Privacy Notice
Last updated: September 2026
Who we are
Curious Cubbies, trading as Curious Cubbies (https://curiouscubbies.co.uk), is the data controller for the personal data described in this notice. You can reach us at info@curiouscubbies.co.uk.
What we collect and why
- Optional account data (email address, password hash, display name) — to create and secure your account when you choose to save favourites. Legal basis: performance of our contract with you.
- Usage data (which activities you open, favourites you save, basic technical logs such as IP address and browser type) — to provide the favourites feature, keep the service secure and improve the resource. Legal basis: contract and our legitimate interests in security and improvement.
- Support messages you send us — to answer you. Legal basis: legitimate interests.
We do not knowingly collect personal data about children.
Who we share it with
- Service providers who host the site, database, authentication and image storage on our behalf, under contract and only on our instructions.
- Professional advisers (legal, accounting) and authorities where we are legally required to disclose.
We never sell your personal data.
International transfers
Some of our providers process data outside the UK/EEA. Where that happens we rely on UK adequacy regulations or Standard Contractual Clauses with appropriate safeguards.
How long we keep it
We keep account data for as long as your account is open, then only as long as reasonably needed for security, legal or support purposes. Usage data is kept for as long as it is useful for security and improvement, then deleted or anonymised.
Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or port your data, to object to processing based on legitimate interests, and to withdraw consent where we rely on it. Email info@curiouscubbies.co.uk and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Security
We use appropriate technical and organisational measures including encryption in transit, hashed passwords, row-level database access controls and restricted administrative access.
Cookies and similar technologies
We use strictly necessary cookies and local browser storage to keep you signed in, remember your place on a page, and remember useful preferences. We do not use advertising cookies. You can clear or block cookies in your browser, but parts of the site may stop working.
