Privacy Policy

Effective date: August 6, 2026.

1. Scope and controller

This Privacy Policy applies to curtydigital.com, its contact form and related communications. Curty Digital LLC is the controller responsible for the personal information described here:

• Curty Digital LLC
• 629 Maple Valley Drive - 524, Farmington, MO 63640-1951, USA
• Email: [email protected]
• Phone: +1 (573) 271-5454
• Fax: +1 (573) 915-5243

Client projects, hosted systems and services governed by a signed agreement may be subject to additional contractual privacy and security terms.

2. Information we collect

• Enquiry information: name, email address, optional phone number, country, message, selected language and acknowledgement of the Privacy Policy.
• Communications: email content, replies and delivery metadata generated when we respond to an inquiry.
• Technical and security data: IP address, browser or device information, timestamps, request headers, page requested and anti-abuse signals processed by our hosting and security providers.
• Consent preference: whether optional analytics was allowed or declined, together with the preference version and dates stored locally in the browser.
• Optional tag data: after analytics consent, Google Tag Manager may process standard HTTP request logs and diagnostics needed to deliver and monitor the tag-management service.

Please do not submit passwords, payment-card details, government identifiers, health data or other sensitive or regulated information through the public form.

3. Purposes and legal bases

Where data-protection law requires a legal basis, we rely on:

• Requested steps or contract: to review the inquiry, communicate with you, prepare a proposal and provide the requested transactional confirmation.
• Legitimate interests: to follow up on a genuine business inquiry, maintain records, protect the site and form, prevent spam or fraud, troubleshoot delivery and improve service reliability.
• Consent: to load optional analytics through Google Tag Manager. Consent may be refused or withdrawn without affecting access to the site or contact form.
• Legal obligations and claims: to comply with applicable law and establish, exercise or defend legal rights.

The contact form does not subscribe you to a marketing list. Promotional email, if introduced, will use the consent or other lawful basis required in the recipient's jurisdiction and will provide an opt-out where required.

4. Current providers and recipients

• Cloudflare: Pages/Functions hosting and Turnstile anti-bot verification.
• Mailjet / Sinch Email: transactional email delivery under its privacy documentation. One notification is sent to [email protected] and one autoresponse to the address entered by the visitor. Both messages use [email protected] as sender.
• Google Tag Manager: optional tag management, loaded only after analytics consent. Google states that GTM standard HTTP request logs are deleted within 14 days and describes its practices in its data privacy and security notice.

The public website currently has no database. Enquiries are delivered by email and are not currently written to the planned CRM.

5. Integrations not currently active

Google Analytics and Meta Business Tools, including Meta Pixel, are not approved as active production tags at this policy date. A Curty Digital CRM hosted on company-controlled VPS infrastructure in Germany is also planned but is not connected to the public form. Before any of these services begins processing visitor data, we will update the applicable notice, document the data flow and retention, configure required consent controls and review the provider or infrastructure safeguards.

6. Sharing and sale of information

We disclose information only to the providers needed to operate the website and respond to inquiries, to professional advisers under confidentiality, in a lawful business reorganization, or when required to comply with law or protect rights and safety. Curty Digital does not sell personal information. At this policy date, we do not share personal information for cross-context behavioral advertising or use contact-form data for targeted advertising.

7. International processing

Curty Digital is established in the United States. Cloudflare, Google and Sinch/Mailjet may process information in the United States, the European Economic Area and other locations described in their documentation. Where applicable law restricts international transfers, we rely on an adequacy decision, an applicable Data Privacy Framework certification, standard contractual clauses or another recognized transfer mechanism made available by the relevant provider. You may request additional information by contacting us.

8. Retention

• Enquiries that do not become client engagements are retained for up to 24 months after the last meaningful interaction, unless a shorter period is requested or a longer period is required for security, legal obligations or claims.
• If an inquiry becomes a client relationship, related records are retained for the engagement and the applicable contractual, tax, accounting and limitation periods.
• The optional-analytics preference is stored in the browser for 12 months and is then requested again.
• Provider security, delivery and diagnostic records follow the provider's documented settings and retention periods, subject to our contractual controls where available.

Deletion from backups may occur during the provider's ordinary backup lifecycle. We may retain de-identified information that can no longer reasonably identify an individual.

9. Your privacy rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or a copy of your information; object to certain processing; withdraw consent; or opt out of sale, targeted advertising or qualifying sharing. You may also have the right to appeal a denied request and to complain to a competent supervisory authority, including the Spanish Data Protection Agency where relevant.

Send requests to [email protected]. We may request information reasonably necessary to verify identity and authority. We will respond within the period required by applicable law and will not discriminate for exercising a privacy right.

10. Required information and automated decisions

Name, email, message and the form acknowledgement are required to submit an inquiry; without them, we cannot process the request. Phone and country are optional. Curty Digital does not use the website data described in this policy to make decisions based solely on automated processing that produce legal or similarly significant effects.

11. Security and children

We apply reasonable technical and organizational safeguards appropriate to the information and risk, including encrypted transport, input validation, anti-bot verification, restricted configuration secrets and security headers. No internet service can guarantee absolute security.

This B2B website is not directed to children and we do not knowingly collect personal information from anyone under 18 through it. Contact us if you believe a minor submitted information so we can review and delete it where appropriate.

12. Changes and contact

We may update this policy when our services, providers, integrations or legal obligations change. The effective date identifies the current version. Material changes will be communicated through the website or another appropriate channel when required.

Privacy questions and requests should be sent to [email protected] or to Curty Digital LLC at 629 Maple Valley Drive - 524, Farmington, MO 63640-1951, USA.