1. INFORMATION WE COLLECT

1.1 Personal Information You Provide

We may collect personal data that you voluntarily provide when creating an account or using our services, including:

• Full name

• Email address

• Phone number (optional)

• Billing information

• User account credentials

• Digital content uploaded for verification (images, video, audio, documents, text)

We collect only data necessary for service delivery (data minimisation principle – Article 5(1)(c) UK GDPR).

1.2 Automatically Collected Technical Data

When you access our website, limited technical information may be processed, including:

• IP address (processed for security and fraud prevention)

• Device and browser type

• Operating system

• Basic server logs

We do not deploy analytics, profiling, or marketing tracking technologies without explicit consent.

1.3 Content Verification & Evidence Data

In order to provide digital verification services, we process:

• File metadata

• Cryptographic hash values

• AI similarity and duplication analysis results

• Blockchain transaction identifiers

• Human reviewer evaluation notes

Personal data is never stored directly on-chain.

Only hashed, non-reversible verification data is recorded.

 

2. HOW WE USE YOUR INFORMATION

We process personal data strictly for the following purposes:

• Account creation and management

• Digital content authentication and verification

• Generation of cryptographic and blockchain-based evidence records

• Human-in-the-loop review where required

• Detection of unauthorized usage

• Incident reporting and enforcement support (upon your request)

• Platform security and fraud prevention

• Service improvement and technical optimisation

• Essential system notifications

We do not sell personal data.

We do not engage in behavioural profiling or advertising-based monetisation.

​

3. LEGAL BASIS FOR PROCESSING

Under UK GDPR, we rely on the following lawful bases:

• Article 6(1)(b) – Contractual necessity

  (Service provision, account management, verification processes)

• Article 6(1)(f) – Legitimate interests

  (Fraud prevention, platform security, content authenticity protection)

• Article 6(1)(c) – Legal obligation

  (Where compliance with legal duties is required)

• Article 6(1)(a) – Consent

  (Non-essential cookies or optional features)

Where consent is required, it is obtained explicitly and can be withdrawn at any time.

​

4. DATA RETENTION

We retain personal data only for as long as necessary for:

• Service provision

• Legal compliance

• Enforcement support

Verification hashes recorded on blockchain cannot be altered or deleted due to the nature of distributed ledger technology.

Account data may be deleted upon verified request, subject to legal retention obligations.

​

5. DATA STORAGE & SECURITY

We implement appropriate technical and organisational measures, including:

• Encrypted storage

• Cryptographic hashing

• Secure infrastructure

• Access control mechanisms

• Monitoring and audit logging

• Human oversight for sensitive review operations

We apply privacy-by-design and security-by-design principles.

​

6. SHARING OF INFORMATION

We may share data strictly where necessary with:

• Cloud hosting providers

• Blockchain infrastructure providers

• Human verification specialists

• Legal partners (only upon user request)

• Regulatory or governmental authorities where legally required

All third-party processors operate under data processing agreements compliant with UK GDPR.

We do not share personal data with advertisers.

​

7. INTERNATIONAL TRANSFERS

Where personal data is processed outside the United Kingdom, appropriate safeguards are implemented, including:

• UK International Data Transfer Agreements (IDTA), or

• Approved adequacy regulations under UK law

Transfers occur only where operationally necessary.

​

8. YOUR RIGHTS

Under UK GDPR, you have the right to:

• Access your personal data

• Rectify inaccurate data

• Request erasure (where applicable)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

ICO website: https://ico.org.uk

Contact: info@curatoria.co.uk

​

9. BLOCKCHAIN NOTICE

Due to the immutable nature of blockchain:

• Entries cannot be altered or deleted

• No raw personal data is stored on-chain

• Only hashed, pseudonymised data is recorded

This structure enhances both evidential integrity and privacy protection.

​

10. COOKIES

Our use of cookies is governed by our Cookie Notice.

Non-essential cookies are disabled by default and activated only upon explicit consent.

Please review our Cookie Notice for detailed information.

​

11. CHILDREN

Our services are not intended for individuals under 16.

We do not knowingly collect data from minors.

​

12. CHANGES TO THIS POLICY

We may update this policy periodically.

The most recent version will always be available on this page with an updated revision date.

​

13. CONTACT INFORMATION

 

Curatoria Technology Ltd

Website: www.curatoria.co.uk

Email: info@curatoria.co.uk