Privacy notice
Last updated: 25 October 2026
This notice explains what personal information Curio Digital collects, why, and what rights you have. It covers our website (curiodigital.co.uk) and our experiences (play.curiodigital.co.uk).
Who we are
Curio Digital is responsible for your personal information (the "data controller"). You can contact us about anything in this notice at hello@curiodigital.co.uk.
The short version
- Our websites use no cookies, no analytics, no advertising and no tracking.
- Our experiences need no account. What you type stays on your own device.
- We only hold personal information you choose to send us, for example when you email us.
- We never sell personal information.
When you contact us
If you email us, we receive your email address, your name if you include it, and whatever you write. We use this to reply and, if you are a venue or organisation, to discuss working together.
Our lawful basis is our legitimate interest in responding to enquiries or, where relevant, taking steps at your request before entering into a contract. We keep enquiries only for as long as the conversation needs. If we go on to work together, we keep business records for as long as the law requires (for example for tax purposes).
When you visit our websites
Our websites are hosted by Amazon Web Services (AWS), which delivers the pages to you through its global network. Like any web server, this involves processing your device's IP address and basic browser information so that pages can be sent to you, and AWS may keep short-term technical and security records. We have not turned on visitor logging or analytics. AWS acts on our behalf under its data processing terms, and some of its delivery network is outside the UK, protected by the safeguards in those terms.
Our fonts and images are served from our own websites, so your visit isn't shared with font or analytics services.
When you play an experience
Our experiences don't need an account and don't send anything you do back to us. If you type a name (for your certificate) or make progress, it is saved only in your browser's own storage on your device, so you can carry on later. You can remove it at any time with "Start again" or by clearing your browser's data for play.curiodigital.co.uk.
So that an experience keeps working where there's no signal, your browser also saves a copy of that experience's own files (its words, pictures and code) on your device. These files contain no information about you, nothing is sent back to us, and clearing your browser's data removes them.
Many of our players are children. Our experiences are designed in line with the Information Commissioner's Office Age Appropriate Design Code: we collect no personal information from players, use no profiling or tracking, and nothing is shared publicly.
Who we share information with
Only the service providers we need to run the business, for example our hosting provider (AWS) and our email provider, and only for that purpose. We don't sell or rent personal information to anyone.
Your rights
Under UK data protection law you can ask to see the personal information we hold about you, and ask us to correct, delete or restrict it, object to how we use it, or receive a copy to take elsewhere. To do any of these, email hello@curiodigital.co.uk. We'll reply within one month.
If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
Changes to this notice
If we change how we handle personal information, for example by adding a contact form or analytics, we'll update this notice and the date at the top.