ONLINE PRIVACY POLICY

This Privacy Policy describes the practices of Curve, USA (“Curve,” “the Company,” “we,” “us,” or “our”), regarding any and all information collected from visitors (our “Users”) to the Curve website, curve.com, (the “Site”). It describes what information is collected, how that information is used, and under what circumstances that information may be disclosed to others in the course of providing our services to you (the “Services”) and otherwise operating our business. Please read this Privacy Policy closely, as it describes your privacy rights with respect to such information. 

If you are an EEA or UK customer, you can find the information relevant to you in section 13 of this policy. 

By using the Site, you acknowledge that you have read this Privacy Policy and accept its terms. If you do not agree to the Privacy Policy after your close and careful reading, you should not access or use the Site. You must be 18 years or older to use the Site.

We may modify this Privacy Policy at any time by posting a revised version to the Site. If we do so, we will post a notice of change on the Site. Any modification will be effective on the effective date that appears at the bottom of the page of the amended Privacy Policy. You acknowledge and agree that it is your responsibility to review this privacy policy from time to time in order to learn about any modifications.

This privacy policy applies to the information we collect from you online when you visit our Site. If you obtain a financial product or service from us, your activities on this website may also be governed by our Financial Privacy Notice that describes how personally identifiable consumer financial information you may provide to us is collected, used and retained. 

1. Information We Collect 

Personally Identifiable Information (“PII”): Subject to your specific knowledge and consent, we collect personally identifiable information that can identify you such as your name, address, social security number, telephone number, cell phone number, and email address.

Non-Personally Identifiable Information (“NPII”): We also collect demographic data, online activity data, and other information which could not be used to identify you.

PII and NPII are collectively referred to as “Information.”

2. How We Collect Information

Information Collected Automatically: We use third party server log analysis tools (such as Google Analytics) to gather statistics from your computer, mobile phone, or other access device regarding the Site’s usage, such as the number of hits received and errors experienced through browsers and platforms used to connect to our Site. The Site may place and/or store code or other types of information and/or devices (e.g., “cookies”) on your computer, mobile or other device (collectively “Local Device Storage”). We may use Local Device Storage for any lawful business purpose, including without limitation to determine which of our messages have been opened by recipients so we can gauge the effectiveness of marketing campaigns, to track usage patterns, the movements of individual users, and your geographic location, to help diagnose problems with our servers, to gather broad demographic information, to analyze trends, to conduct research, to deliver editorial content, to record registration and personalization information, and to otherwise administer the Site and/or Service.

The following are examples of information about you that we may collect whenever you visit the Site:

The above information is used to improve the content and/or layout of the Site. We do not sell or rent any information we collect automatically. We also do not share this information with third parties; provided, however, that we may share information with our service providers in order to process any Services you have requested or other everyday business purposes, such as fraud prevention. We may also engage in geo-tracking and/or geotagging activities.

We may combine this automatically collected log information with other Information we collect about you. You may choose to set your web browser to refuse cookies or Local Device Storage, or to alert you when cookies are being sent. If you do so, please note that some parts of our Site may not function properly.

In addition to Local Device Storage, we may use web beacons, web bugs, clear gifs, and similar technologies (collectively, together with Local Device Storage, the “Tracking Technologies”). We use Tracking Technologies for all or some of the same lawful business purposes we describe above for use of Local Device Storage.​

Information You Provide to Us: We may collect, store, and use personal or financial information you provide to us when using the Site or our Services. This Information could be provided via an online form, over the phone, or via other means in which you interact with our Services. Financial information includes any information you have provided using the Site regarding your bank accounts, credit or debit cards, or other financial relationships or circumstances. We may use information you provide to:​

We may share the information you provide with our service providers in connection with any of the foregoing uses. We do not sell or rent such information to third parties and, except as described in this paragraph, we do not share such information with third parties.​

Information from Service Providers and other Third Parties: In the course of providing our Services, Information about you may be collected from third party service providers, such as contractors, social networks, credit bureaus, and other data vendors who have data on your financial profile or other demographic information. Any Information we collect through these sources is treated the same as Information we collect automatically and Information you provide to us.

3. How We Use Your Information

We may use your Information to:

We may also use your Information for certain legal reasons. We reserve the right to access, use, preserve, transfer or disclose, at any time without notice to you, any Information (including PII) as reasonably necessary to:

4. Who Do We Share Your Information With?

Lending Partners: When you submit your Information to us on the Site, you agree that Curve may share your Information with these Network Partners so that they can provide or assist in providing the products or services you requested. The lending partners with whom we share your Information may retain or use your Information whether or not you buy their products or use their services. You should contact these Network Partners directly to learn about their own privacy and information sharing practices.

Curve Vendors and Contractors: To the extent necessary, we may share your Information with vendors that perform certain services on our behalf. Vendors may include, but are not limited to, credit and other types of data bureaus, marketing companies, business analysis firms, and technology providers. We may also share your Information with our partner contractors to the extent necessary to provide the Services offered through the Site.   

When you publicly post information or content: We may provide opportunities on the Curve Site for you to publicly post reviews, comments, or other content, which may include Personal or User Profile Information, like your name or username. Please carefully consider what you decide to share in these public forums.

Other Situations: We may also disclose your Information in the following circumstances, at our sole discretion:

5. Interest-Based and Third-Party Advertising

Third-Party Advertisers: We may allow third parties to display advertising on the Site. We may share your information with such third-party advertisers in accordance with this Privacy Policy and our Terms of Use. Those parties may also collect information about you, or about others using your computer, through their own tracking technologies. To understand how such third parties may use the information they collect, you will need to review the particular advertiser’s own privacy policy.

In addition, some of our third-party vendors and business partners are advertising networks, marketers, publishers, and other entities who conduct analytics and advertise our products and services on websites with which we are not affiliated (“Advertising Vendors”). In connection with such services, we or our Advertising Vendors may use cookies, web beacons, and other similar technologies to record your preferences, track the use of our Site or other websites, and collect Information in order to perform marketing and other analytics, or to serve you advertisements that are more likely to be of interest (“Interest-Based Advertisements”). In doing so, these third parties may collect non-personally identifiable data including for example the make, model, settings, specifications (e.g., CPU speed, connection speed, browser type, operating system, device identifier) and geographic location of your computer, mobile or other device, as well as date/time stamp, IP address, pages visited, time of visits, content viewed, ads viewed, the site(s), application(s), destination(s), and/or service(s) you arrived from, and other clickstream data. The use of Tracking Technologies by third parties is subject to their own privacy policies, not this Privacy Policy, and we have no responsibility or liability in connection therewith.

Disclosure Regarding Google Analytics Tracking and Advertising Features: In addition to services from other analytics and advertising vendors, we use Google Analytics to analyze traffic on the Site. Google Analytics collects data including details about your web browser and the computer you use to access our Site, such as the hostname, browser type, referrer, language, and screen resolution. Google Analytics also sets and reads first-party cookies to obtain user session and ad campaign information from your page request.

Google provides users an opportunity to opt-out of Google Analytics Features through Google Ads Settings and their web browser opt-out plugin (https://tools.google.com/dlpage/gaoptout/). For additional information on opting out of interest-based ads by Google, please visit https://support.google.com/ads/answer/2662922?hl=en&ref_topic=2941003.

Do Not Track Signals: Our Site does not currently respond to automated signals regarding online tracking, such as “do not track” instructions from your web browser. Please note that blocking cookies may affect your browsing experience on the internet, and may limit your use of certain parts of our Services, including many of the personalized offers and other customized features we may provide.

Other Third-Party Content: We may display other third-party content or links to third-party websites or applications on the Curve Site. Such content could include features that allow you to connect your Curve User Account with your social media, financial institution, and other third-party accounts. Please be advised that when you leave our Services or interact with a third-party feature, you should read the applicable privacy policies and terms of service of those parties so that you understand their own information collection and sharing practices.

6. Accessing and Updating Your Information on the Site

 You are responsible for maintaining the accuracy of the information you provide to us, such as your User Profile information.

7. Deactivating Your User Account

 If you decide you no longer want to use our Services, you can deactivate your User Account by contacting our Customer Care Department by email at support-us@curve.com or by calling us at 855-501-2350.

Due to regulatory recordkeeping and information retention requirements, we do not delete your Information when you deactivate your User Account. We will, however, disable your account and stop sending you communications.

8. How We Protect Your Information

We maintain what we believe to be industry standard technical, physical and administrative security procedures and practices to protect your PII against unauthorized access, disclosure, destruction, use, alteration, or disclosure. We use encryption in the transmission of your Information between your system and ours, and we use firewalls and other intrusion detection and prevention controls to help prevent unauthorized persons from gaining access to your Information. We require any service providers that may have access to your PII to implement and maintain industry standard security procedures and practices. We also require employees to comply with information security safeguards.

Because no data transmission is completely secure, and no system of physical or electronic security is impenetrable, however, we cannot guarantee the security of the information you send to us or the security of our servers, networks or databases, and by using the Service you agree to assume all risk in connection with the information sent to us or collected by us when you access, visit and/or use the Service, including without limitation your personally identifiable information or other information, and we are not responsible for any loss of such information or the consequences thereof.

Moreover, if you elect to store information, such as your personally identifiable information or other user account information, where others may access it, we are not responsible for any loss of such information or the consequences thereof. If you lose a computer, mobile or other device, or it is stolen, that contains your personally identifiable information or other information, it is up to you to take all the steps necessary to protect yourself.

In the unlikely event that we believe that the security of your information in our possession or control may have been compromised, we may seek to notify you. If notification is appropriate, we may notify you via your computer, mobile or other device.

If you are, or believe you have become, a victim of identity theft, or if you become aware that your personal information has been compromised, you may want to contact one of the three nationwide credit reporting agencies identified below to report possible fraudulent activity under your name and learn more about fraud alerts and security freezes that you can place on your credit reports, your right to obtain a free copy of your credit report from each of the credit reporting agencies, and other preventive measures you can take now to help detect and prevent the improper use of your information:

Equifax

1-800-525-6285

P. O. Box 105788, Atlanta, GA 30348

https://www.equifax.com/personal/identity-theft-protection

Experian

1-888-397-3742

P. O. Box 9554, Allen, TX 75013

https://www.experian.com/help/identity-theft-victim-assistance.html

TransUnion

1-800-680-7289

P. O. Box 6790, Fullerton, CA 92834-6790

https://www.transunion.com/identity-theft

You may also visit the website of the Federal Trade Commission at https://www.identitytheft.gov for free information to help you guard against identity theft and for guidance on the recovery steps you can take if you have been the victim of identity theft, including information on how to file an identity theft complaint. 

Compliance with Children’s Online Privacy Protection Rule 

We do not knowingly collect, use, or disclose PII from anyone under the age of 18. If we determine that a User is under this age, we will not use or maintain their PII without consent from a parent or guardian. If we become aware that we have collected PII from a child under the age of 18, we will make reasonable efforts to delete such information from our systems and records.

9. California Consumer Privacy Act

If you are a California resident, the CCPA provides you certain rights and choices regarding how we collect, share, use, and protect your “personal information” and how you can exercise those rights. The CCPA defines “personal information” as information that identifies, relates to, describes, or is reasonably capable of being associated with, or could reasonably be linked, directly, or indirectly, with a particular consumer or household.

This CCPA Notice does not apply to the personal information we collect, use or disclose about consumers who initiate or complete the process of applying for financial products. Such information is subject to the Gramm-Leach-Bliley Act, or other federal privacy regulations, and is in our Financial Privacy Notice which can be accessed here.

To the extent that we collect “personal information” that is subject to the CCPA, that information, our practices, and your rights are described below. 

Categories of Personal Information:

10. Deletion

You can ask us to delete the personal information that we collected or maintain about you. We are required to verify your identity before we can act on your request. We may have a reason under law why we do not have to comply with your request or why we may comply with it in a more limited way that you anticipated. If so, we will explain that to you in our response.

11. How to Submit a Request

To exercise rights described above, please submit a verifiable consumer request to us by either calling us at 855-501-2350 or emailing us at support-us@curve.com. You may only make a verifiable consumer request twice within a 12 (twelve) month period.

Making a verifiable consumer request does not require you to open an account with us. We must be able to verify your identity or authority to make the request and confirm the personal information relates to you. We will only use information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

You may authorize another individual or a business registered with the California Secretary of State, called an authorized agent, to make requests on your behalf. We require that you and the individual complete notarized affidavits to verify the identity of the authorized agent and confirm that you have authorized that person to act on your behalf.

We will try and respond to a verifiable consumer request within 45 days of its receipt. If we require more time, we will inform you of the reason and extension period, not to exceed 90 days, in writing. Any disclosure we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. We do not charge a fee to process or respond to your verifiable consumer request.

Right of Non-Discrimination: We will not discriminate against you for exercising any of your rights in this Online Privacy Policy and under applicable laws.

12. Nevada Residents 

Nevada Residents: Nevada residents have the right to opt out of the sale of certain pieces of their information.  We do not sell “personal information” of Nevada residents, but, if you are a Nevada resident who has questions or who wants to make this type of request, please send your email to support-us@curve.com 

13. For EEA & UK Residents 

If you are an EEA or UK Curve customer who has chosen to enroll in a rewards program offered by Curve, US we will control your personal data relating to such rewards program(s).

The Data We Process 

As a data controller, we process the following personal data for the outlined purposes, in accordance with the General Data Protection Regulation (“GDPR”); 

Our Lawful Basis

In accordance with Article 6 (1)(F) of the GDPR, Curve, US has a lawful basis to process this personal data. This processing is necessary for ours and Zero Hash’s legitimate interests to provide customers with Crypto Rewards, where they choose to opt into this program. This processing is necessary and proportionate, as it is required to exchange customers’ rewards into Cryptocurrency.

Data Sharing

We receive your personal data from Curve Europe UAB or Curve UK Limited, depending on the original data controller. We share your personal data with a number of third party service providers; 

For further information on the personal data Curve UK and Curve Europe processes, please review their privacy policy here.

Data Transfers 

We receive the personal data of EEA & UK data subjects from Curve’s UK and Europe entities respectively in accordance with the European Commission’s approved standard contractual clauses and / or the UK equivalent. 

We may transfer this personal data to organisations outside of the EEA & UK. In the event we perform such transfers, we do so lawfully and in accordance with Article 46 of the GDPR.

Data Retention 

The period for which we retain data about you will depend on: 

We will not retain data about you for longer than is necessary to fulfil the purposes for which the data was collected. We may keep your personal data for a longer period where it is necessary for legal, regulatory or operational purposes.

Your Rights

In accordance with the GDPR, you have rights over your personal data. 

If you want to do any of the above, please contact us at support-us@curve.com and provide as much information as possible about your request. 

We have one month to respond unless your request is complicated, in which case we may need more time. If that’s the case, we’ll let you know. 

This is almost always free but we’re allowed to charge a reasonable fee or refuse your request if it’s clearly unfounded, repetitive or excessive.

Contact Information

Our representative in Europe is Curve Europe UAB, whose Data Protection Officer can be contacted at DPO@imaginecurve.com. 

Should you wish to make a complaint regarding our processing of your personal data or another general data protection matter, we urge you to contact our Data Protection Officer in the first instance. They will work to assist and resolve any such complaints as quickly as possible. 

Alternatively, you have the right to lodge a complaint with a data protection supervisory authority. The Information Commissioner’s Office (UK) and the Lithuanian State Data Protection Inspectorate (EU) are Curve’s Lead Supervisory Authorities under the GDPR. 

How to Contact Us

If you have any questions about this privacy policy, our business practices, or your relationship with Curve, please contact us at:

 support-us@curve.com

Privacy Notice

What Does Curve Do With Your Personal Information

Why? 

Financial companies choose how they share your personal information. Federal law  gives consumers the right to limit some but not all sharing. Federal law also requires  us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.

What? 

The types of personal information we collect and share depend on the product or  service you have with us. This information can include:  

■ Social Security number and income  

■ account balances and payment history  

■ credit history and credit scores  

When you are no longer our customer, we continue to share your information as described in this notice.

How? 

All financial companies need to share customers’ personal information to run their  everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons we choose to share; and  whether you can limit this sharing.

Reasons we can share your personal information that we DO share and you CANNOT limit this sharing -

Reasons we can share your personal information that we DO share and you CAN limit this sharing -

To limit our sharing

Email us at support-us@curve.com

Call us at 855-501-2350

Please note:  

If you are a new customer, we can begin sharing your information the same day that we send this notice. When you are no longer our customer, we continue to  share your information as described in this notice.  

However, you can contact us at any time to limit our sharing.

Questions?            

Contact us at support-us@curve.com or go to Curve.com

Who is providing this notice? 

Curve US, Inc., and Hatch Bank

What we do

How does Curve protect my personal  information?

To protect your personal information from unauthorized access and use, we use security measures include computer safeguards and secured files and buildings.

How does Curve collect my personal  information?

We collect your personal information, for example, when you:    

We also collect your personal information from credit  bureaus, affiliates, or other companies.

Why can’t I limit all sharing? 

Federal law gives you the right to limit only  

State laws and individual companies may give you additional  rights to limit sharing. See below for more on your rights  under state law.

Definitions

Affiliates -  

Companies related by common ownership or control. They  can be financial and nonfinancial companies.  

We share information with Curve OS Ltd, under a formal agreement to provide operational support for Curve USA Inc.’s  products issued by Hatch Bank

Nonaffiliates -

Companies not related by common ownership or control.  They can be financial and nonfinancial companies.  

■ Non-affiliates we share with can include companies such as retailers and membership clubs 

Other Important Information

State Laws  

CA: We will not share personal information with nonaffiliates either for them to market to you or for joint marketing without your authorization. We will also limit our sharing of personal information about you with our affiliates to comply with California privacy law.

VT: We will not share your information with companies outside of Curve, except as permitted by law or as authorized by you. We will not disclose credit information about you with our affiliates except with your consent or as required or permitted by law.