Privacy Policy

1. What Information We Collect

1.1 Information You Provide Directly

When you register, onboard, or use Kuerate, you may provide:

• Full name and professional title
• Business email address and personal (backup) email address
• Employment details including employer name and work domain
• Professional profile information (imported from LinkedIn or entered manually)
• Nominated charitable causes and giving preferences
• Profile photo and biographical information
• Settings, preferences, and access rate configurations

1.2 Information We Collect Automatically

When you use the Kuerate platform, we may automatically collect:

• Log data including IP address, browser type, device type, and operating system
• Usage data including pages visited, features used, and time spent on platform
• Authentication data including login timestamps and session information
• Communication metadata including message request activity (not message content)

1.3 Information from Third Parties

If you choose to import your LinkedIn profile during onboarding, we receive the data you authorise LinkedIn to share with us. We do not store your LinkedIn credentials. If a charitable donation provider integrates with our platform, they may share confirmation of payment and tax statement data with us as described in Section 5.

2. How We Use Your Information

We use your personal information only for legitimate purposes. Specifically, we use it to:

• Create and manage your Kuerate account and professional profile
• Operate the platform, including facilitating connection requests between professionals and CRM users
• Verify your professional identity via business email
• Display your public profile to other users on the platform
• Process and route charitable donation requests to our integrated charity provider (we do not process payments directly)
• Send you transactional communications including account verification, welcome emails, and platform notifications
• Analyse platform usage to improve our services and user experience
• Comply with our legal obligations across the UK, Australia, and USA
• Detect and prevent fraud, abuse, or violations of our Terms of Service

We will never sell your personal data to third parties. We will never use your data to serve you advertising on behalf of third-party advertisers.

3. Legal Basis for Processing (UK & Australia)

Where applicable under UK GDPR and the Australian Privacy Act 1988, our legal bases for processing your personal data are:

• Contract: Processing necessary to provide you with the Kuerate service you have agreed to use
• Legitimate Interests: Improving our platform, ensuring security, and operating our business in ways that do not override your rights
• Legal Obligation: Compliance with applicable laws in the jurisdictions where we operate
• Consent: Where we ask for your specific agreement, for example when you opt in to certain communications

For users in the United States, we comply with applicable state privacy laws including the California Consumer Privacy Act (CCPA) where relevant.

4. Charitable Donations and Third-Party Providers

Kuerate facilitates optional charitable donations as part of the outreach model. When a CRM user initiates a connection request tied to a charitable contribution, the following data may be shared with our integrated charity donation provider:

• The donor’s name and contact information
• The nominated charity
• The donation amount
• Disclosure of Kuerate’s platform fee

Kuerate does not process or store payment card details. All payment processing is handled entirely by the charity provider on their own platform. The provider returns confirmation of payment and tax statement information to both you and Kuerate via API.

We will notify you of the identity of any charity integration partners before they are enabled on your account.

5. How We Share Your Information

We do not sell, rent, or trade your personal data. We share information only in these limited circumstances:

5.1 Other Kuerate Users

Your public profile — including your name, title, employer, and nominated charitable causes — is visible to other users on the platform. This is core to the service and is controlled by your profile settings.

5.2 Service Providers

We work with carefully selected third-party service providers who help us operate the platform, including cloud hosting, database, and authentication services. These providers process data only on our instructions and are contractually bound to protect your data.

5.3 Charity Integration Partners

As described in Section 5, limited data is shared with our integrated charity donation provider to facilitate contributions.

5.4 Legal Requirements

We may disclose your information where required by law, court order, or regulation, or where necessary to protect the rights, safety, or property of Kuerate or others.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of Kuerate, your data may be transferred as part of that transaction. We will notify you in advance and your rights will be maintained.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:

• Account data is retained for the duration of your account and for up to 2 years following account closure
• Business email verification records are retained for legal compliance purposes
• Donation transaction records are retained in accordance with applicable tax and accounting regulations
• Log and analytics data is typically retained for 12 months

You may request deletion of your data at any time. See Section 9 for your rights.

7. Data Security

We take the security of your data seriously. Our measures include:

• Encrypted data transmission using HTTPS/TLS
• Secure authentication via magic link and email verification
• Role-based access controls limiting internal access to your data
• Regular review of our security practices and third-party providers

No method of transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. If you become aware of any security issue, please contact us immediately at marketing@kuerate.com.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

UK & Australia

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Ask us to correct inaccurate or incomplete data
• Right to erasure: Request that we delete your data, subject to legal retention obligations
• Right to restriction: Ask us to limit how we use your data
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object: Object to our processing of your data based on legitimate interests

United States (California – CCPA)

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information we have collected
• Right to opt out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at marketing@kuerate.com. We will respond within 30 days. We may need to verify your identity before processing your request.

9. Cookies and Tracking

Kuerate uses cookies and similar technologies to operate and improve the platform. These may include:

• Essential cookies: Required for the platform to function, including authentication and session management
• Analytics cookies: Used to understand how users interact with the platform so we can improve it

We do not use advertising or tracking cookies that share your data with third-party advertisers. You can control cookie settings through your browser. Disabling essential cookies may affect your ability to use the platform.

10. International Data Transfers

Kuerate operates in the UK, Australia, and the USA. Your data may be processed in any of these jurisdictions. Where we transfer data outside of the UK or the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms as required by applicable law.

11. Children’s Privacy

Kuerate is a professional platform intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.