Privacy notice

Curation Studio is the trading name of Curation Studio Ltd, a UK-based creative, design and digital agency.

For the purposes of UK data protection law, Curation Studio Ltd may act as a data controller where we determine how and why personal data is used.

For some client projects, we may act as a data processor, processing personal data solely on the instructions of our client. Where this is the case, the relevant client remains responsible for determining the purposes for which that information is processed.

Depending on your relationship with us, we may collect and process:

• name and job title;
• company or organisation;
• business email address and telephone number;
• correspondence and communications with us;
• information relating to enquiries, proposals and projects;
• supplier and contractor information;
• invoicing, payment and accounting information;
• information required to administer our business relationships;
• technical information generated through our website or digital services where applicable; and
• other information provided to us in connection with our services.

We aim to collect only the personal information reasonably necessary for the relevant purpose.

We may use personal information to:

• respond to enquiries;
• communicate with clients, prospective clients, suppliers and collaborators;
• prepare proposals and quotations;
• enter into and manage contracts;
• deliver and manage client projects;
• manage our network of specialist suppliers and contractors;
• administer invoices, payments and financial records;
• maintain appropriate business and project records;
• protect the security and integrity of our systems, information and services;
• comply with legal, regulatory, insurance and contractual requirements; and
• communicate about Curation Studio’s services and activities where permitted by law.

Our website uses a small number of cookies. Cookies are small files placed on your device that allow a website to recognise your browser on a later visit.

We use Google Analytics to understand how visitors find and use our website so that we can improve it. Google Analytics is provided by Google, which processes this information on our behalf and may process it outside the UK.

We ask for your consent before any analytics cookies are set. Until you accept, Google Analytics is not loaded and no analytics cookies are placed on your device. Declining does not affect your ability to use the website.

If you accept, Google Analytics places cookies on your device and collects information about your visit, which may include:

• the pages you view and how long you spend on them;
• the website, search or link that brought you to us;
• your approximate location, derived from your IP address; and
• basic technical information about your device and browser.

These cookies are named ‘_ga’ and a property-specific cookie beginning ‘_ga_’, and they last for up to two years, although some browsers shorten this.

We do not use cookies for advertising, and we do not use them to identify you personally.

You can change your choice at any time using the ‘Cookie settings’ link in the footer of any page. Declining also removes any analytics cookies already stored on your device. You can refuse or delete cookies through your browser settings as well, or stop Google Analytics collecting information about your visit by installing the browser opt-out add-on published by Google.

Depending on the circumstances, we process personal information because:

• it is necessary to perform a contract or take steps before entering into a contract;
• it is necessary for our legitimate business interests, provided those interests do not override an individual’s rights;
• we are required to process the information to comply with a legal obligation; or
• consent has been provided where consent is required.

Some projects require Curation Studio to process information on behalf of a client.

Where Curation Studio acts as a data processor, we process personal data only for the purposes of delivering the relevant services and in accordance with the client’s documented instructions and applicable contractual requirements.

We may use specialist contractors and technology providers where necessary to deliver our services. Appropriate confidentiality, data protection and security requirements are applied according to the nature of their involvement.

We do not sell personal information.

We may share information where reasonably necessary with:

• members of the Curation Studio team;
• specialist contractors and suppliers engaged in delivering our services;
• professional advisers, accountants and insurers;
• IT, hosting and technology providers;
• clients where required for the relevant project; and
• regulators, public authorities or other parties where required by law.

Access is limited according to the purpose for which the information is required.

Where a supplier processes personal data on our behalf, we expect appropriate confidentiality and data protection safeguards to be in place.

Where possible, we select systems and suppliers that provide appropriate safeguards for personal information.

If personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer complies with applicable data protection law, including the use of recognised safeguards where required.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet contractual, legal, accounting and regulatory requirements.

Retention periods may therefore vary according to the type of information and the relevant project or business relationship.

When information is no longer required, it will be securely deleted or disposed of in accordance with our data handling procedures.

Curation Studio takes appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.

Access to personal and confidential information is limited to individuals who require it for legitimate business purposes.

People working with Curation Studio are required to comply with applicable confidentiality, information security and data-handling requirements.

Depending on the circumstances, UK data protection law gives individuals rights in relation to their personal information, including the right to:

• request access to personal information;
• request correction of inaccurate or incomplete information;
• request deletion of personal information in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain processing;
• request transfer of personal information where applicable; and
• withdraw consent where processing is based on consent.

These rights are subject to certain legal conditions and exemptions.

To exercise a data protection right, please contact Curation Studio using the details below.

If you have concerns about how we have handled your personal information, please contact us first so that we can investigate and respond.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

For questions about this Privacy Notice or how Curation Studio handles personal information, please contact:

We may update this Privacy Notice from time to time to reflect changes to our business, services or legal obligations.

The latest version will be published on our website.