Last updated: December 2025
This Privacy Notice explains in detail what personal data we collect about you when you interact with us, how we use and handle that data, and your rights. If you have any questions about this Privacy Notice or how we use your personal data, please contact us at legalmail@curationcorp.com. We are committed to protecting your data and will gladly address any concerns.
"Curation", "we", "us", or "our" operates the Curation Platform and represents the following companies:
For the purposes of data protection law, Shareflix Limited and Fat Gladiator Limited are each a separate data controller of personal data relating to their respective services. Both entities are registered with the UK Information Commissioner's Office ("ICO") as data controllers:
This Privacy Notice applies to all of the Curation companies. Curation is required to protect your information under applicable data protection laws, including the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025. For ease of reading, we refer to these laws collectively as "Data Protection Laws."
For context, the Curation Platform is a content-driven, AI-enhanced investment idea curation and discovery platform. It offers a range of services to different types of users:
Free Members – Access to basic curated content such as articles, insights, videos and general platform features (such as browsing content and receiving non-personalised updates).
Paid Members – Access to all free content plus enhanced features such as additional curated content, personalised discovery tools and recommendations, and use of our AI chatbot for Q&A.
Qualified VIP Club Members – These are paid members who have been vetted as qualified investors. They receive all paid features plus entry to an exclusive community ("VIP Club") where original investment ideas are shared and members can network and collaborate on the Curation Platform.
Institutional/Corporate Clients – Businesses that use Curation for content curation, marketing or analytics services. They might have multiple user seats on the Curation Platform and receive aggregated data insights.
When we refer to "Members" in this Privacy Notice, we mean individuals using the Curation Platform under any of the membership tiers above. The personal data we collect and how we use it can vary slightly depending on your role (e.g., whether you are a Free Member or a Qualified VIP Club Member). The sections below explain these differences in detail.
The Curation Platform may contain links to third-party websites or services (e.g., a news article we curate might link out to the original source, or user-posted content might include a link). If you follow a link to any external site, please note that those sites have their own privacy notices, and we do not control their content or privacy practices. We encourage you to read the privacy notices of every website or application you interact with. This Privacy Notice applies solely to personal data processed by Curation.
Please note that the Curation Platform is not directed at children under eighteen (18), and we do not knowingly collect personal data from anyone under eighteen (18) years old. If you are under eighteen (18), you should not use our Curation Platform or provide any personal information. If we discover we've collected personal data from a child under eighteen (18), we will delete it.
Given the nature and scale of our processing, we are not legally required to appoint a formal data protection officer. However, we have a dedicated team responsible for privacy compliance. In any event, we treat privacy with the highest importance. If you have any questions or concerns about this Privacy Notice or your personal data, you can always reach out to us at legalmail@curationcorp.com. We will be happy to assist you.
We collect personal data on website visitors, Free Members, Paid Members, Qualified VIP Club Members, institutional or corporate clients, job applicants, third party suppliers and anyone who interacts with Curation. We collect, use, and store different kinds of personal data about you (depending on your interactions with us).
"Personal data" means any information that can identify you as an individual, either on its own or when combined with other information. The personal data we collect falls into the following broad categories:
Identity Data – We require at least your first and last name if you wish to register for an account on the Curation Platform.
Contact Data – We require your email address and (if you choose to provide) telephone number and postal address. We require an email for account creation. Phone number and mailing address are generally optional, except for corporate client contacts or if needed on invoices.
Account Credentials – We require you to create a password to access the Curation Platform. Passwords are stored in an encrypted form and not visible to us.
Profile Data – We obtain information you add to your user profile or account preferences. This may include your occupation/professional details (e.g. job title, industry, CV or LinkedIn profile), investment interests or preferences (e.g. sectors of interest, investment horizon etc.), and any profile photo or bio you upload. For Qualified VIP Club Members, this also includes qualification information you provide, such as evidence of your investor status (self-certification forms, professional certifications) and any information collected as part of our vetting process.
Usage Data – We collect data about how you use the Curation Platform and interact with our content. This includes the pages or content you view, what features you use, links clicked, search queries run (including questions you ask our AI chatbot), the time and duration of activities, and other engagement metrics. If you are a Qualified VIP Club Member, this may include your contributions in the community (e.g. posts or comments you make).
Technical Data – We collect information automatically from your devices and browser when you interact with the Curation Platform. This includes your IP address, device type, operating system, browser type and version, time zone and location (e.g. country), and cookie identifiers. We also log when you access the Curation Platform and any errors or system events for security and performance monitoring.
Communication Data – We collect copies of communications we have with you. For example, if you email us or contact support, we will keep your message and our response. If we send you notifications or newsletters, we record that too. If you participate in any surveys or provide feedback, those responses are kept.
Financial Data – For Paid Members or clients who enter into a transaction with us, we collect payment-related information. Payment details (such as credit/debit card number or bank account information) are processed via our payment processor (Stripe); we ourselves receive limited information like the card's last 4 digits or a Stripe transaction ID, as well as billing name/address if provided. We also maintain records of transactions (subscriptions purchased, amounts and dates of payments, invoice references). If you are a corporate client, this may include your company's billing details and VAT number.
Verification Data – If you apply to join the Qualified VIP Club Members, we may collect additional data to verify your identity and eligibility. This can include copies of documents (e.g. IDs, certifications), self-certification forms where you attest to meeting certain criteria, or records of checks we perform (such as confirming your employment or qualifications via public sources). We keep records of your signed agreements or declarations (such as a high-net-worth investor declaration).
Marketing Preferences – We collect information about your preferences in receiving marketing from us. We record whether you have opted into or out of email newsletters or other direct marketing.
Aggregated Data – We also generate and use aggregated data such as statistical or demographic insights derived from your personal data, but which is not personally identifiable. For example, we might aggregate usage data to determine the percentage of users interested in a particular sector. If we ever combine aggregated data with your personal data such that you can be identified, we treat it as personal data and protect it accordingly.
We do not normally collect any special category data about Members of the Curation Platform. This includes sensitive information such as health data, racial or ethnic origin, religious or philosophical beliefs, political opinions, or data concerning criminal convictions and offences. The Curation Platform is designed for investment content and networking, and there is no need for us to request sensitive personal information. We ask that you do not include such information in your profile or posts.
In the rare event that you choose to share sensitive personal data on the Curation Platform (for example, by mentioning your health or political views in a forum post), this is entirely voluntary and at your discretion. We will treat any such information in accordance with this Privacy Notice. However, please note that we do not have a specific purpose for processing this type of data beyond its incidental presence on the Platform. If we ever need to process special category or criminal convictions data for a legitimate reason, we will only do so with your explicit consent or under another lawful basis.
We may collect special category or criminal convictions data from job applicants as part of our recruitment process, where necessary and permitted by law. In such cases, we will ensure appropriate safeguards are in place to protect your data and comply with applicable data protection legislation.
To make things clearer, here's an overview of the personal data we typically collect for different types of data subjects:
If you simply browse our website without signing up, we collect Technical Data and Usage Data through cookies or similar trackers. If you fill in a contact form or request information, we collect Identity and Contact Data (like your name and email) and Communication Data (your message). The legal basis that we rely upon is legitimate interests (for analytics and site performance) and your consent (for optional cookies or when submitting a form).
When you register for a free account, we collect Identity Data, Contact Data (email), Account Credentials (password), and any Profile Data you choose to provide (you may, for example, fill out profile fields about your interests or profession, but this is optional). As you use the free service, we collect Usage and Technical Data automatically (e.g. what content you read, when you last logged in, etc.). The legal basis that we rely upon is performance of contract (to provide the service you signed up for) and legitimate interests (to understand and improve how users engage with the Curation Platform).
In addition to all of the data collected for Free Members, if you upgrade to a paid subscription, we will also collect Financial Data for your payments (e.g. card information via Stripe, billing name and address). We may ask for more Profile Data to personalise your experience – for example, investment experience, areas of interest, or professional background, if not already provided. Providing additional profile information is usually optional, but it can help us tailor content recommendations. The legal basis that we rely upon is performance of contract (to bill you and provide paid features), and legitimate interests (to tailor and enhance our services).
These are paid members who undergo an eligibility vetting. To verify and maintain your VIP status, we collect whatever Verification Data is required by law and our compliance policies. This typically includes proof of identity and age, evidence of your high-net-worth or professional investor status (such as income/assets certification or proof of relevant experience) and signed declarations (e.g. a statement that you understand the risks). We also record your membership in this tier and any activities related to regulated services (for instance, if you participate in an investment opportunity through the Curation Platform, that action is logged). The legal basis that we rely upon is legal obligation (to comply with UK financial regulations that require us to verify investor status and keep certain records) and performance of a contract (to provide you the VIP services). Failing to provide required verification data will mean you cannot join or remain in the VIP Club.
If you represent a corporate client that uses Curation (for example, your company has a contract with us for an investor showcase or enterprise access), we will collect Identity and Contact Data for the key points of contact at the company. This usually means business card information: name, work email, work phone, job title, company name, business address. We also collect any communications related to the business-to-business service and keep copies of the contract. If we create accounts for individual employees under an enterprise deal, those individuals will have user accounts and thus also fall under the Member categories above. The legal basis that we rely upon is performance of contract (with the corporate client) for most data, and legitimate interests (in maintaining business relationships and providing analytics).
If you apply for a role with us, we may collect Identity Data, Contact Data, CVs and application materials, employment history, education and qualifications, references, and any other information you provide during the recruitment process. We may also collect data from third parties such as recruitment agencies or referees. The legal basis that we rely upon is legitimate interests (to assess your suitability for a role), legal obligation (e.g. right to work checks), performance of a contract, and separately your consent (where required, such as for background checks).
When we engage with third party suppliers, we may collect Identity and Contact Data of individuals working for those suppliers (e.g. account managers, consultants, service providers). This typically includes name, work email, phone number, job title, and any communications or documentation relevant to the business relationship. The legal basis that we rely upon is performance of contract (with the supplier) and legitimate interests (to manage supplier relationships and ensure service delivery).
We might collect personal data about others in limited contexts such as if you engage with us on social media (e.g. commenting on our posts, or messaging us), we may collect your social media handle and any contact info you provide via that channel. In addition, if you attend a Curation event (virtual or in-person), we might collect your name and contact for registration, and possibly media (photos, recordings) at events.
If we ever need to collect personal data from third-party sources other than you, we will either do so with your knowledge or as permitted by law. The most common example is:
We may obtain limited public information about you to supplement our records, such as reviewing your LinkedIn profile or company website to better understand your professional background. We do not purchase bulk personal data from data brokers, marketing lists, or other third parties. In some cases, for VIP vetting, we might verify credentials via third-party databases or professional networks, but you will have provided the details for us to verify.
For payments, we receive confirmations from Stripe (our payment processor) about your payments, and fraud score information to help screen for fraudulent transactions.
If a corporate client provides us with a list of authorised users (e.g. names and emails of employees to set up accounts), we collect that from the client to create accounts and then treat those users as Members under this Privacy Notice.
We do not engage in any profiling or automated decision-making that produces legal or similarly significant effects on you without human intervention. In other words, we don't make any purely automated decisions about you (such as credit scoring or hiring decisions) on the Platform.
We will only use your personal data when the law allows us to (i.e. when we have a legal basis under Data Protection Laws). Most commonly, we use it in the following circumstances:
To perform a contract we are about to enter into or have entered into with you – For example, when you sign up as a Member (free or paid) we must use your data to set up your account and provide the services you expect. If you are a Paid Member, we need to process your payment details to fulfil our contract with you. This basis applies whenever we provide our core services to you or respond to your requests as part of our service.
To comply with a legal obligation – Certain data processing is required by law – for instance, verifying age and investor status for Qualified VIP Club Members (to comply with financial regulations), keeping records of transactions for tax and accounting obligations, or disclosing information to authorities if lawfully required (e.g. responding to a court order or an Financial Conduct Authority ("FCA") audit).
For our legitimate business interests (or those of a third party) – This is when the processing is necessary for our reasonable interests in conducting and improving our business, as long as those interests are not outweighed by your rights or interests. We rely on this basis for many routine uses of data – for example, analysing how Members use the Curation Platform so we can improve content and features, or using security measures to protect our Curation Platform. When we process personal data for our legitimate interests, we consider and balance any potential impact on you (both positive and negative). You have the right to object to processing based on legitimate interests in certain cases.
With your consent – Generally, we do not rely on consent as a legal basis except for sending certain direct marketing communications, for using certain cookies, or if we ever process special category data (which is rare). If we ask for your consent, we will make it clear that we are doing so and what you are consenting to, and you have the right to withdraw that consent at any time.
Providing and Personalising the Service – Your personal data is used to set up and manage your account, verify your identity during login, and deliver the core features of the Curation Platform. This includes remembering your preferences (such as topics you follow), tailoring content recommendations, and enhancing your experience with personalised suggestions. For instance, if you show interest in technology, the Curation Platform may prioritise tech-related content. Your interactions also help improve the AI chatbot's responses and highlight relevant discussions or insights.
Processing Payments and Managing Subscriptions – For Paid Members, your contact and financial details are processed securely via Stripe to handle subscription payments, issue invoices, and detect fraudulent activity. You'll receive billing-related communications such as receipts, renewal reminders, and payment confirmations. These processes also support compliance with tax and financial regulations, including maintaining transaction records for tax and audit purposes.
Essential Communications and Customer Support – Your email address and other contact details are used to send important service-related messages. These include account verification emails, security alerts, updates about content you follow, and responses to support queries. If you're a VIP Club Member or part of a corporate account, communications may also involve compliance checks or account management. These messages are necessary for service delivery and cannot be opted out of, though they are strictly limited to essential information.
Marketing, Newsletters, and Promotional Outreach – Your contact information may be used to send newsletters, promotional offers, surveys, or event invitations tailored to your interests. For example, Qualified VIP Club Members might receive different content than free users. Marketing may also include targeted ads via third-party platforms using cookies or anonymised identifiers. You can opt out of marketing emails at any time without affecting your access to core services. Consent is always obtained where legally required, especially for cookies and third-party advertising.
VIP Club Operations and Regulatory Compliance – If you are a Qualified VIP Club Member, your data is used to manage your membership and meet financial regulatory requirements. This includes verifying your investor status, storing compliance documents, and potentially sharing your details with our FCA-authorised principal.
Corporate Services and Business Analytics – For corporate clients, data is used to deliver agreed services, such as publishing sponsored content and tracking user engagement. Aggregated analytics (e.g. number of views, geographic trends) are shared with client organisations to demonstrate performance, without revealing individual user identities. Corporate representatives may also be contacted for service updates or feedback.
Platform Analytics and Feature Optimisation – The platform uses cookies and similar technologies to analyse user behaviour, such as navigation patterns, content popularity, and referral sources. This helps identify areas for improvement, test new features (e.g. A/B testing), and refine AI tools. Email engagement (e.g. open rates, link clicks) is also tracked to assess communication effectiveness. AI moderation tools may flag inappropriate content for human review, ensuring platform safety and relevance without automated enforcement.
Legal Obligations – Your data may be used or disclosed to comply with legal requirements, respond to law enforcement or regulatory requests. This includes sharing data during legal disputes and fulfilling tax reporting duties.
Cookies are small text files placed on your device to store data that can be retrieved by a web server in the domain that placed the cookie. The Curation Platform uses cookies and similar tracking technologies to provide functionality and to analyse usage. For example, cookies allow you to stay logged in without re-entering your password on every page, remember your site preferences, and enable us to gather analytics about how users arrive at and use our website.
When you first visit our website, you will see a cookie notice or banner. Where required by law, we will ask for your consent to place non-essential cookies on your device. You can always manage your cookie preferences through our cookie settings tool on the website or through your browser settings. If you choose to reject or disable cookies, note that some parts of the Curation Platform might become inaccessible or not function correctly.
For more detailed information, please see our Cookies Notice (available on our website), which lists all cookies and trackers in use and their purposes. The Cookies Notice is incorporated into this Privacy Notice by reference.
We value your privacy and do not sell or trade your personal information to third parties for their own marketing purposes. However, we do share your data with certain parties in the following circumstances, each of which involves appropriate safeguards for your privacy:
Your information may be shared between Curation Corporation Limited, Shareflix Limited and Fat Gladiator Limited as needed to operate the Curation Platform and services. For example, if you upgrade from a free (Shareflix Limited) membership to a paid (Fat Gladiator Limited) membership, your account details will be transferred to Fat Gladiator Limited's systems. Internal access to personal data is restricted to personnel who need it for their job and is subject to strict confidentiality obligations.
We use trusted third-party companies to help us run our business and the Curation Platform. For example:
Cloud Hosting and IT Infrastructure: e.g. Heroku/Salesforce (hosting our application and databases), and Amazon Web Services or similar for data storage and backups. These providers may process all categories of data on our behalf for storage/hosting purposes. We ensure any data stored in cloud services is subject to appropriate security (encryption at rest and in transit).
Payment Processor: Stripe, Inc. processes payment transactions on our behalf. Stripe receives your payment details directly; we share minimal info with Stripe like your name, email, and billing info to facilitate the charge.
Analytics Providers: We use Google Analytics, which uses cookies and scripts to collect Usage and Technical Data and provide aggregated reports. We also may use other third parties for user experience analytics, which might record clicks or scrolls – these tools are configured not to capture any form inputs or sensitive information.
Email and Communication Tools: We use certain third parties for sending emails and managing communications for customer support, etc. These tools would use your Contact and Communication Data as needed to send messages or manage support tickets. They act on our behalf and are bound by data processing agreements.
AI and Content Moderation Services: Currently our AI chatbot operates primarily on our own models with content indexing; if this changes we will update this Privacy Notice accordingly.
Professional Advisors: We may share necessary data with our bankers, lawyers, accountants, auditors, insurers, or similar professional advisors in the course of obtaining their services. For instance, if we face a legal claim, we might share relevant account and transaction data with our lawyers. These parties have their own legal obligations to protect your data.
We may share Qualified VIP Club Members' information with our FCA-authorised principal firm or with the FCA itself if requested. Similarly, if the ICO, a court, or any law enforcement agency lawfully requires data (e.g. a fraud investigation), we will comply with such requests. We will verify the legitimacy of any request and only provide the minimum data necessary.
If we ever merge with, acquire, or are acquired by another company, or if we sell a business unit or assets, personal data may be transferred to the successor entity as part of the transaction. If such a transfer occurs, the use of your personal data will still be governed by this Privacy Notice (or a notice of equivalent protections). We would inform users of any significant change in ownership or control of their personal info.
We require all third parties with whom we share personal data to respect its security and to use it only for legitimate purposes in accordance with Data Protection Laws. Whenever your data is shared, we seek to share the minimum necessary to achieve the purpose and, where possible, to anonymise or pseudonymise data before sharing.
If you have any questions about third parties who have access to your data, or need more specific information about who we share data within a particular context, feel free to contact us.
Curation is based in the United Kingdom ("UK"), but we serve individuals and organisations around the world. Your personal data may be transferred and stored outside of your home country, including to countries outside the UK or the European Economic Area ("EEA"). For example:
Our primary servers are located in data centres in the United States of America ("USA") (through Heroku/Salesforce).
Some of our service providers (e.g. Stripe, Google) are based in the USA or other countries outside the UK and EEA.
Members of the Curation Platform may be located globally, and while we don't transfer your data to them, your interactions (like chat messages) effectively cross borders in a peer-to-peer sense.
Whenever we transfer personal data out of the UK and EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards. In particular:
Adequacy Decisions – We will only transfer personal data to countries that have been officially deemed to provide an adequate level of data protection by the UK government and (where EU data is involved) the European Commission.
Contractual Clauses – In the absence of an adequacy decision, we use the relevant standard data protection clauses approved by the UK and/or EU authorities when contracting with service providers abroad. The UK's International Data Transfer Agreement and the European Commission's Standard Contractual Clauses ("SCCs") impose strict obligations on the recipient to protect your data to UK and EEA standards.
Supplementary Measures – Where needed, we adopt additional technical and organisational measures such as encryption and access controls to ensure data remains secure during and after transfer. Many of our providers also participate in international frameworks like the EU-US Data Privacy Framework (as applicable) to provide further assurances.
Your explicit consent or other exceptions – In rare cases, we may rely on an allowed exception (such as your explicit consent or necessity for contract performance) for transfers. For example, if you are a Qualified VIP Club Member in a country with no adequacy and you explicitly wish to connect with another member in yet another country, that cross-border communication is at your direction (which is an exception to transfer restrictions). Generally, we try not to rely on exceptions and instead use the safeguards above.
Despite the country your data is in, we will apply the same protections outlined in this Privacy Notice. We also continuously monitor the legal landscape for international transfers. If there are changes (for example, new rulings or agreements affecting USA transfers), we will adjust our practices and update this Privacy Notice as needed to remain compliant.
We have implemented a range of technical and organisational measures to keep personal data safe and prevent it from being lost, altered, disclosed, or accessed without permission. This includes using encryption to protect data both when it is transmitted and when it is stored, as well as strict access controls so that only authorised individuals can view personal information when necessary for their work. Where possible, we anonymise or pseudonymise data, particularly for analytics or testing, and any information shared externally is aggregated and does not include personal identifiers. Although no system can be completely secure, we have an incident response plan in place. If a breach occurs that poses a significant risk to individuals, we will notify those affected and inform the relevant authorities in line with legal requirements.
If you are a Member of the Curation Platform, you can also play a role in keeping your data safe. It's important that you keep your account credentials confidential and choose a strong password. Don't reuse passwords from other services. If you believe your account has been compromised (e.g., you notice unauthorised activity or you lose access to your login), please contact us immediately so we can help secure your account.
We only keep personal data for as long as it is genuinely needed to achieve the purposes for which it was collected. This includes using the data to provide services, meet contractual obligations, and comply with legal, regulatory, accounting, or reporting requirements. Once those purposes have been fulfilled, we either securely delete the data or anonymise it so it can no longer be linked to an individual.
The length of time we retain data can vary depending on several factors, such as the type of information, why it was collected, and any applicable laws or industry standards. For example, some financial or transaction records may need to be kept for a number of years to meet tax or audit obligations, while other data may only be retained for a short period if it is no longer necessary. In all cases, we aim to keep data for the minimum time required and regularly review our retention practices to ensure they remain appropriate.
When we have no ongoing legitimate need to use your personal data, we will either delete it or anonymise it so that it can no longer be associated with you. If deletion or anonymisation is not immediately feasible (for example, because the data is stored in secure archives), we will isolate it and store it securely until deletion is possible.
If you stop using your Free Member account for an extended period, we may classify it as "inactive." We generally will send a reminder after e.g. twelve (12) months of inactivity. If you do not respond, we reserve the right to delete or anonymise the account data after an additional period (typically another six (6) months), unless we are required to retain it. For Paid Members, we keep data as long as needed to service any subscription or related legal obligations.
Under Data Protection Laws, you have several rights regarding your personal data. These rights give you control over how your information is used by us. Below is a summary of those rights:
Right to Access – You have the right to request a copy of the personal data we hold about you, and to obtain information about how we process it. You can ask for a copy of your data in a structured format.
Right to Rectification – If any of the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure – You have the right to request deletion of your personal data in certain circumstances. This right is not absolute – it applies, for example, if the data is no longer necessary for the purposes we collected it, or if you withdraw consent and we have no other legal basis to keep it. It may not apply if we still have a lawful reason to retain the data (for instance, we cannot delete information that's required for an ongoing contract or legal obligation).
Right to Restrict Processing – You have the right to ask us to limit or pause the processing of your personal data in certain circumstances. For example, you might request restriction if you contest the accuracy of the data and want to verify it, or if you object to us processing it and we are considering your objection. When processing is restricted, we can still store your data but will not use it further until the issue is resolved (unless necessary for legal claims or to protect others' rights).
Right to Object – You have the right to object to our processing of your personal data when that processing is based on legitimate interests. You also have an absolute right to object to your personal data being used for direct marketing purposes. This means, for example, you can object if you feel our profiling for content personalisation materially impacts you, and we will consider whether our interests in processing truly override your rights. For marketing, if you object (unsubscribe), we will stop sending you marketing messages. In practice, the easiest way to stop marketing is to use the unsubscribe link in any email or update your preferences in our platform.
Right to Data Portability – For personal data that you have provided to us and that we process by automated means on the basis of consent or contract, you have the right to receive it in a structured, commonly used, machine-readable format, and to request that we transfer it to another controller where technically feasible.
Right to Withdraw Consent – In the limited situations where we rely on your consent to process your data, you have the right to withdraw that consent at any time. For instance, if you consented to marketing emails, you can opt out (withdraw consent) and we will stop. Withdrawal of consent will not affect the lawfulness of any processing carried out before you withdrew.
Rights related to Automated Decision-Making – As noted, we do not make any significant decisions about you solely by automated means (without human involvement). If that changes, you would have rights to request human review of an automated decision and to express your point of view. In any case, you have the right to question and request clarification on any decision that affects you that you believe was made purely algorithmically.
To exercise any of these rights, please contact us at legalmail@curationcorp.com with your request. For certain requests, we may need to verify your identity to ensure we don't disclose data to an unauthorised person (for example, by asking you to confirm from your registered email or through the app). Exercising your rights is free of charge in most cases. However, if you make repetitive, unfounded, or excessive requests, we may either charge a reasonable fee or refuse to act (as allowed under Data Protection Laws).
We will try our best to respond to all legitimate requests within one month. If your request is particularly complex or if you have made multiple requests, it may take us longer (up to an additional two months). We will inform you within the initial month if we need more time and the reasons why.
If you have any questions or concerns about how we handle your personal data, please contact us by emailing legalmail@curationcorp.com or by completing the "Contact Us" form on our website and submitting your query or complaint.
We will do our best to resolve any issue you raise. However, if you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority. In the UK, this is the ICO, and you can find details on how to complain at https://www.ico.org.uk/concerns.
If you are based outside the UK, you can contact your local data protection authority. For example, in the EU, this would be the supervisory authority in your country of residence. We would appreciate the opportunity to address your concerns before you approach a regulator, so please consider contacting us first.
We may update this Privacy Notice from time to time to reflect changes in our services or legal obligations. If we make material changes, we will notify you prominently (for example, via a notice on the website or an email). The latest version will always be available on our website, and the "Last updated" date will indicate the revision. Please check back periodically to review any updates. If you continue to use the Curation Platform after changes are effective, it means you accept the revised Privacy Notice.
© 2025 Curation - All Rights Reserved
Made by MDN Digital
