Data protection

This is a working draft for legal review. It is not a substitute for advice from qualified counsel. Replace the bracketed placeholders before this page is treated as final.

Website content is served as static files. Enquiry and account data is processed by the API at api.curveinfotech.com and stored in MySQL. Uploaded media is stored in object storage, not on the web server disk.

Access to production data is limited to authorised administrators. Preview environments must not receive production database credentials. Database network access is restricted as described in the infrastructure documentation and is not open to the public internet.

Data processing locations, subprocessors, and the appointed contact will be listed here after they are confirmed: [Subprocessors to be confirmed].