Privacy policy

1.1Curcle is operated by Curcle Technologies Limited, a company registered in England and Wales under company number 17399519. Our registered office is 124 to 128 City Road, London EC1V 2NX.

1.2For anything about your data, email support@curcle.uk. A person reads it.

1.3We have not appointed a Data Protection Officer, and we are not required to. The person responsible for data protection is the director of Curcle Technologies Limited, reachable at the address above.

2.1If you join the waitlist we collect: your email address; the name of your area; whether you ticked the optional updates box; the fact that you ticked the declaration about your age and that you live in the area, and when; for signups made before 18 October 2026, whether you confirmed your email address with a code, and when; and the date and time of your signup.

2.2Your postcode is typed into your browser and sent by your browser directly to postcodes.io, which returns the area it belongs to. The postcode never reaches our servers, is never stored, and is never logged by us. Only the area name is kept.

2.3Your IP address is counted against a short rate limit when you submit the form, so one connection cannot flood us. The counter expires within one hour and is never stored with your signup.

2.4Our hosting provider keeps short-lived operational logs of requests to the site, which can include IP addresses. We run no analytics and set no cookies, so there is nothing else.

3.1Your email and area, to tell you when Curcle is available where you live and to decide where to launch first: consent, Article 6(1)(a). You give it by submitting the form, and you can withdraw it at any time by asking us to delete your details.

3.2Occasional news about Curcle, only if you ticked the separate updates box: consent, Article 6(1)(a). The box is never pre-ticked, and you can withdraw at any time.

3.3The residency and age declaration and its timestamp, and for older signups the confirmation status and its timestamp: legitimate interests, Article 6(1)(f). Our interest is keeping the counts honest, so that each area’s count means real, willing people, and being able to show that a signup was genuinely made.

3.4IP-based rate limiting: legitimate interests, Article 6(1)(f). Our interest is protecting the service from abuse and flooding. The counter is short-lived and identifies a connection, not a person.

3.5Hosting logs: legitimate interests, Article 6(1)(f). Our interest is running a secure, working website.

4.1There is no code to confirm: a signup is kept from the moment you submit the form. Signups started before 18 October 2026 that were never confirmed with a code are still deleted automatically seven days after they were made.

4.2A signup is kept until we have emailed you that Curcle is live in your area, and is deleted within three months after that. If you ask us to delete it sooner, we do.

4.3If Curcle has not launched anywhere within 24 months of your signup, we delete the list rather than keep it indefinitely.

4.4Rate-limit counters expire within one hour. Hosting logs are short-lived operational records kept by our hosting provider, not an archive we build.

5.1Vercel hosts the website. Requests to the site pass through it, including IP addresses in its short-lived operational logs.

5.2Upstash stores the signup list described above, on our behalf.

5.3Postcodes.io receives your postcode directly from your browser to look up your area. It gets no name, no email, and nothing else that identifies you from us.

5.4All three act as processors or independent services with their own duties. We do not sell your details or share them with anyone else, and we run no analytics or advertising on this website.

6.1Vercel is a US company, and Upstash can host databases in several regions, so personal data may be processed outside the UK.

6.2Where a transfer out of the UK happens, it relies on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework where the provider is certified.

6.3We choose the closest sensible storage region available and keep the data with these named providers only.

7.1Access: ask what we hold about you and get a copy.

7.2Rectification: ask us to correct anything wrong.

7.3Erasure: ask us to delete your details, and we do.

7.4Restriction: ask us to hold your data but stop using it while something is sorted out.

7.5Portability: ask for your data in a machine-readable form to take elsewhere.

7.6Objection: object to any use we base on legitimate interests, and we stop unless the law lets us continue.

7.7Withdrawing consent: withdraw it at any time for anything based on it, without affecting what happened before.

7.8To use any of these, email support@curcle.uk. We do not make you fill in a form, and we will not make it hard.

8.1If you think we have handled your data badly, email support@curcle.uk with the word complaint in the subject and tell us what happened. We will acknowledge your complaint within 30 days of receiving it, as the Data (Use and Access) Act 2025 requires, and answer it properly as quickly as we can.

8.2You also have the right to complain to the Information Commissioner's Office at any time: ico.org.uk, telephone 0303 123 1113, or Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

9.1We do not profile you. We do not analyse or infer anyone's political views, and we never will.

9.2We make no automated decisions about you with legal or similarly significant effects. The only automation is mechanical: saving your signup when you submit the form, and deleting signups left unconfirmed by the old code step after seven days.

10.1Providing data is not a requirement of any contract or law. You can read everything on this site without giving us anything.

10.2The only consequence of not providing an email address is that we cannot count your area or tell you when Curcle arrives, because there would be nobody to tell.

11.1You will need to be 16 or over to have a Curcle account. The signup on this website asks you to confirm your age in a declaration; we do not collect your date of birth, deliberately, because we do not need it.

11.2Our defaults are the most private option for everyone, and we profile nobody. If we learn a signup came from someone below the age the declaration asks for, we delete it.

12.1When we change this policy we update the date at the top and add a line to the changelog below. If a change matters, and you have a signup with us, we will email you about it.

12.2This policy sits alongside the terms of service.