Website Privacy Policy
Last updated: 21 October 2026
This policy explains how Curral collects and uses personal data when you visit curral.london, submit an enquiry, or book a meeting with us through the website. Section 5 also explains how we handle your data if we contacted you first as part of our business-to-business (B2B) outreach.
1. Who we are
Curral is the trading name of Growth Execution FZCO, a free zone company licensed in Dubai, United Arab Emirates (licence number 29746), registered at IFZA Business Park, DDP Building, Dubai Silicon Oasis, Dubai, UAE.
Growth Execution FZCO is the controller of the personal data collected through this website. In this policy, "Curral", "we", "us" and "our" mean Growth Execution FZCO.
Questions about this policy can be sent to info@curral.london.
2. Laws that apply
We handle personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), which governs cookies and electronic marketing; the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL); and the EU General Data Protection Regulation (EU GDPR) for people in the European Economic Area.
3. Personal data we collect
When you browse the website: your IP address, device and browser type, approximate location (country or city), pages viewed, time spent on the site, and the website or advert that referred you. This is collected through cookies and similar technologies (see section 7).
When you submit an enquiry form: your name, job title, company, business email address, phone number and anything you choose to include in your message.
When you book a meeting: the details you give when booking through Calendly, such as your name, email address, company, the time you choose and any answers to booking questions.
When you email or call us using the contact details on the website: your contact details and the content of your message.
When you use the Cost Per Appointment Calculator: the options you select. These are used to show your estimate and are not stored against your identity unless you go on to submit an enquiry.
Please do not send us sensitive personal data, such as health information, through the website.
4. How we use your data and our legal grounds
| Purpose | Legal ground |
|---|---|
| Responding to your enquiry and arranging meetings you request | Steps taken at your request before entering a contract; our legitimate interest in responding to business enquiries |
| Following up on your enquiry with relevant information about our services | Our legitimate interest in developing our business; you can opt out at any time |
| Keeping the website secure and working properly | Our legitimate interests |
| Understanding how visitors use the website so we can improve it (analytics) | Your consent |
| Measuring and improving our advertising, including Google Ads | Your consent |
| Complying with legal obligations and protecting our rights | Legal obligation; our legitimate interests |
We do not sell your personal data, and we do not use it to make automated decisions that significantly affect you.
5. If we contacted you first (B2B outreach)
If you came to this page because we called, emailed or messaged you about our services or on behalf of one of our clients, this section explains how we handle your data, as required by the UK GDPR and other applicable laws.
What we hold: your name, job title, employer, business email address, business phone number, LinkedIn profile URL, information about your company, and notes from our conversations. Calls may be recorded for quality, training and to verify that meetings were genuinely agreed.
Where we got it: from B2B data providers (Cognism, Lusha and FullEnrich), public sources such as your company website and LinkedIn, or from the client we are contacting you on behalf of.
Why we use it: to contact you in your professional capacity about services that may be relevant to your business, and, if you agree to a meeting, to share your contact details and meeting notes with the client you have agreed to meet. Our legal ground is legitimate interests in B2B marketing. When we act for a client, that client usually decides how your data is used (it is the controller) and we process it on its behalf. Ask us and we will tell you which client.
How we contact you: we only use business email addresses and phone numbers, screen UK numbers against the Telephone Preference Service (TPS) and Corporate Telephone Preference Service (CTPS) where required, and identify who we are when we contact you.
How long we keep it: for the duration of the relevant campaign and up to 24 months afterwards, unless you ask us to delete it sooner.
Opting out: you can object at any time. Reply "unsubscribe" to any of our emails, tell the caller, or email info@curral.london. We will add you to our suppression list so that we do not contact you again, for ourselves or any client.
You also have all the rights described in section 11.
6. Who we share your data with
We share personal data only with:
- Service providers that help us run the website and handle enquiries, including our website hosting provider, Calendly (meeting booking), Google (analytics, advertising and Google Workspace), Microsoft (email) and our CRM, which is hosted on Google Firebase. They may use your data only on our instructions.
- Professional advisers, such as lawyers and accountants, where needed.
- Authorities, where the law requires it or to protect our rights.
- Our clients, only where section 5 applies and you have agreed to meet them.
- B2B data providers (Cognism, Lusha and FullEnrich) and our telephony providers (Dialpad and Maqsam), for outreach under section 5.
- A buyer or investor, if all or part of our business is sold or restructured, subject to confidentiality.
7. Cookies
The website uses three types of cookie:
| Type | What it does | Consent needed? |
|---|---|---|
| Essential | Makes the website work, for example remembering your cookie choices | No |
| Analytics | Tells us how visitors find and use the website, so we can improve it | Yes |
| Advertising | Includes Google Ads; measures which adverts bring visitors to the site and whether they enquire | Yes |
Analytics and advertising cookies are set only if you accept them in our cookie banner. You can change your choice at any time using the cookie settings link in the website footer, or block and delete cookies in your browser settings.
Google's use of advertising data is described at policies.google.com/technologies/ads.
8. International transfers
Curral operates in the UAE, the UK and the US, and our service providers may store data in other countries, including the United States. Where the law requires it, we protect these transfers with appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or transfers to countries recognised as providing adequate protection.
9. How long we keep your data
- Enquiries and meeting bookings: up to 24 months after our last contact with you, unless you become a client. Client records are then kept for as long as our legal and tax obligations require.
- Analytics data: up to 26 months.
- Advertising data: in line with Google's retention settings, which we keep to the minimum available.
- Outreach data: see section 5.
- Opt-out requests: we keep a minimal record indefinitely so that we can respect your choice.
10. How we protect your data
The website is served over an encrypted (HTTPS) connection. Access to enquiry data is limited to the team members who need it, and we use access controls and multi-factor authentication on our key systems. No system is completely secure, but we work to protect your data and will act promptly on any security incident, including notifying you and the relevant authority where the law requires it.
11. Your rights
Depending on where you are, you may have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to our use of your data, including objecting to marketing at any time;
- receive your data in a portable format; and
- withdraw your consent to cookies or other processing at any time.
To exercise any of these rights, email info@curral.london. We may need to verify your identity, and we aim to respond within one month.
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You can also complain to a data protection authority:
- in the UK: the Information Commissioner's Office (ICO), ico.org.uk;
- in the UAE: the UAE Data Office; and
- in the EEA: the data protection authority in the country where you live or work.
12. Children
This website is intended for businesses and professionals. It is not directed at anyone under 18, and we do not knowingly collect children's personal data.
13. Other websites
The website links to third-party sites, such as Calendly, LinkedIn, Instagram and Facebook. Those sites have their own privacy policies, and we are not responsible for how they handle your data.
14. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed.
15. Contact us
Growth Execution FZCO (trading as Curral) IFZA Business Park, DDP Building, Dubai Silicon Oasis, Dubai, United Arab Emirates Email: info@curral.london