Privacy Policy

Last updated: 09 October 2024
 
Thank you for taking the time to read this Privacy Policy. This Privacy Policy applies to the personally identifiable information that Curve Limited or any of its affiliated entities (“Curve,” “we”, “us,” or “our”) collects or receives through our interactions with you, your use of our website curvecontracts.com or other websites that we link this Privacy Policy to (“Site”), your use of any Curve service, application, platform, and other products that display or link to this Privacy Policy, your registration or attendance to any of our demonstrations, webinars, or other events (collectively, “Services”). 


This Privacy Policy describes the information that we collect, how we use it, how we protect it, and the choices you can make about your information. If you do not agree with any of the terms of this Privacy Policy, you should immediately stop using our Services and the Site.



This Privacy Policy does not apply to personal information that has been aggregated and anonymized where such information is no longer capable of identifying a specific individual. This Privacy Policy does not apply to employees or job applicants.



Information We Collect


Curve collects the following types of personally identifiable information in the manner described below.





1. Information You Provide to Us. You may voluntarily provide us with personally identifiable information, including: (a) your name, email address, and any other information that you provide when you access the Site or Services, register to use the Site or a Service, or fill out forms that we make available via the Site or Services; (b) information that you provide to us when you contact us; or (c) any other information you voluntarily provide us while using the Site or Services, including documents, and document metadata.



2. Information We Collect Automatically. We automatically collect information that may personally identify you through tracking technologies (see the section “Cookies, Other Storage and Web Beacons” for more information). We collect the following types of information automatically through tracking technologies:



-Your Internet Protocol (IP) address;


-Domain name of your Internet service provider;


-Your approximate geographic location;


-The website you came from, the pages that you visit on the Site, the time of your visit to the Site and the page you visit after leaving the Site;


-Device identifiers, advertising identifiers or other unique identifiers;


-Information about your Internet connection, browser, or similar kinds of information; and


-Aggregated information that cannot be used to specifically identify you when you use or visit the Site or a Service that may be combined with information that does identify you.



3. Information We Collect from Other Sources. We may receive personally identifiable information from other sources, like third party data providers, public databases, joint marketing partners, referral or reseller partners, affiliate marketing programs, or similar third parties. This information may include mailing address, job title, email address, phone number, intent data, user behaviour data, Internet Protocol (IP) addresses, social media profiles, social media URLs, and customer profiles, for purposes of targeted advertising.



We may combine  the information we collect from or about you with information that we receive from other sources and use it in the manner described in this Privacy Policy.



How We Use Your Information



Curve uses the personally identifiable information that we collect for the following purposes:



The purposes for which you provided it, including provide you the Site or Service;


To administer and provide you with information about your account, including, updated Site or Service terms or for billing and accounting purposes;


To send you information about your relationship with us;


To host events, webinars, sweepstakes, or other promotional activities;


To inform you about upcoming events or webinars or new features, products, or services;


To develop new products, features and services;


To process and respond to your inquiries or comments;


To personalize and enhance your experience using the Site and Services;


To manually review your documents for the purposes of improving the Services, including, but not limited to, the quality and completeness of your document metadata and train our AI models;


To generate and review reports and data about our user base and service usage patterns;
To deliver targeted advertising to you;

To determine the effectiveness of our marketing and promotional campaigns; 

To compile aggregated and fully anonymized data for the purposes of improving and extending the Site or Services, including, but not limited to, securing the Site and Services and increasing the accuracy of machine learning classification models;
For legal reasons, including to carry out our legal obligations and enforce our rights, investigate misuse or misconduct, protect you or other third parties, to monitor, detect and prevent fraud, malicious activity, or for other privacy or security-related concerns; 

With your consent, to fulfil the purposes for which you provided the information, or in ways that we disclose to you when you provide the information; and


To administer, operate and improve the Site and Services and for internal business purposes.





How Your Information is Disclosed


Personally identifiable information may be disclosed to third parties in accordance with this Privacy Policy, and, if applicable, subject to the terms of your agreement with us if you are a Curve customer. You may choose not to share certain information as described in the "Your Choices Regarding Your Information" section below.



1. Third-Party Service Providers. We may use third-party service providers and business partners to perform functions in connection with the Site or Services. Examples include running our Services on cloud providers, using account management ticketing products, and sending you email and text notifications via messaging providers. The categories of third parties we may share personal information with are as follows:



-Ad Networks


-Cloud Computing Services


-Data Analytics Services


-Data Storage Service Providers


-Performance Monitoring Tools


-Retargeting Platforms


-Sales & Marketing Tools


-Testing Tools


-Website Hosting Service Providers



2. Business Partners. We may share your information with third party business partners, including referral partners, resale partners, joint marketing partners, or similar kinds of business partners.



3. Third Party Advertising, Social Media, or Analytics Services. We may use cookies, pixels, or other tracking technologies provided by third party advertising, social media or analytics providers, including, without limitation, Google, Facebook, or LinkedIn, these third parties may use the personally identifiable information that they receive from automatic tracking technology on our Site for their own purposes. Please see the section titled “Cookies, Other Storage, and Web Beacons” below for more information.



4. Business Changes. If we become involved in a merger, acquisition, sale of assets, bankruptcy, reorganization, dissolution, or other transaction or if the ownership of all or substantially all of our business otherwise changes, we may transfer your information to a third party or parties in connection therewith.



5. For Legal Purposes. We reserve the right to investigate fraud, abuse, illegal activities, violation of our policies or terms and conditions, or security incidents. We may disclose information about you to third parties if we have a good faith belief that such disclosure is reasonably necessary to:



-Take action regarding suspected illegal activities;


-Enforce or apply this Privacy Policy, our policies or terms and conditions;


-Comply with the law or guidance and cooperate with government or law enforcement officials or private parties;


-Protect our rights, reputation, safety, and property, or that of users or other third parties;


-Respond to claims and legal process (for example, subpoenas); and/or


-Protect against legal liability.



Cookies, Other Storage, and Web Beacons



We, along with our third-party service providers, third party advertising, social media, or analytics service providers, and business partners, use cookies, pixels, web beacons, and other tracking technologies on the Site and Services. These technologies are used to deliver the features and functionality of the Service and the Site, including tracking, analytics and personalization, and optimization of the Site and Services. We also use these tracking technologies on the Site for marketing purposes.



1. Cookies. Cookies are small bits of information that are transferred to and stored in separate files within your computer's browser. You can instruct your browser to stop accepting cookies. But if you do not accept cookies, you may not be able to use all portions or all functionality of the Site and Services. Persistent cookies remain on the visitor's computer after the browser has been closed. Session cookies exist only during a visitor's online session and disappear from the visitor's computer when they close the browser software.



2. Other Storage. Flash cookies (also known as local stored objects) are data files that can be created on your computer by the websites you visit and are a way for websites to store information for later use. Flash cookies are stored in different parts of your computer from ordinary browser cookies. You can disable the storage of flash cookies. For additional information about managing and disabling flash cookies, please visit http://helpx.adobe.com/flash-player/kb/disable-local-shared-objects-flash.html.



3. Web Beacons. Web beacons are small strings of code that provide a method for delivering a graphic image on a web page or in an email message for the purpose of transferring data. You can disable the ability of web beacons to capture information by blocking cookies.





4. Pixel Tags. We use "pixel tags," which are small graphic files that allow us and third parties to monitor the use of the Site and collect usage data. A pixel tag can collect information such as the IP address of the computer that downloaded the page on which the tag appears, the URL of the page on which the pixel tag appears, the time (and length of time) the page containing the pixel tag was viewed, the type of browser that retrieved the pixel tag, and the identification number of any cookie previously placed by that server on your computer. We use pixel tags, either provided by us or by third party advertisers, social media sites, third party affiliate partners or ad networks, to collect information about your visit, including the pages you view, the links you click and other actions taken in connection with our Site and use them in combination with our cookies. Pixel tags also enable social media providers and ad networks to serve targeted advertisements to you when you visit our or other websites.



Security


While we have implemented security measures to protect the information we process, we cannot guarantee against loss, theft and unauthorized use, disclosure, or modification. However, no transmission over the Internet or email is ever fully secure or error free. You should use caution whenever submitting information online and take special care in deciding what information you provide us.





Links to Other Sites



This Privacy Policy applies only to the Site and Services. The Site may contain links to third-party websites that we do not own or operate. We do not guarantee that we have endorsed or reviewed any links to third-party websites. The policies and procedures we describe here do not apply to third-party websites. We cannot control nor are we responsible for the privacy practices or content of these third-party websites. We suggest contacting these websites directly for information on their privacy policies and practices.



Your Choices Regarding Your Information



You have choices regarding the use of information on our Site and Services. You may have additional rights, as explained below, if you are a resident of Hong Kong, Singapore, the European Economic Area, or Switzerland.



1. Changing Your Information. You may log into the Service to modify certain profile information that you have provided at any time.



2. Email Communications. To change your information regarding email communications, please unsubscribe from the footer of any communication or contact us at privacy@curvecontracts.com.



3. Cookies, Other Storage, and Web Beacons. Please see the "Cookies, Other Storage, and Web Beacons" section above.



4. Closing Your Account. Subject to the terms of your agreement with us, you may close your Curve account by deleting your account within the Service settings, contacting your account administrator or contacting us at privacy@curvecontracts.com. Note that even if you request to close your Curve account, you may still have obligations under your subscription agreement with us.



5. Withdrawing Consent. If we have relied on your consent to process your personal information (which may be express and/or implied consent depending on the applicable law), you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us at privacy@curvecontracts.com.



6. Opting out of Marketing and Promotional Communications. You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us at privacy@curvecontracts.com. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to support requests, or for other non-marketing purposes.

Hong Kong Privacy Rights
 
This section applies to the collection, use, and disclosure of personal data in Hong Kong in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”) and other applicable Hong Kong privacy laws.
 
1. Collection, Use, and Disclosure of Personal Data. Curve will collect, use, and disclose your personal data only for purposes that are lawful, directly related to a function or activity of Curve, and for which you have provided consent, or where the collection, use, or disclosure is required or authorised under the PDPO or other applicable laws.
 
2. Purpose Limitation. We will only collect personal data that is necessary for the purposes we have identified and informed you about. Your personal data will not be used for any new purpose without obtaining your consent unless required or authorised by law.
 
3. Accuracy and Retention. We will take all reasonably practicable steps to ensure that the personal data we collect is accurate, up-to-date, and kept no longer than is necessary to fulfil the purposes for which it is collected. Once your personal data is no longer needed, we will take steps to ensure that it is securely deleted or anonymised.
 
4. Data Access and Correction Rights. Under the PDPO, you have the right to request access to and correction of your personal data held by us. To make such a request, please contact us at privacy@curvecontracts.com. We may charge a reasonable fee to cover the cost of complying with your access request.
 
5. Security of Personal Data. We will take all reasonably practicable steps to protect your personal data against unauthorised or accidental access, processing, erasure, loss, or use. Our security measures include physical, electronic, and procedural safeguards to protect your personal data.
 
6. Transfer of Personal Data Outside Hong Kong. If we transfer your personal data to places outside Hong Kong, we will take all reasonably practicable steps to ensure that your personal data is given a comparable level of protection to that provided under the PDPO.
 
7. Direct Marketing. We will not use your personal data for direct marketing purposes without your explicit consent. If you have given consent, you can withdraw it at any time by contacting us at privacy@curvecontracts.com.
 
8. Data Protection Officer. If you have any questions or concerns about our personal data protection policies and practices, please contact our Data Protection Officer at:
 
Email: privacy@curvecontracts.com
Address: Curve Limited, Unit B, 3/F, Kai Wan House, 146 Tung Choi Street, Mongkok, Kowloon, Hong Kong
Attention: Privacy Department.
 

Singapore Data Protection - Collection, Use, and Disclosure of Personal Data
 
This section applies to the collection, use, and disclosure of personal data in Singapore in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and other applicable Singaporean privacy laws.
 
1. Purpose Limitation. Curve will collect, use, and disclose your personal data only for purposes that a reasonable person would consider appropriate in the circumstances and for which you have provided consent or where the collection, use, or disclosure is required or authorised under the PDPA or other applicable laws.
 
2. Consent. By providing your personal data to us, you consent to the collection, use, and disclosure of your personal data in accordance with this Privacy Policy. Where consent is required for specific purposes, we will seek your consent at the appropriate time.
 
3. Withdrawal of Consent. You have the right to withdraw your consent for the collection, use, or disclosure of your personal data. To withdraw consent, please contact us at privacy@curve.legal. Upon receipt of your request, we will inform you of the likely consequences of withdrawing your consent, and we will cease to collect, use, or disclose your personal data unless permitted or required by the PDPA or other applicable laws.
 
4. Access and Correction. You have the right to request access to and correction of your personal data held by us. If you would like to access or correct your personal data, please contact us at privacy@curvecontracts.com. We may charge a reasonable fee for processing your access request.
 
5. Protection of Personal Data. Curve will make reasonable security arrangements to protect your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks.
 
6. Retention of Personal Data. We will retain your personal data only as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws. Once your personal data is no longer needed, we will take steps to ensure that it is securely deleted or anonymised.
 
7. Transfer of Personal Data Outside Singapore. If we transfer your personal data to countries outside of Singapore, we will take steps to ensure that your personal data receives a level of protection comparable to that provided under the PDPA.
 
8. Data Protection Officer. If you have any questions or concerns about our personal data protection policies and practices, please contact our Data Protection Officer at:
 
Email: privacy@curvecontracts.com
Address: Curve Consultants Pte. Ltd., 160 Robinson Road, #14-04 Singapore Business Federation Center, Singapore 068914
Attention: Privacy Department
 

EU Data Subject Rights


If you are a resident of Switzerland, the United Kingdom, or a country within the European Economic Area (EEA), you may have rights under European data protection laws regarding the processing of your personal information. You have the right to access the personal information that we process and, in some cases, you may have the right to ask that your personal information be corrected, erased, or transferred (subject to limitations under applicable law). You may also have the right to object to or request that we restrict the processing of your personal information. If we collect personal information based on your consent, you have the right to revoke your consent.



If your Personal Information has been submitted to us by a subscriber and you wish to exercise any rights you may have under applicable data protection laws, please inquire with the applicable subscriber directly.





Residents of the United Kingdom, any country within the EEA, or Switzerland may file a complaint with a data protection authority. The data protection authority will require you to first attempt to resolve any complaint with us. Any other dispute arising out of or related to this Privacy Policy will be handled in accordance with the dispute resolution process indicated in our terms of service or website terms, as applicable.



1. Lawful Basis. If you reside in the European Economic Area or Switzerland (collectively the "EU"), where we are the data controller we rely on the following lawful grounds under the General Data Protection Regulation, the United Kingdom General Data Protection Regulation, or the Swiss Data Protection Act (collectively referred to in this Privacy Policy as "GDPR") to process (collect, store, and use) your personal information: (a) it is necessary for the performance of a contract with you; (b) our or a third-party’s legitimate business interest; (c) your consent; or (d) our vital interests. Our subscribers determine the lawful grounds for the processing of personal information submitted through their use of our Services and we limit such processing to our subscribers’ instructions.



2. Data Transfer Notice. Curve Limited is incorporated in Hong Kong and operates primarily online without a physical presence in any specific jurisdiction. We transfer your personal information for processing to locations outside the European Economic Area (EEA), including but not limited to Singapore. We make these transfers in the absence of an adequacy decision because it is necessary for the performance of a contract with you, or with your explicit consent. We also use model contractual clauses (or the then-lawful data transfer mechanism recognized under GDPR or other applicable law) with our subscribers to provide adequate protection for the transfer and processing of your personal information. We also use the model contractual clauses with our subprocessors to provide adequate protection for the transfer and processing of your personal information.



3. Individual Rights and Data Requests. Depending on your location, your jurisdiction, and subject to applicable law, you may have the rights below with regard to the Personal Information we control about you. We will respond to your requests within the appropriate timeline under applicable law:



-The right of access means that you have the right to request that we disclose what personal information we have collected, used and disclosed about you;‍

-The right of deletion means that you have the right to request that we delete personal information collected or maintained by us, subject to certain exceptions.

-The right to non-discrimination means that you will not receive any discriminatory treatment when you exercise one of your privacy rights;

-You can also ask us to correct or update your personal information, object to the processing of your Personal Information, ask us to restrict processing of your personal information or request the portability of your Personal Information;

-While you cannot opt out of service-related emails if you are an account holder, as this is an essential part of the Services, you have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you, or you can contact us using the contact information below;

-If our lawful basis is your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent; and

-You have the right to complain to a data protection authority about our collection and use of your personal information.



4. Exercising Your Rights. We provide features in our Services to allow our subscribers to respond directly to data subject requests to access, transfer, rectify or erase their personal information, or to restrict or object to the processing of their personal information. You may also contact us at privacy@curvecontracts.com to request access to, transfer of, and rectification or erasure of your personal information, or restriction of processing, or to object to processing of your personal information, to the extent that we process such information on our own behalf. Please specify the nature of your request and the information that is the subject of your request. We may require you to submit additional information necessary to verify your identity and status as an EU data subject. If we are processing your personal information for a subscriber, we will forward your request to our subscriber and assist the subscriber in responding within 30 days. If you are a visitor to our Site, we will respond to your request directly within 30 days. If we are processing your personal information based upon the lawful ground of your consent, you have the right to withdraw your consent for such processing at any time without affecting the lawfulness of processing based on consent before it is withdrawn. To withdraw consent, please email us at privacy@curvecontracts.com.



5. Retention. At a minimum and to the extent allowed under applicable law, we will retain your personal information for as long as necessary for the purpose in which it was collected, such as to deliver a Service, perform our obligations under a contract, for our or a third party's legitimate interest, or your consent.



Financial Incentives



Financial incentives are programs, benefits, or other offerings, including payments to consumers as compensation, paid in exchange for the disclosure, deletion, or sale of personal information about them. We do not offer financial incentives to a consumer for the disclosure, deletion, or sale of their personal information.



Children



We do not knowingly collect personal information from an individual under the age of 16. If you are under the age of 16, please do not submit any personal information through the Site. If you have reason to believe that we may have accidentally received personal information from an individual under the age of 16, please contact us immediately at privacy@curvecontracts.com.

Data Retention



How long we retain your information depends on the type of data and the purpose for which we process the data. We will retain your information (a) for the period necessary to fulfil the purposes outlined in this Privacy Policy and our agreement with you, or (b) until you ask us to delete such information in accordance with the instructions set forth in this privacy policy, unless (c) a longer retention period is required by applicable law.



Subscriber Rights



If you have purchased a subscription to a Service that is subject to and governed by a separate agreement between you and Curve, to the extent that there's a direct conflict between this Privacy Policy and the terms of that agreement, the terms of that agreement will control and supersede this Privacy Policy.



Changes to Privacy Policy



We reserve the right to update or modify this Privacy Policy at any time and from time to time to ensure it's easy to understand, aligns with our current practices and operations, and comply with continually evolving laws and regulations. Please review this Privacy Policy periodically, and especially before you provide any information. Your continued use of our Site and Services constitutes your agreement to this Privacy Policy and any updates to this Privacy Policy. The date this Privacy Policy was last updated and a change log are provided below.

How to Contact Us



If you have any questions about our Privacy Policy or requests regarding your personal information, please email privacy@curvecontracts.com or you may also contact us by mail at Curve Limited, Unit B, 3/F, Kai Wan House, 146 Tung Choi Street, Mongkok, Kowloon, Hong Kong, Attention: Privacy Department.