1. Data Controller Identification

Curiositypoppio Studio Ltd ("Curiositypoppio", "we", "us", or "our") acts as the Data Controller responsible for the processing of your personal information collected via the website curiositypoppio.click.

Registered Entity: Curiositypoppio Studio Ltd
Company Registration Number: 13894210
Registered Office: 44 Chancery Lane, Bloomsbury, London, WC2A 1JE, United Kingdom
Designated Data Protection Contact: [email protected]

2. Categories of Information Collected

We gather personal data when you voluntarily communicate with our architectural studio or interact with our online guides:

  • Direct Contact Data: When completing our inquiry form, you provide your name, email address, chosen project scope, and bespoke design message.
  • Technical and Network Telemetry: Log files, browser type, device resolution, operating system, pages visited, time spent per guide, and IP address (anonymized prior to persistent aggregation).
  • Consent State Records: Explicit records of cookie choices submitted via our consent banner, retained in local storage to preserve your preference history.

3. Legal Bases for Data Processing (GDPR Article 6)

We rely on specific legal grounds to process your information:

  • Consent (Art. 6(1)(a)): For non-essential analytics and tracking cookies activated only after affirmative acceptance.
  • Contractual & Pre-Contractual Steps (Art. 6(1)(b)): To formulate spatial design proposals and respond directly to your studio consultation inquiries.
  • Legitimate Interests (Art. 6(1)(f)): Maintaining server security, diagnosing network anomalies, and improving architectural layout performance.
  • Legal Obligation (Art. 6(1)(c)): Maintaining statutory accounting and business corporate records required under United Kingdom company legislation.

4. Third-Party Service Providers and Data Transfers

We do not sell, rent, or trade your personal information. We work with trusted infrastructure processors including cloud hosting facilities within the United Kingdom and the European Economic Area (EEA), secure email delivery relays, and analytical telemetries that comply with UK GDPR and Standard Contractual Clauses (SCCs).

5. Your Statutory Rights (GDPR & CCPA)

Under applicable UK GDPR, EU GDPR, and California Consumer Privacy Act regulations, you hold enforceable rights concerning your data:

  • Right of Access: You may request full copies of personal data stored concerning your identity.
  • Right to Rectification: You may request correction of erroneous or incomplete records.
  • Right to Erasure ("Right to Be Forgotten"): You may demand deletion of your records where ongoing processing lacks statutory justification.
  • Right to Restrict or Object: You can challenge processing conducted under our legitimate interests.
  • Right to Data Portability: You may obtain your submitted data in a structured, machine-readable format.
  • Non-Discrimination: Exercising your privacy rights will never result in altered service levels or degraded access to our resources.

To exercise any statutory right, contact our Data Protection Officer at [email protected]. We respond to verified requests within thirty calendar days.

6. Data Retention Horizons

Studio inquiry correspondence is retained for 24 months to assist ongoing architectural project continuity, after which personal identifying information is securely purged or irreversibly anonymized. Cookie preference tokens stored in your local browser automatically expire or reset after twelve months.

7. Supervisory Authority Contact

If you believe our data handling practices infringe upon your rights, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (ico.org.uk).