Privacy Policy

Curio Fashion Inc. is responsible for personal information under its control. Our Privacy Officer is accountable for privacy compliance and can be reached at support@curio.fashion.

We collect information you provide directly, information generated when you use Curio's marketplace, and information from service providers that help us run the marketplace.

• Account information: first name, last name, email address, password credentials, login state, password reset activity, and account security information.
• Buyer and order information: email address, shipping name, shipping address, phone number, cart contents, order numbers, payment status, tax and shipping amounts, carrier and tracking details, returns, refunds, reviews, and customer support messages.
• Seller information: store name, store location, store email, phone number, website, Instagram handle, store story, listing details, item photographs, pickup or origin address, Stripe account status, payout status, and seller support messages.
• Payment, tax, and shipping information: Stripe payment and account identifiers, tax calculation identifiers, shipping label identifiers, postage information, and refund or dispute records. Sensitive card and bank details are processed by Stripe, not stored by Curio.
• Claims and guarantee information: order details, claim reasons, descriptions, photos, decision notes, return tracking, and refund information used to administer the Curio Guarantee and our refund process.
• Usage and device information: pages viewed, referrers, product views, cart actions, checkout steps, seller dashboard actions, recommendation interactions, resolver logs, anonymous cart identifiers, IP address where available, timestamps, and similar diagnostic information.

We use personal information for purposes that are reasonably necessary to provide and improve Curio's marketplace, including:

• creating accounts, authenticating users, and securing access
• maintaining carts, checkout sessions, orders, returns, refunds, and seller payouts
• calculating tax, purchasing shipping labels, tracking shipments, and sending transactional emails
• reviewing seller applications, listings, seller performance, and marketplace trust signals
• administering the Curio Guarantee, refund claims, disputes, chargebacks, and fraud prevention
• showing relevant products, improving recommendations, debugging errors, and understanding marketplace usage
• communicating with you about your account, store, orders, returns, reviews, security, and policy updates
• complying with tax, accounting, marketplace, payment, consumer protection, and other legal obligations

Curio uses browser storage to make the site work. This includes local storage for your auth token, cart session identifier, and saved items, plus session storage for checkout drafts and recommendation attribution during the current browsing session.

You can clear browser storage through your browser settings. Doing so may log you out, clear saved items, or reset your cart and checkout state.

Curio may use automated or semi-automated systems to power search, recommendations, fraud prevention, marketplace quality signals, seller tools, and trust and safety workflows. These systems may use product, store, order, cart, review, and usage information.

Where a decision has a material effect on a buyer or seller, we use human review where required by law. You may contact the Privacy Officer to ask questions about these systems or request review of a decision.

We share personal information only as needed to operate Curio's marketplace, support transactions, comply with law, or protect the marketplace.

• Between buyers and sellers: we share order, shipping, and contact information needed to fulfill orders, handle returns, resolve claims, and provide customer support.
• Service providers: we use providers for payment processing and payouts, tax calculation, shipping labels and carrier services, address autocomplete, email delivery, hosting, storage, database infrastructure, security, monitoring, and customer support.
• Payment and compliance partners: Stripe and related providers may collect identity, payment, tax, and banking information to process payments, verify sellers, prevent fraud, and support legal compliance.
• Legal and safety reasons: we may disclose information if required by law, legal process, or a regulator, or when we believe disclosure is necessary to protect Curio's marketplace, users, sellers, buyers, or the public.
• Business transfers: if Curio is involved in a merger, financing, acquisition, sale, restructuring, or similar transaction, information may be shared as part of that process subject to appropriate safeguards.

Store profiles, public seller details, item listings, photos, descriptions, prices, tags, ratings, and reviews may be visible to other users and the public. Do not include private information in public listing content unless you want it to be public.

Curio does not sell personal information. We also do not share personal information with third-party advertising networks for cross-site behavioral advertising. If our practices change, we will update this Privacy Policy and provide any legally required choices.

We keep personal information for as long as reasonably necessary to provide Curio's marketplace, complete transactions, comply with tax and accounting obligations, resolve disputes, enforce our terms, prevent fraud, and maintain security. The exact period depends on the type of information and why we collected it.

We may retain de-identified, aggregated, or statistical information that no longer identifies you.

• Account and store information is generally kept while the account or store is active and for a reasonable period afterward for security, dispute, tax, and legal purposes.
• Order, payment, tax, shipping, return, refund, and claim records are kept as needed for transaction history, tax and accounting records, fraud prevention, chargebacks, legal compliance, and dispute resolution.
• Support, telemetry, and diagnostic records are kept for as long as reasonably useful for support, security, debugging, analytics, marketplace quality, and legal compliance.

We use administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, and loss. No website or transmission is completely secure, so please use a strong password and keep your account credentials private.

If we determine that a breach of security safeguards creates a real risk of significant harm, or if notification is otherwise required, we will notify affected individuals, regulators, and other parties as required by law.

Curio may process information directly and through Curio's service providers in Canada, the United States, and other locations where our providers operate. Those locations may have privacy laws that differ from the laws where you live.

This means your personal information may be transferred to, stored in, or accessed from outside your province or country, including outside Quebec. Before relying on a service provider, we take reasonable steps to assess the protection the information will receive and to require appropriate safeguards. You may contact the Privacy Officer for more information about how we handle information processed outside your province.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain uses of your personal information, and to withdraw consent where consent is the basis for processing. We will not discriminate against you for exercising rights that apply to you.

To make a privacy request, email support@curio.fashion. We may need to verify your identity before fulfilling a request. Some information may be retained where permitted or required for security, fraud prevention, tax, accounting, dispute resolution, or legal compliance.

You may opt out of marketing emails by using the unsubscribe method in the message or by contacting us. We may still send transactional or service messages about your account, orders, listings, payments, shipping, returns, refunds, security, and policy updates.

If you are not satisfied with our response to a privacy request or complaint, you may contact the Office of the Privacy Commissioner of Canada or another privacy regulator with authority over your concern.

Curio's marketplace is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information to Curio, contact us and we will take appropriate steps.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated policy on the website or by another reasonable method.