Privacy notice

You type one sentence describing where your job has got to. That sentence is used to work out which stage of work you mean, and for nothing else.

If a classification service is configured on this deployment, the sentence is sent to it with one instruction: return the identifier of one stage from a list. It is not asked to interpret, assess or write anything, and it is not sent your account details. If no such service is configured, the sentence never leaves your browser at all — the matching happens locally and the reading is the same.

What you type is not used to train, fine-tune, evaluate or improve any model, ours or anybody else’s. It is not sold, and it is not shared with anybody for their own purposes.

Where a classification service is used, it is engaged under terms that prohibit training on the content sent to it.

This site has no camera access, no file picker, no drag-and-drop target and no endpoint behind any of those. No photograph, video or file of any kind can be sent to it, so none is received, processed or stored.

That is a product decision before it is a privacy one, and it is explained on how the reading works: pictures of somebody’s site would only be useful for judging the work in them, and this service does not judge anybody’s work.

The company that operates Curetime is the data controller. Its registered name, company number and registered office are published on the legal information page. For anything about your data, write to support@bakermartin.shop.

• Account: your email address and a hashed password, or the identifier from whichever sign-in method you used. Needed to give you an account at all — performance of a contract.
• Subscription: which plan you are on, when it renews, the last four digits and type of your card, and our record that a payment succeeded. Performance of a contract, and a legal obligation for the tax records.
• Usage: how many readings you have run in the current period, so the allowance can be counted. Performance of a contract.
• The sentences you type, kept against your account so you can come back to a job. Performance of a contract, and deleted on request or when the account closes.
• Server logs: IP address, user agent and timestamps, kept briefly to keep the service up and to deal with abuse. Legitimate interests.

We never receive or store your card number. Payment is taken by a third-party provider certified to PCI DSS Level 1 and the card data goes directly to them.

• Sentences and readings: until you delete them or close your account, and no more than 12 months after the account closes.
• Account and subscription records: for as long as the account is open, then six years for the tax and accounting records we are required to keep.
• Server logs: 30 days.

Only the suppliers that make the service work, and only for that purpose:

• our hosting and database provider, which stores the account and the readings;
• the payment provider, which takes the payment and holds the card data we never see;
• the classification service, where one is configured, which receives the sentence and returns an identifier;
• our email provider, which sends the account and renewal emails.

Every one of them is bound by a written contract to process the data only on our instructions. We do not sell personal data, and we do not share it for anybody else’s marketing.

Some of those suppliers operate outside the United Kingdom. Where personal data is transferred out of the UK we rely on an adequacy decision where one covers the country in question, and otherwise on the UK International Data Transfer Agreement, or the UK Addendum to the European Commission’s standard contractual clauses, together with a transfer risk assessment. You can ask us for a copy of the mechanism used for any particular supplier.

Under the UK GDPR and the Data Protection Act 2018 you can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, to receive it in a portable form, and to object to processing we carry out on the basis of legitimate interests.

Write to support@bakermartin.shop and we will respond within one month. There is no charge.

If you are in the European Union the same rights apply to you under the EU GDPR. If you are a California resident you have the rights to know, to delete, to correct and to opt out of the sale or sharing of personal information — we do not sell or share personal information as those terms are defined there, and we will not discriminate against you for exercising any of these rights.

If you are not happy with how we have handled your data, please tell us first and we will try to put it right.

You can also complain to the Information Commissioner, the UK’s data protection regulator, at ico.org.uk, on 0303 123 1113, or by post to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

One cookie keeps you signed in and is set whether or not you agree to anything else, because the service cannot work without it. Nothing optional is set before you choose. The full list is on the cookies page.

This service is for adults. You must be 18 or over to hold an account, and we do not knowingly collect data about children. If you believe a child has created an account, tell us and we will delete it.

If we change anything that affects you, we will email account holders at least 14 days before it takes effect. The date at the top of this page is always the date of the current version.