Privacy Policy

What we collect

We collect very little. Here is the list.

If you subscribe to our newsletter

Your email address. We use it only to send you the newsletter and any follow-up content you opt into.

When you visit the site

Our hosting provider records standard server logs: IP address, user agent, request paths, and timestamps. We use these for security, debugging, and performance. We do not tie them to individual identities.

When you take the matchmaker quiz

Your answers stay in your browser. We do not send or store quiz answers on our servers unless you explicitly choose to email the results to yourself or your team.

Analytics

We may use privacy-respecting analytics to understand how the site is used in aggregate. Analytics data is anonymous and cannot be used to identify you personally.

When you submit the contact form

When you submit the contact form, your IP address is held briefly in a rate-limit cache and checked against Vercel's bot-detection service. Both checks run only on form submission. They have no advertising function, set no tracking cookies, and your data goes nowhere beyond what is needed to block spam.

How we use your information

• Newsletter email: to send you the newsletter and, if you opt in, related updates.
• Server logs: to keep the site secure and working.
• Analytics: to understand aggregate patterns (which pages get read, which tools get clicked).

We do not sell your data. We do not share it with anyone except the service providers listed below, and only to the extent they need it to provide their service.

Legal basis for processing

Under UK GDPR and EU GDPR, we rely on:

• Consent for the newsletter. You can withdraw consent at any time by unsubscribing.
• Legitimate interest for server logs and aggregate analytics, specifically to keep the site secure and to improve it for future visitors.

Who processes your data

The following third parties process data on our behalf:

• Vercel Inc. (United States): hosting and server logs.
• Beehiiv (United States): newsletter delivery, once integrated. Beehiiv receives your email address and subscription status only.
• Analytics provider (to be confirmed): aggregate, anonymous analytics only.

Transfers to the United States rely on the EU-US Data Privacy Framework, standard contractual clauses, or equivalent safeguards as required by UK and EU law.

Your rights

Under UK and EU data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Have your data deleted.
• Object to processing or ask us to restrict it.
• Receive your data in a portable format.
• Withdraw consent for the newsletter at any time.
• Lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

To exercise any of these rights, send us a message via the contact form.

Data retention

• Newsletter email addresses are held until you unsubscribe, plus a short period for audit and compliance records.
• Server logs are retained for a short period by our hosting provider (typically 30 days).
• Analytics data is aggregated and contains no personal identifiers.

Cookies

Our use of cookies is explained on our Cookie Policy page.

Children

CurateSuite is intended for accounting firm decision-makers and other professional audiences. The site is not directed at anyone under 18.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page will change when we do. Significant changes will be flagged on the homepage for at least 30 days.

Contact

Questions or concerns: send us a message via the contact form.