Placeholder — have a lawyer review before launch
This page is a starting draft, not legal advice. Everything in [BRACKETS] still needs filling in, and the whole text needs checking by a qualified lawyer for each country you serve.
legal / privacy
Privacy policy
Last updated: [DATE]
This policy explains what personal information Curious Context Labs ("we", "us") collects through this website, why, and what you can ask us to do with it. We keep it short and plain on purpose.
Who we are
Curious Context Labs is an AI consultancy and build studio. The business is run by [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS]. For this website, we are the data controller for the personal information described below.
What we collect through the contact form
When you send the contact form, we collect:
- your name;
- your work email address;
- your company name;
- what you write about the help you would like.
If you book a call through our calendar tool, that tool also receives your name, email and chosen time. Please don't include sensitive personal information, such as health details, in the form.
What we collect automatically
Our hosting provider records basic technical data, such as IP address, browser type and pages requested, to keep the site secure and working. [ANALYTICS TOOL AND COOKIES, IF ANY]
How we use it
- to reply to your message and arrange the call you asked for;
- to prepare for that call and follow up on it;
- to keep a record of our conversations if you become a client;
- to keep the website secure and fix problems.
We do not sell your information, and we do not use what you send us to train AI models. Our legal basis under the GDPR and UK GDPR is our legitimate interest in replying to enquiries, or steps taken at your request before entering a contract. [CONFIRM LAWFUL BASIS]
Processors we use
We share your information only with service providers that help us run the business, such as:
- website hosting: [HOSTING PROVIDER];
- form handling: [FORM PROVIDER];
- calendar booking: [BOOKING TOOL];
- email: [EMAIL PROVIDER].
Our team is in India, and some providers store data in other countries. Where data leaves the UK, EU or Australia, we rely on appropriate safeguards such as standard contractual clauses. [CONFIRM TRANSFER MECHANISMS]
How long we keep it
We keep enquiries that don't lead to work for [RETENTION PERIOD], then delete them. If you become a client, we keep records for as long as the contract and the law require.
Your rights
Depending on where you live, you can ask us to:
- tell you what information we hold about you and give you a copy;
- correct it if it is wrong;
- delete it;
- stop or limit how we use it, or object to it;
- send it to you or another company in a usable format.
UK and EU: these rights come from the UK GDPR and the EU GDPR. You can also complain to the UK Information Commissioner's Office (ICO) or your local data protection authority.
Australia: the Privacy Act 1988 and the Australian Privacy Principles give you the right to access and correct your information. You can complain to the Office of the Australian Information Commissioner (OAIC) if you are not happy with our answer.
United States: if you are a California resident, the CCPA (as amended by the CPRA) gives you the right to know, delete and correct your information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined. [CHECK OTHER STATE LAWS]
We will not treat you differently for using any of these rights.
Security
We limit access to your information to the people who need it and use providers with business-grade security. No system is perfectly secure, so please tell us straight away if you think something has gone wrong.
Contact us
To use any of your rights or ask a question about this policy, email us at [EMAIL]. We will reply within [RESPONSE TIME].
If we change this policy, we will update the date at the top of this page. See also our terms of use.