Privacy Policy

Curiosa Privacy Policy

Effective Date: [Insert Date]

Curiosa respects your privacy and is committed to protecting your personal data.

This notice explains how we collect, use, and protect your personal information when you use our website, purchase products, or interact with us. It also outlines your rights and how to exercise them.

1. Important Information & Who We Are

Controller
Curiosa Limited (“we”, “us”, “our”) is the data controller responsible for your personal information.

Data Protection Officer
We have appointed a Data Protection Officer (DPO) who can be contacted for any questions regarding this notice:

  • Email: [Insert Contact Email]

  • Telephone: [Insert Contact Number]

  • Address: [Curiosa Registered Address]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.

Updates to This Policy
This version was last updated on [Insert Date]. We may amend this notice from time to time. Please check regularly for updates.

Third-Party Links
Our website may include links to third-party sites. We are not responsible for their privacy practices and encourage you to read their policies.

2. The Data We Collect

We may collect and process the following types of personal data:

  • Identity Data: name, username, gender, date of birth.

  • Contact Data: addresses, email, phone numbers.

  • Transaction Data: payments, purchase history.

  • Technical Data: IP address, login data, browser type, device details.

  • Profile Data: login credentials, preferences, reviews, survey responses.

  • Usage Data: browsing activity, time spent, clicks.

  • Marketing Data: preferences for receiving communication and promotions.

We do not collect sensitive data (e.g., health, religion, race, political views).

3. How We Collect Your Data

  • Direct Interactions: creating an account, placing orders, filling in forms.

  • Automated Technologies: cookies, server logs, analytics tools.

  • Third Parties: analytics providers (e.g., Google Analytics), advertising networks, payment processors.

4. How We Use Your Personal Data

We use your data to:

  • Process and deliver your orders.

  • Manage your account and customer service interactions.

  • Personalise product recommendations and marketing.

  • Improve our website and services.

  • Detect and prevent fraud.

  • Comply with tax, legal, and regulatory obligations.

Marketing
You will only receive marketing if:

  • You have opted in, or

  • You are an existing customer who has purchased similar products.

You can opt out anytime via unsubscribe links or contacting us directly.

5. Cookies & Tracking

Our website uses cookies to:

  • Essential cookies: enable secure checkout and login.

  • Performance cookies: help us analyse site traffic and improve functionality.

  • Targeting cookies: deliver relevant ads and promotions.

  • Preference cookies: remember your settings (e.g., language, currency).

Third-Party Cookies
We work with trusted partners (e.g., Google, Meta) who may place cookies on your device for analytics and advertising.

Managing Cookies
You can manage or disable cookies in your browser settings. Note that some site features may not work without them.

6. International Data Transfers

Your data may be transferred outside the UK/EEA, for example when:

  • Using cloud storage providers.

  • Using payment processors.

  • Running international marketing campaigns.

We ensure appropriate safeguards, such as:

  • Adequacy decisions from the UK/EU.

  • Standard contractual clauses approved by regulators.

  • Data processing agreements with suppliers.

7. Data Security

We implement strict technical and organisational measures, including:

  • Encrypted payment processing.

  • Secure servers and firewalls.

  • Restricted access to personal data.

  • Regular monitoring and testing of systems.

8. Data Retention

We keep your personal data only as long as necessary:

  • Customer and order data: up to 6 years (for legal/tax purposes).

  • Marketing data: until you withdraw consent.

  • Technical/analytics data: typically 26 months or less.

We may anonymise data for long-term analysis.

9. Your Rights

Under UK and EU law, you have the right to:

  • Access your personal data.

  • Request correction or deletion.

  • Object to marketing or profiling.

  • Restrict processing.

  • Request portability (data transfer).

  • Withdraw consent at any time.

How to Exercise Rights:
Email us at [Insert Contact Email]. We will respond within one month.

10. Glossary

  • Legitimate Interest: our business interests that do not override your rights.

  • Performance of Contract: processing needed to fulfil an order.

  • Legal Obligation: processing required by law.

  • Consent: freely given permission for specific uses.

11. Sector-Specific Practices (Luxury & Lifestyle Retail)

Given the nature of our products (luxury goods, lingerie, beauty, and lifestyle):

  • We may use anonymised purchase data for trend analysis (e.g., which product ranges are popular).

  • We may share minimal data with brand partners and suppliers to ensure authenticity and warranty claims.

  • We never sell customer data to third parties.