA, VCDPA, CTDPA, UCPA) – You have the right to opt out of the processing of your Personal Data for purposes of: (1) Targeted advertising; (2) The sale of Personal Data; and/or (3) Profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Under CPRA, you have the right to opt out of the sharing of your Personal Data to third parties and our use and disclosure of your Sensitive Personal Data to uses necessary to provide the products and services reasonably expected by you.

  • Right to Objection (GDPR Article 21, LGPD, POPIA) – Where the legal justification for our processing of your Personal Data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for processing which override your interests and rights, or if we need to continue to process the Personal Data for the establishment, exercise or defense of a legal claim.

  • Nondiscrimination and nonretaliation (CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA) – You have the right not to be denied service or have an altered experience for exercising your rights.

  • File an Appeal (CPA, VCDPA, CTDPA) – You have the right to file an appeal based on our response to you exercising any of these rights.

  • File a Complaint (GDPR Article 77, LGPD, POPIA) – You have the right to bring a claim before their competent data protection authority.

 

Withdrawing Consent

If you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge, such as where you wish to opt out from marketing messages that you receive from us. If you wish to withdraw your consent, please contact us using the information found at the bottom of this page.

 

How to Exercise Your Rights

You can make a request to exercise any of these rights in relation to your Personal Data by sending the request to our privacy team by using the form below.

For your own privacy and security, at our discretion, we may require you to prove your identity before providing the requested information.

 

Changes

We may modify this Policy at any time. If we make changes to this Policy then we will post an updated version of this Policy at this website. When using our services, you will be asked to review and accept our Privacy Policy. In this manner, we may record your acceptance and notify you of any future changes to this Policy.

 

Contact Us

To request a copy for your information, unsubscribe from our email list, request for your data to be deleted, or ask a question about your data privacy, we’ve made the process simple:

To contact us, please email datacontroller@curiouslondon.com

 

Write to us at:

Data Privacy Officer of Curious London
77 Dean Street, Soho, London, W1D 3SH, London

 

Last updated 7th October 2024