Privacy Policy

Draft for legal review. Items highlighted like TO BE CONFIRMED must be completed with verified company data before publication. Last updated: 2026-09-20.

1. Who is responsible for your data

Controller: Curiosbot Digital, S.L.
Tax ID (CIF): TO BE CONFIRMED
Registered address: TO BE CONFIRMED , Zaragoza, Spain
Privacy contact: sales@curiosbot.com

2. What data we process and why

Purpose Data Legal basis Retention
Responding to enquiries submitted through the contact form or by email Name, work email, company, job role, country, project details, message, technical data needed to prevent abuse (IP address, timestamp) Your consent (Art. 6.1.a GDPR) and steps prior to a contract (Art. 6.1.b) Up to 24 months after the last contact, unless a business relationship follows
Website security and preventing spam IP address, request time, honeypot and rate-limit data Legitimate interest in securing the service (Art. 6.1.f) Rate-limit data: minutes to hours. Server logs: as configured by the hosting provider
Website analytics This website does not currently load analytics or advertising tools.

3. Recipients and processors

We share personal data only with providers that help us operate the website and handle enquiries, under data-processing agreements where required. These currently include our web-hosting and email provider (Hostinger International Ltd. and group companies) TO BE CONFIRMED — verify processor details and location. If we enable analytics or a CRM or automation service in future, this policy will be updated first.

4. International transfers

We aim to keep personal data within the European Economic Area. Where a provider processes data outside the EEA, transfers rely on an adequacy decision or the European Commission’s standard contractual clauses.

5. Your rights

You may request access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time without affecting earlier processing. Write to sales@curiosbot.com. You also have the right to complain to the Agencia Española de Protección de Datos (AEPD) .

6. Security

We use HTTPS, server-side validation, anti-abuse controls and restricted access to enquiry data. No system is completely secure; if a breach affects your rights we will notify you and the authority as required by law.

7. Children

This website is directed at business users and is not intended for children.

8. Changes to this policy

We will publish updates on this page and change the date at the top. Where a change materially affects how we use your data, we will tell you in an appropriate way.