Privacy Policy

What we collect

We collect very little. Here is the list.

If you subscribe to our newsletter

If you subscribe to our newsletter, we collect your email address only. Sign-up forms appear on the homepage, article pages, tool pages, after matchmaker results, and on the poster download. Delivery is by Beehiiv (United States) with double opt-in: you get a confirmation email before any issue is sent. Your address is used only for the newsletter, and every issue includes an unsubscribe link.

When you visit the site

Our hosting provider records standard server logs: IP address, user agent, request paths, and timestamps. We use these for security, debugging, and performance. We do not tie them to individual identities.

When you take the matchmaker quiz

Your quiz answers stay in your browser and are never sent to our servers. If you choose to email your results, we pass your email address and the matched tools to Resend to deliver that email, then keep no copy. The same form has an optional newsletter sign-up; if you check it, you are subscribed, and if you leave it blank, nothing is shared.

Analytics

We use Google Analytics 4 (Google LLC, United States) to count page views and see which tools, filters, and articles get used. Analytics data is aggregate only. Nothing is stored in your browser until you click Accept on the cookie banner; before that Google receives no cookies. IP addresses are anonymized, no advertising features are used, and data is not used for ads or cross-site tracking. See our Cookie Policy.

When you submit the contact form

When you send a message through our contact form, we collect your name, email address, topic, and message. The message is delivered to our inbox as an email through Resend (Resend, Inc., United States), and Resend also sends an automatic confirmation email to the address you gave. Your IP address is held in a short-lived cache (Upstash, United States), to limit spam, that expires within one hour and is not linked to the message. Nothing else is stored and no tracking cookies are set.

How we use your information

• Newsletter email: to send you the newsletter and, if you opt in, related updates.
• Server logs: to keep the site secure and working.
• Analytics: to understand aggregate patterns (which pages get read, which tools get clicked).
• Contact form messages: to reply to you
• Matchmaker email: to send the comparison you asked for

We do not sell your data. We do not share it with anyone except the service providers listed below, and only to the extent they need it to provide their service.

Legal basis for processing

Under UK GDPR and EU GDPR, we rely on:

• Consent: newsletter, analytics cookies, matchmaker results email. Withdraw any time (unsubscribe, reject/clear cookies, or ask us)
• Legitimate interest: server logs, spam prevention, answering messages you send us

Who processes your data

The following third parties process data on our behalf:

• Vercel Inc. (United States): hosting, server logs, bot detection on the contact form
• Beehiiv (United States): newsletter delivery; receives email address + subscription status
• Google LLC (United States): Google Analytics 4; aggregate usage data only after consent; IP anonymized
• Resend, Inc. (United States): sends contact-form emails, confirmation emails, matchmaker results emails; receives the email address and message content needed to send them
• Upstash (United States): one-hour cache of IP addresses for contact-form rate limiting

Transfers to the United States rely on the EU-US Data Privacy Framework, standard contractual clauses, or equivalent safeguards as required by UK and EU law.

Your rights

Under UK and EU data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Have your data deleted.
• Object to processing or ask us to restrict it.
• Receive your data in a portable format.
• Withdraw consent for the newsletter at any time.
• Lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

To exercise any of these rights, send us a message via the contact form.

Data retention

• Newsletter email addresses are held until you unsubscribe, plus a short period for audit and compliance records.
• Server logs are retained for a short period by our hosting provider (typically 30 days).
• Analytics data is aggregated and contains no personal identifiers.
• Contact form messages: kept in our mailbox while we handle them and for a reasonable period afterwards for records
• Rate-limit IP entries: expire automatically within one hour

Cookies

Our use of cookies is explained on our Cookie Policy page.

Children

CurateSuite is intended for accounting firm decision-makers and other professional audiences. The site is not directed at anyone under 18.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page will change when we do. Significant changes will be flagged on the homepage for at least 30 days.

Contact

Questions or concerns: send us a message via the contact form.