Privacy Policy

1. Who we are

Curayio Ltd is registered in England and Wales (Company number: 14430465).

Registered office:
Studio C
12–15 Rheidol Terrace
London N1 8NT
United Kingdom

VAT number: 445584175

Website: www.curayio.com Email: heidi@curayio.com

For the purposes of UK and EU data protection law, Curayio Ltd is the “data controller”.

2. Scope of this policy

This Privacy Policy explains how we collect, use and protect personal data when you visit our website.

We do not currently collect personal data through contact forms, newsletters or account registration.

The only data collected is that automatically gathered through our website hosting platform and basic analytics tools.

3. Information we collect automatically

When you visit our website, certain information may be collected automatically by our hosting provider and analytics services. This may include:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Pages visited

  • Date and time of visit

  • Referring website

  • Technical diagnostic data

This information does not directly identify you and is used for security, performance monitoring and site improvement.

4. How our website is hosted

Our website is hosted by Squarespace, Inc.

Squarespace provides the online platform that allows us to present our services. Your data may be stored through Squarespace’s data storage, databases and general applications.

Squarespace may process technical data on servers located in the United States and other jurisdictions.

Squarespace’s privacy policy is available at: https://www.squarespace.com/privacy

5. Google Search Console

We use Google Search Console to monitor website performance in search results.

Google may process anonymised or aggregated usage and technical data. We do not receive personally identifiable information from Google Search Console.

Google’s privacy policy is available at: https://policies.google.com/privacy

6. Cookies

Our website uses cookies and similar technologies provided by Squarespace and Google.

Cookies may be used for:

  • Essential website functionality

  • Security purposes

  • Performance monitoring

  • Basic analytics

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

7. Legal basis for processing (UK & EU GDPR)

Where personal data is processed, we rely on the following lawful bases:

  • Legitimate interests – to operate, secure and improve our website

  • Legal obligations – where required by law

We do not use your data for marketing purposes.

8. International data transfers

Because we use service providers such as Squarespace and Google, data may be transferred outside the United Kingdom and European Economic Area.

Where such transfers occur, they are safeguarded through:

  • UK International Data Transfer Agreements

  • EU Standard Contractual Clauses

  • The EU–US Data Privacy Framework (where applicable)

  • Other legally recognised safeguards

9. Your rights

Depending on your location, you may have rights under applicable data protection laws, including:

  • The right to access your personal data

  • The right to request correction

  • The right to request erasure

  • The right to restrict or object to processing

  • The right to data portability

  • The right to withdraw consent (where applicable)

UK residents may contact the Information Commissioner’s Office (ICO) if they believe their data rights have been breached.

EU residents may contact their local supervisory authority.

California residents may have rights under the California Consumer Privacy Act (CCPA), including the right to request disclosure of personal information collected and the right to request deletion.

Canadian residents may have rights under PIPEDA.

To exercise any rights, please contact: heidi@curayio.com

10. Data retention

We do not actively store personal data through this website.

Technical and analytics data is retained by our service providers in accordance with their own retention policies.

11. Data security

We take reasonable technical and organisational measures to protect information processed through our website.

However, no internet transmission is completely secure.

12. Children

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect legal or operational changes.

The latest version will always be available on this page.

This privacy policy was last updated on 16th February 2026.