At Curtlina, accessible via www.curtlina.com, we are committed to maintaining the confidentiality, integrity, and lawful processing of personal data collected from our visitors and customers within the United Kingdom and Europe. This Privacy Policy outlines our practices regarding data collection, operational usage, and individual statutory rights.
1. Data Controller
For the purposes of the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, the sole Data Controller responsible for your personal information is:
- Brand Name: Curtlina
- Registered Office Address: 50 Conway Rd, Colwyn Bay, LL29 7LD, United Kingdom
- Official Correspondence Email: blackout@curtlina.com
- Direct Inquiry Telephone: +44 1492 533138
2. Information We Collect and Lawful Basis
We collect personal data only when necessary to fulfill your orders, manage customer communication, or meet legal obligations. This information includes:
- Identity & Contact Data: First name, last name, billing address, delivery address, email address, and telephone number.
- Transactional Data: Details regarding payments to and from your account, and specifics of products purchased from our facility.
Our lawful basis for processing this data includes the performance of a commercial contract with you and compliance with statutory legal obligations within the UK and Europe.
3. Payment Processing and Third-Party Transfer
To complete your commercial transactions, we utilize independent, industry-standard third-party service providers.
- Payment Processor: All financial transactions executed on our website are handled directly by our authorized payment provider, Stripe.
- Data Minimization: Curtlina does not store, view, or retain your complete credit card numbers or financial credentials on our internal servers. Your transactional data is transmitted directly to Stripe via secure, encrypted protocols to facilitate payment authorization. Stripe handles this data in accordance with their independent privacy standards and Payment Card Industry Data Security Standards (PCI-DSS).
We do not sell, trade, or transfer your personally identifiable information to unauthorized external entities. Data sharing is strictly restricted to essential fulfillment tasks managed under our direct brand supervision.
4. Data Security
We implement appropriate technical and administrative protocols designed to protect your personal data against unauthorized access, alteration, or disclosure. Please note that while we employ recognized commercial measures to mitigate operational risks, no method of electronic transmission or digital storage is entirely infallible; consequently, we maintain standard protective practices without offering absolute or unalterable warranties.
5. Data Retention Period
In strict compliance with United Kingdom and European commercial and fiscal regulations, we do not retain personal information longer than necessary:
- Transactional & Fiscal Records: Personal data linked to commercial transactions, invoice details, and contractual agreements is retained for a standard duration of 6 years following the end of the financial year in which the transaction occurred. This timeframe satisfies statutory UK tax and corporate reporting mandates (HMRC).
- Customer Correspondence: General inquiries, emails, and telephone logs are retained for up to 2 years to ensure ongoing administrative consistency and quality support.
Upon the expiration of these statutory periods, your personal data is permanently deleted or anonymized.
6. Your Statutory Rights
Under UK and European data protection laws, individuals possess specific legal rights regarding their personal data, including:
- The right to request access to the personal data we hold.
- The right to request the rectification of inaccurate or incomplete information.
- The right to request the erasure of personal data under specific statutory conditions.
- The right to object to or restrict specific processing frameworks.
To exercise any of these established rights, please submit a formal written request to our official correspondence email: blackout@curtlina.com.