1. Controller and scope
Curviominglemint Media Ltd, company number 15382941, registered at 24 Holborn Viaduct, London EC1A 2BN, United Kingdom, is the controller of personal data described in this policy. This policy applies to visitors, people who contact us and other users of curviominglemint.lol. It does not govern websites operated independently by publishers, retailers or other third parties to which we may link.
2. Information we collect
We collect information you voluntarily provide, including your name, email address, enquiry category and message when you use our contact form or email us. We may also process technical information such as IP address, browser type, device category, approximate region, referring page, visited pages, timestamps and error logs. Cookie preference data is stored locally in your browser. We do not intentionally collect payment information, health records or special-category data through this website.
3. Purposes and lawful bases
We use contact information to respond to enquiries, maintain business correspondence and protect against misuse. Our lawful bases under UK GDPR and EU GDPR may include consent, performance of requested pre-contractual steps, compliance with legal obligations and our legitimate interests in operating, securing and improving an informational website. Where optional analytics or functional cookies require consent, they remain disabled until permission is provided. Consent can be withdrawn through the cookie preferences control.
4. Cookies and local storage
Essential local storage remembers whether you accepted, rejected or customised cookies. Optional analytics may help us understand aggregated traffic and content performance; functional technologies may remember non-essential interface preferences. Details, purposes and typical durations appear in our Cookie Policy. Blocking essential storage may cause the consent banner to reappear, but core editorial content remains available.
5. Processors and international transfers
We may use reputable providers for website hosting, security, email delivery, form handling and privacy-respecting analytics. These suppliers process information only under contractual instructions and appropriate confidentiality and security duties. If personal data is transferred outside the United Kingdom or European Economic Area, we use a recognised safeguard where required, such as an adequacy regulation, the UK International Data Transfer Addendum or approved standard contractual clauses. We do not sell personal information for money.
6. Retention and security
General enquiries are normally retained for up to 24 months after the last meaningful communication. Security logs are generally retained for up to 12 months, unless a longer period is necessary to investigate abuse or meet legal duties. Consent records may be retained for up to five years to demonstrate compliance. We apply proportionate technical and organisational safeguards, including access controls, updates, minimisation and encrypted transport where supported. No internet service can promise absolute security.
7. Your GDPR rights
Depending on your location and circumstances, you may request access, correction, deletion, restriction, portability or objection to processing. You may withdraw consent at any time without affecting earlier lawful processing. You may also complain to the UK Information Commissioner’s Office at ico.org.uk or your local supervisory authority. We may ask for reasonable information to verify identity before fulfilling a request.
8. California privacy rights
California residents may request to know, correct or delete covered personal information and may exercise applicable rights to opt out of sale or sharing. We do not knowingly sell personal information and do not discriminate against users for exercising privacy rights. If our practices change, we will update this policy and provide legally required controls. An authorised agent may submit a request where valid authority and identity verification are provided.
9. Children and changes
The site is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children. We may revise this policy to reflect legal, operational or service changes. The updated date will appear above, and material changes may receive additional notice where appropriate.
10. DPO and privacy contact
Questions and rights requests may be sent to our privacy lead and Data Protection Officer at [email protected], or by post to Data Protection Officer, Curviominglemint Media Ltd, 24 Holborn Viaduct, London EC1A 2BN, UK. We aim to respond within one month where GDPR applies, subject to lawful extensions.