Last updated: October 14th, 2026
Privacy and security have always been a priority for us. Our Privacy Policy and Terms of Use cover most of what you need to know about how we use personal information that is provided to us. This page adds detail about our practices as they relate to the EU General Data Protection Regulation (GDPR) and the UK GDPR.
Unless otherwise defined in this document, terms used in this document have the same meanings as in our Privacy Policy and Terms of Use.
The GDPR sets rules for how organizations collect and process personal data about people in the EU, and gives those people rights over that data, including the right to access, correct, export and delete it. Curated helps our customers run their newsletters in line with these rules: every subscriber's opt-in is recorded with a timestamp and source, and subscribers can unsubscribe from any email at any time.
Below are the details of how we handle your data and how you can access it.
Curated's application and database are hosted by Heroku (Salesforce) in the United States, and our database is backed up continuously by Heroku Postgres. Images uploaded to Curated are stored on Amazon S3. Traffic to Curated is served over HTTPS through Cloudflare. Because your data is stored and processed in the United States, please also read the International Transfer section of our Privacy Policy.
We collect and retain the following information from our customers:
We collect and retain the following information from our customers’ subscribers:
We collect this information for the purpose of providing the Curated newsletter products and services, identifying and communicating with customers, responding to customer requests/enquiries, getting paid for use of our products and services, and improving our products and services.
As noted in our Privacy Policy, we may employ third party companies or service providers and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services and/or to assist us in analyzing how our Service is used.
These third parties have access to your Personal Information only to perform specific tasks on our behalf and are obligated not to disclose or use your information for any other purpose.
GDPR defines third party companies and service providers like these as “sub-processors”.
Where applicable, we’ve linked to each sub-processor’s policies; we recommend reading each one to make sure you’re OK with us sharing some of your data with them.
We also use MaxMind’s GeoLite2 database to approximate the location of our customers’ subscribers (countries and cities only). The database runs on our own servers, so no subscriber data is sent to MaxMind.
If you have specific questions about what data we send to any of those services, contact us using the information below and we’ll be happy to explain in more detail.
Another term that GDPR defines is “Data subject”. Put simply, a data subject is the individual whom particular personal data is about. A DSR (Data Subject Rights) request is when an individual asks a data controller (in this case, that could be Curated or a Curated customer) to take action on their personal data. An example of a DSR request would be if a Curated customer asks for an export of all the data we’ve collected about them, or to permanently delete all the information we’ve collected about them.
We process these requests manually. Customers can also access, correct, export, or delete most of their data themselves from their Curated account.
We will give an individual, either a Curated customer or a subscriber, access to any personal information we have about them within 30 days of any request for that information, and we won’t charge anything to process these requests. Individuals may request to access, correct, amend or delete information we hold about them by contacting us using the information below. Unless prohibited by law, we will remove any Personal Information about an individual, either a Curated customer or a subscriber, from our servers at their request.
If you have any questions about this page, please contact us at support@curated.co.
