Curioso privacy policy

Last updated: 24-May-2026

This Privacy Policy explains how AM Foundry Ltd, trading as Curioso, collects, uses and protects personal data when you use Curioso, including our website, platform, open call pages, application tools and related services.

Curioso is an online platform for creating, managing and applying to open calls for art. This means we handle personal data for artists, organisers, applicants, visitors and people who contact us.

Please read this Privacy Policy carefully. It should be read alongside our Terms and Conditions.

1. Who we are

Curioso is operated by AM Foundry Ltd, trading as Curioso.

Company number: 16986540

Registered address: International House, 64 Nile Street, London, United Kingdom, N1 7SR

Contact email: [email protected]

In this Privacy Policy, “Curioso”, “we”, “us” and “our” refer to AM Foundry Ltd.

For the purposes of UK data protection law, AM Foundry Ltd is the controller of personal data we collect and use to operate Curioso, manage accounts, provide the platform, process payments, send service communications, provide support, maintain security and improve the service.

When an artist submits an application to an open call, Curioso collects, stores and shares the application information with the organiser of that open call so the organiser can review and manage the application.

Organisers may act as independent controllers of the applicant personal data they receive through Curioso. This means organisers are responsible for how they use applicant information for their own open calls, including reviewing applications, making selection decisions, contacting applicants, managing next steps and complying with applicable data protection laws.

Curioso is not responsible for an organiser’s use of applicant personal data outside Curioso or beyond the purposes connected with the relevant open call.

2. Who this policy applies to

This Privacy Policy applies to personal data we collect about:

• people who visit Curioso websites or public open call pages;
• users who create an account;
• artists who submit applications to open calls;
• organisers who create organisations or open calls;
• people who pay for Curioso services;
• people who contact us for support, privacy requests or other enquiries; and
• people whose information is included in content submitted to Curioso.

Curioso is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you believe someone under 18 has provided personal data to Curioso, please contact us.

3. Personal data we collect

The personal data we collect depends on how you use Curioso.

Account information

When you create or use an account, we may collect:

• your name;
• email address;
• login and authentication information;
• account activity;
• communication preferences;
• support history; and
• information you choose to add to your account.

Organisation and open call information

When you create an organisation or open call, we may collect:

• your name and email address;
• organisation name and details;
• open call title, description, eligibility criteria, deadlines, application requirements and other information you provide;
• public open call content;
• open call status and activity;
• applicant limits and application activity;
• selection and rejection activity; and
• service communications connected with the open call.

Information that organisers intentionally add to public open call pages may be displayed publicly and may be indexed by search engines. Artist application information, contact details, artwork submissions and other application materials are not made public as part of those pages.

Artist application and submission information

When you apply to an open call, we may collect the information you provide as part of your application, such as:

• your name;
• email address;
• website;
• social media links;
• artist biography;
• artist statement;
• CV or supporting documents, where uploaded;
• artwork images;
• artwork title, medium, dimensions, price, year, description and other artwork details;
• eligibility confirmations;
• confirmation that you have reviewed or agreed to organiser terms, where relevant;
• application status, such as submitted, selected or declined; and
• date and time of submission.

When you submit an application, your application information is shared with the organiser of the relevant open call so they can review, manage and make decisions about the application.

Payment information

When you pay for Curioso services, payments are processed by Stripe. We do not store your full card details.

We may collect or receive payment-related information such as:

• name;
• email address;
• billing details;
• payment status;
• transaction identifiers;
• Stripe customer or payment IDs;
• receipt or invoice information;
• amount paid;
• currency; and
• payment date.

We use this information to process paid services, publish or prepare paid open calls, keep accounting and tax records, handle payment queries and prevent misuse or fraud.

Support and enquiry information

If you contact us, we may collect:

• your name;
• email address;
• message content;
• screenshots, files or other information you choose to send us;
• information about your account, open call or application where needed to respond; and
• records of our communications with you.

Technical and usage information

When you use Curioso, we may collect technical and usage information such as:

• IP address;
• browser type;
• device type;
• operating system;
• referring URLs;
• pages viewed;
• dates and times of access;
• login activity;
• actions taken in the platform;
• error logs;
• security logs;
• cookie or analytics information, where applicable; and
• other information needed to operate, secure and improve the service.

4. Special category or sensitive information

Curioso does not generally ask users to provide special category data, such as information about health, race or ethnicity, political opinions, religious or philosophical beliefs, sex life, sexual orientation or trade union membership.

However, because Curioso is an art platform, users may choose to include sensitive information in artist statements, bios, CVs, artwork images, artwork descriptions, eligibility information or other submitted materials.

You should avoid including sensitive personal data in your account, open call or application unless it is necessary for the relevant open call and you are comfortable sharing it with Curioso and, where applicable, the organiser of that open call.

Organisers should only request sensitive personal data where they have a lawful basis to do so and where it is necessary for the relevant open call.

5. How we use personal data

We use personal data to:

• create and manage user accounts;
• allow organisers to create, publish and manage open calls;
• allow artists to submit applications;
• share applications with the relevant organiser;
• allow organisers to review applications and make selections;
• show application status;
• send transactional emails and service communications;
• process payments and maintain payment records;
• provide support and respond to enquiries;
• process account deletion, privacy and data rights requests;
• monitor open call limits and platform usage;
• moderate content and investigate misuse;
• protect the security and integrity of Curioso;
• troubleshoot errors and maintain the service;
• understand and improve how Curioso is used;
• enforce our Terms and Conditions;
• comply with legal, tax, accounting and regulatory obligations; and
• establish, exercise or defend legal claims.

6. Our lawful bases for using personal data

We only use personal data where we have a lawful basis to do so.We only use personal data where we have a lawful basis to do so.

We use personal data to create accounts, provide Curioso, allow artists to submit applications and allow organisers to create and manage open calls. We rely on contract for this, because this processing is needed to provide the service you use.

We share artist applications with the organiser of the relevant open call so the organiser can review and manage the application. We rely on contract and legitimate interests for this, because sharing the application with the organiser is a core part of how Curioso works.

We send transactional and service emails, such as account, application, payment, security and service update emails. We rely on contract and legitimate interests for this, because these communications are needed to provide and operate the service.

We process payments and maintain payment records. We rely on contract to process payments for paid services and legal obligation where we need to keep financial, tax or accounting records.

We use personal data to provide support and respond to enquiries. We rely on legitimate interests and, where the request relates to your use of Curioso, contract.

We use personal data to maintain security, prevent misuse, enforce our terms, moderate content and review platform activity. We rely on legitimate interests for this, because it helps us protect Curioso, our users and our business.

We use personal data to understand and improve how Curioso is used. We rely on legitimate interests where the processing is necessary to improve and maintain the service, and consent where required, such as for certain analytics or cookies.

We may use personal data to send marketing communications. We rely on consent or legitimate interests, where permitted by law.

We use personal data to comply with legal, tax, accounting or regulatory obligations. We rely on legal obligation for this.

We may use personal data to handle disputes, complaints or legal claims. We rely on legitimate interests and, where applicable, legal obligation.

Where we rely on legitimate interests, we do so where we believe our interests are not overridden by your rights and freedoms.

Where we rely on consent, you can withdraw your consent at any time.

7. How application data is shared with organisers

When an artist applies to an open call, the application information is shared with the organiser of that open call.

This may include the artist’s name, contact details, artist information, artwork images, artwork details, supporting documents, eligibility confirmations and any other information submitted as part of the application.

Organisers use this information to review applications, manage the open call, make selection decisions, communicate with applicants and manage next steps connected with the open call.

Organisers may be able to access application and submission data associated with their open calls unless and until the data is deleted, the account is closed, the service changes, or access is restricted.

Organisers are responsible for how they use applicant information outside Curioso. They must not use applicant contact details or submission materials for unrelated purposes, including unrelated marketing, unless they have a lawful basis or appropriate consent.

Curioso is not responsible for an organiser’s use or misuse of applicant information outside Curioso.

8 Public information

Open call pages may be public and may be indexed by search engines.

Public open call pages may include information provided by the organiser, such as the organisation name, open call title, open call description, application requirements, eligibility criteria, deadlines, fees, images and other open call details.

Curioso does not make artist application information, contact details, artwork submissions or other submitted application materials publicly available as part of the open call page. Application materials are shared with the organiser of the relevant open call for the purposes of reviewing and managing that open call.

9. Who we share personal data with

We may share personal data with:

• organisers of open calls, where an artist submits an application;
• payment processors, such as Stripe;
• hosting, infrastructure, database and storage providers;
• image storage and content delivery providers;
• email delivery providers;
• analytics and product improvement providers;
• error monitoring, logging and security providers;
• customer support and communication tools;
• professional advisers, such as accountants, lawyers and insurers;
• regulators, authorities, courts or law enforcement where required or permitted by law; and
• other parties where necessary to protect our rights, users, business or service.

We require service providers to process personal data only for appropriate purposes and to protect it in line with applicable law.

10. Payments and Stripe

Payments for Curioso services are processed by Stripe.

Stripe may collect and process payment information, billing information and fraud prevention information in accordance with its own privacy policy and terms.

Curioso does not store your full card details. We may receive and store payment-related information from Stripe, such as payment status, transaction identifiers, receipt information and billing details, so that we can provide paid services, keep financial records and handle payment queries.

11. Emails and communications

We may send transactional and service communications relating to account access, open calls, applications, application status, selection and rejection notifications, payment activity, applicant limits, support, security, changes to the service, and legal or policy updates.

You cannot opt out of essential transactional or service communications while using Curioso.

We may also ask whether you would like to receive marketing communications from us, such as product updates, Curioso news, opportunities, resources, events or other content we think may be relevant to artists, organisers or people interested in Curioso.

We will only send marketing communications where we have your consent or where we are otherwise permitted by law to do so. You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us.

We may use a marketing email platform to manage our mailing list and send marketing communications. If you opt in to marketing emails, we may share your name, email address, marketing preferences and related subscription information with that provider.

Marketing emails may include standard email analytics, such as whether emails are delivered, opened, clicked, unsubscribed from or marked as spam. We use this information to understand engagement, improve our communications and manage our mailing list.

This does not affect transactional or service emails, which we may still send where needed to provide Curioso or manage your account, open calls, applications, payments, security or legal notices.

12. Cookies and analytics

Curioso may use cookies or similar technologies where needed to operate the service, keep users signed in, maintain security and provide core platform functionality.

We may also use analytics to understand how Curioso is used and improve the service. We do not currently use analytics for advertising tracking or individual user profiling.

If we introduce non-essential cookies, advertising pixels or similar tracking technologies, we will update this policy and provide appropriate choices where required by law.

13. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

This may include keeping personal data for as long as needed to provide Curioso, maintain user accounts, manage open calls and applications, support users, comply with legal, tax and accounting obligations, resolve disputes, prevent misuse, maintain security, and establish, exercise or defend legal claims.

Application and submission data may remain available to the organiser of the relevant open call while their account or open call records remain active, unless the data is deleted, access is restricted, the service changes, or we are required to remove it.

If you request deletion of your account or personal data, we will process the request within a reasonable time, subject to any legal, operational, security, record-keeping or legitimate business reasons that require us to retain certain information.

Payment, tax and accounting records may need to be retained for longer where required by law.

Backups, logs and archived records may retain limited personal data for a period after deletion from active systems.

14. International transfers

Curioso is operated from the United Kingdom.

Some of the service providers we use to operate Curioso may process personal data outside the United Kingdom. This may include providers of hosting, infrastructure, storage, email delivery, analytics, payment processing, support, security or other operational services.

Where personal data is transferred internationally, we take steps intended to protect it in accordance with applicable data protection law. This may include relying on adequacy regulations, standard contractual clauses or other appropriate safeguards.

You can contact us if you would like more information about international transfers relevant to your personal data.

15. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, secure hosting, authentication measures, monitoring, logging and limiting access to personal data to people who need it for legitimate purposes.

No online service can be guaranteed to be completely secure. You are responsible for keeping your account access secure and for contacting us promptly if you believe your account has been accessed without permission.

16. Your data protection rights

Depending on your location and the circumstances, you may have rights to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete personal data;
• ask us to delete your personal data;
• ask us to restrict how we use your personal data;
• object to certain uses of your personal data;
• ask for a copy of your personal data in a portable format;
• withdraw consent where we rely on consent; and
• complain to a data protection authority.

To exercise your rights, contact us at [email protected] .

We may need to verify your identity before responding to a request. Some rights are subject to exceptions, and we may need to retain certain information where required or permitted by law.

If you are in the UK, you also have the right to complain to the Information Commissioner’s Office at www.ico.org.uk .

17. Account deletion and data deletion

You can request deletion of your account by contacting us at [email protected] .

Deleting an account may affect access to open calls, applications, organisations and related information.

Where you have submitted an application to an organiser, deletion of your Curioso account may not automatically remove all information already shared with that organiser. You may need to contact the organiser directly about their own use or retention of your application information.

We may retain certain information after an account deletion request where necessary for legal, tax, accounting, security, dispute-resolution, audit or legitimate business purposes.

18. Links to other websites

Curioso may include links to websites, services or content provided by organisers or third parties.

We are not responsible for the privacy practices of third-party websites or services. You should read their privacy policies before providing them with personal data.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will take reasonable steps to notify users, for example by email, in-platform notice or updating the date at the top of this policy.

Your continued use of Curioso after an updated Privacy Policy takes effect means you acknowledge the updated policy.

20. Contact us

If you have any questions about this Privacy Policy or how we use personal data, contact us at [email protected]