1. Who is responsible
Curviowonderhive Travel Media Ltd is the publishing identity responsible for curviowonderhive.lol. Our listed company number is 16842957 and our registered address is 27 Harbour Lane, Bristol, BS1 4QD, United Kingdom. For privacy enquiries, write to [email protected]. This is also our data protection officer contact channel; we do not represent that a statutory DPO appointment is required or has been made.
This policy explains the information associated with browsing our guides and communicating with us. It does not cover the independent websites linked from our articles or the email application you choose to use.
2. What we collect and why
You can read every guide without creating an account. The website has no registration system, checkout, advertising pixel or analytics library. Our web hosting environment may process ordinary connection information, including IP address, requested path, browser information, response status and access time, to deliver pages, investigate faults and protect against abuse.
The contact form validates information within your browser. It does not transmit a submission to a website server or save your draft in local storage. After validation, you may choose an email link that passes your name, email address, subject and message to your own email application. We receive that information only if you send the resulting email. Please exclude passport numbers, payment details, health information and other sensitive material.
We use correspondence to answer questions, investigate corrections and maintain relevant records. Our usual lawful basis is legitimate interests in operating a safe, useful publication and responding to enquiries. Where a request concerns a potential agreement, pre-contractual steps may apply. Optional device storage, if introduced, would require consent where applicable.
3. Cookies and local preferences
Our script stores your cookie choice in your browser’s localStorage under curvio-consent-v1. The record contains category choices, a version and a timestamp, not your name or an advertising identifier. No non-essential tools currently run, even if you select Accept All. The cookie policy explains the difference between cookies and this local preference record. You can revise your choice through the footer on any page.
4. Service providers, photographs and international transfers
Infrastructure providers supporting hosting and business email may process limited information on our behalf. This static website does not embed third-party maps, fonts or videos. Photographs on the homepage and contact page load from Unsplash’s image service at images.unsplash.com. Loading a photograph sends the image provider ordinary connection information, including your IP address, browser information and the requested image URL. Each photograph uses a no-referrer policy so that the browser does not send our page URL as a Referer header.
These image requests occur when photographs load, independently of the optional analytics and functional preference controls. They are used to display editorial imagery, not to install an analytics or advertising library. The provider’s handling of request information is governed by its own privacy policy. Following an external link also creates a separate interaction with that destination under its own terms. We do not sell personal information or disclose it for cross-context behavioural advertising.
Where a service provider handles personal information outside the UK or European Economic Area, applicable transfer safeguards must be used, such as an adequacy decision or approved contractual clauses. Contact us for information about the providers relevant to a particular enquiry. We may also disclose information when legally required or necessary to establish or defend legal claims.
5. Retention and security
Our retention target for routine enquiries is twelve months after the last meaningful exchange. Records needed for a dispute, legal obligation or continuing correction may be retained longer for that specific purpose. Operational logs should be kept only as long as required for security and troubleshooting, ordinarily no more than thirty days unless an incident warrants investigation.
Preference records expire for consent purposes after 180 days and are replaced when you make a new choice. Browser controls can remove them sooner. Reasonable access controls and account security reduce risk, but email and internet transmission cannot be guaranteed completely secure.
6. Your rights and complaints
Depending on your location and applicable law, UK GDPR and EU GDPR rights may include access, correction, erasure, restriction, portability and objection. You may withdraw consent without affecting earlier lawful processing. California residents may have rights to know, access, correct and delete covered information, opt out of sale or sharing, and receive non-discriminatory treatment under the CCPA/CPRA where those laws apply. We do not sell or share data in that advertising sense and do not use automated decision-making with legal or similarly significant effects.
Email our privacy contact with enough detail to locate the relevant record. We may need proportionate identity verification, but please do not send identity documents unprompted. We aim to respond within one month for GDPR requests or the applicable statutory period elsewhere. You can complain to the UK Information Commissioner’s Office or your local supervisory authority. Material changes to this policy will be identified through the updated date above.