Legal

Privacy Policy

Last updated: September 2026

This policy explains how Curavest Ltd ("Curavest", "we", "us") collects and uses personal data when you visit curavest.co.uk or contact us through it. Curavest is the data controller for this information.

Who we are

Curavest Ltd is a United Kingdom business providing fractional CTO and related services to operational businesses. You can contact us about this policy or any data protection query at euan.pallister@curavest.co.uk.

What we collect

We collect personal data in the following ways:

  • When you use the "Start a Conversation" form: your name, business name, email address, phone number (if provided), the content of your message, which service you are interested in and how you would prefer to be contacted.
  • When you email or call us directly: whatever information you choose to share, such as your name, contact details and the content of your enquiry.
  • Basic technical logs: our hosting and content delivery provider (Cloudflare) automatically processes standard web server information, such as IP address and browser type, for security and reliability purposes as part of delivering the site.

This website does not use advertising or analytics cookies, and does not run any third-party tracking scripts. No non-essential cookies are set.

How we use your data

We use the personal data described above to:

  • Respond to enquiries submitted through the contact form, by email or by phone.
  • Understand your business situation well enough to advise whether a Curavest service is a fit.
  • Maintain reasonable business records of enquiries and, where a working relationship begins, correspondence relating to that engagement.
  • Meet our own legal, accounting and regulatory obligations.

We do not use your data for automated decision-making or profiling, and we do not sell or rent personal data to third parties.

Our legal basis

We process contact form and enquiry data on the basis of our legitimate interest in responding to enquiries about our services, and, where an engagement proceeds, to take steps towards entering into or performing a contract with you or your business.

Who we share it with

We do not share your personal data with third parties for their own marketing purposes. Contact form submissions are delivered to us using a transactional email provider acting solely as our data processor to transmit the message; the site itself is hosted and delivered via Cloudflare. Both are bound to process data only on our instructions and only for the purpose of operating this website.

How long we keep it

We keep enquiry data for as long as reasonably necessary to respond to it and to maintain a sensible record of business contact, and delete or anonymise it when it is no longer needed for that purpose or for any legal obligation we are subject to.

Your rights

Under UK data protection law, you have the right to:

  • Ask us for a copy of the personal data we hold about you.
  • Ask us to correct inaccurate or incomplete data.
  • Ask us to delete your data, or restrict or object to how we use it, in certain circumstances.
  • Ask for your data to be provided to you in a portable format, where relevant.
  • Withdraw consent at any time, where we are relying on consent.

To exercise any of these rights, email euan.pallister@curavest.co.uk. If you are unhappy with how we have handled your data, you also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time to reflect changes to the website or our data practices. The date at the top of this page shows when it was last revised.