Privacy Policy for Kurl Connect
Privacy Policy for Kurl Connect
Last Updated: 25 August 2026
1. Who We Are & What We Collect
1. Who We Are & What We Collect
This Privacy Policy explains how Kurl Connect collects, uses, stores, discloses and protects personal data when you visit or use the Kurl Connect website, platform, applications, community features and any related services made available by Kurl Connect.
Kurl Connect is a European platform created to connect people with curly, coily and textured hair with salons, stylists and hair professionals who understand textured hair. Our services may include salon and stylist discovery, business profiles, reviews, community content, waitlist registration, communications, bookings and other features introduced as the platform develops.
For the purposes of this Privacy Policy, "Kurl Connect", "we", "us" and "our" refer to the entity operating the Kurl Connect platform. Before publication, the legal name and registered details of the operating entity must be inserted in the website's legal information.
Kurl Connect acts as the data controller for the personal data it processes for its own purposes. Where another organisation processes personal data on our behalf, that organisation may act as a processor or, where appropriate, as an independent controller.
We may collect personal data that you provide directly to us. This may include your name, email address, telephone number, account information, location, preferences, communications with us and information submitted when you join our waitlist, create an account, contact us or use other features of the platform.
Because Kurl Connect is designed specifically for textured hair, you may choose to provide information concerning your hair type, curl pattern, hair preferences, previous experiences, preferred services or the type of salon or stylist you are looking for. Providing such information is generally voluntary.
You may also submit reviews, ratings, photographs, comments, stories and other material through the community features of Kurl Connect. Information that you choose to publish publicly may be visible to other users and potentially to members of the general public.
We may also collect technical and usage information automatically when you use our website or platform. This may include your IP address, browser type, device information, operating system, language preferences, pages visited, features used, approximate location, referring website, dates and times of access and information concerning your interactions with the platform.
We do not ask you to provide medical information in order to use Kurl Connect. You should not submit medical, dermatological, allergy or other health information unless a particular feature expressly requires it and provides an appropriate privacy notice.
Where information concerning health or another specially protected category of personal data is processed, Kurl Connect will do so only where permitted by applicable data protection law and where an appropriate legal condition exists.
Kurl Connect is not a healthcare provider and the platform should not be used as a substitute for medical or dermatological advice.
This Privacy Policy explains how Kurl Connect collects, uses, stores, discloses and protects personal data when you visit or use the Kurl Connect website, platform, applications, community features and any related services made available by Kurl Connect.
Kurl Connect is a European platform created to connect people with curly, coily and textured hair with salons, stylists and hair professionals who understand textured hair. Our services may include salon and stylist discovery, business profiles, reviews, community content, waitlist registration, communications, bookings and other features introduced as the platform develops.
For the purposes of this Privacy Policy, "Kurl Connect", "we", "us" and "our" refer to the entity operating the Kurl Connect platform. Before publication, the legal name and registered details of the operating entity must be inserted in the website's legal information.
Kurl Connect acts as the data controller for the personal data it processes for its own purposes. Where another organisation processes personal data on our behalf, that organisation may act as a processor or, where appropriate, as an independent controller.
We may collect personal data that you provide directly to us. This may include your name, email address, telephone number, account information, location, preferences, communications with us and information submitted when you join our waitlist, create an account, contact us or use other features of the platform.
Because Kurl Connect is designed specifically for textured hair, you may choose to provide information concerning your hair type, curl pattern, hair preferences, previous experiences, preferred services or the type of salon or stylist you are looking for. Providing such information is generally voluntary.
You may also submit reviews, ratings, photographs, comments, stories and other material through the community features of Kurl Connect. Information that you choose to publish publicly may be visible to other users and potentially to members of the general public.
We may also collect technical and usage information automatically when you use our website or platform. This may include your IP address, browser type, device information, operating system, language preferences, pages visited, features used, approximate location, referring website, dates and times of access and information concerning your interactions with the platform.
We do not ask you to provide medical information in order to use Kurl Connect. You should not submit medical, dermatological, allergy or other health information unless a particular feature expressly requires it and provides an appropriate privacy notice.
Where information concerning health or another specially protected category of personal data is processed, Kurl Connect will do so only where permitted by applicable data protection law and where an appropriate legal condition exists.
Kurl Connect is not a healthcare provider and the platform should not be used as a substitute for medical or dermatological advice.
2. How We Use Your Data
2. How We Use Your Data
Kurl Connect processes personal data only for legitimate, specified and proportionate purposes.
We use personal data primarily to provide, maintain and improve the Kurl Connect platform. This includes creating and managing accounts, maintaining user profiles, providing search and discovery functionality, helping users find salons and stylists, facilitating community participation, responding to enquiries and providing customer support.
Where you provide information about your hair preferences, location or the type of service you are seeking, we may use that information to make our discovery features more relevant to you. The purpose is to help you find salons and stylists that may be appropriate for your needs. Kurl Connect does not make medical decisions or determine that a particular treatment is medically suitable for you.
We process information submitted through reviews, ratings, stories and other community features in order to operate the Kurl Connect community, display user contributions, maintain the integrity of the platform and improve the usefulness of the information available to users.
We may use personal data to communicate with you about your account, the operation of the Services, security matters, important changes, bookings or other transactions you have initiated. Where permitted by applicable law, we may also send information concerning Kurl Connect, new features, salons, stylists, community developments and other relevant updates. Where consent is legally required for marketing, we will obtain that consent before sending marketing communications.
We may process personal data for the purposes of protecting the security of Kurl Connect, detecting and preventing fraud, spam, abuse and other prohibited activity, investigating suspected violations of our Terms of Service and protecting the rights, property and safety of Kurl Connect, our users and third parties.
We may also process information where necessary to comply with applicable European or national law, respond to lawful requests from public authorities, establish or defend legal claims, maintain business records or satisfy accounting, tax or regulatory obligations.
Where the GDPR applies, the legal basis for processing will depend on the purpose of the processing. We may process personal data because it is necessary to provide a service you have requested or to take steps at your request before entering into an agreement. We may process information because we have a legitimate interest in operating, securing and improving Kurl Connect, provided that those interests do not override your fundamental rights and freedoms. We may process information where necessary to comply with a legal obligation. Where we rely on consent, we will obtain consent in accordance with applicable law and you may withdraw that consent at any time.
Consent will be presented separately from other terms where required. Consent must be freely given, specific, informed and unambiguous under the GDPR.
We do not use personal data for purposes that are incompatible with the purposes described in this Privacy Policy without providing additional information and obtaining any consent required by law.
We may create aggregated or anonymised information for analytical, statistical, research and business purposes. Where information has been properly anonymised so that an individual can no longer be identified, it is no longer personal data for the purposes of the GDPR.
Kurl Connect processes personal data only for legitimate, specified and proportionate purposes.
We use personal data primarily to provide, maintain and improve the Kurl Connect platform. This includes creating and managing accounts, maintaining user profiles, providing search and discovery functionality, helping users find salons and stylists, facilitating community participation, responding to enquiries and providing customer support.
Where you provide information about your hair preferences, location or the type of service you are seeking, we may use that information to make our discovery features more relevant to you. The purpose is to help you find salons and stylists that may be appropriate for your needs. Kurl Connect does not make medical decisions or determine that a particular treatment is medically suitable for you.
We process information submitted through reviews, ratings, stories and other community features in order to operate the Kurl Connect community, display user contributions, maintain the integrity of the platform and improve the usefulness of the information available to users.
We may use personal data to communicate with you about your account, the operation of the Services, security matters, important changes, bookings or other transactions you have initiated. Where permitted by applicable law, we may also send information concerning Kurl Connect, new features, salons, stylists, community developments and other relevant updates. Where consent is legally required for marketing, we will obtain that consent before sending marketing communications.
We may process personal data for the purposes of protecting the security of Kurl Connect, detecting and preventing fraud, spam, abuse and other prohibited activity, investigating suspected violations of our Terms of Service and protecting the rights, property and safety of Kurl Connect, our users and third parties.
We may also process information where necessary to comply with applicable European or national law, respond to lawful requests from public authorities, establish or defend legal claims, maintain business records or satisfy accounting, tax or regulatory obligations.
Where the GDPR applies, the legal basis for processing will depend on the purpose of the processing. We may process personal data because it is necessary to provide a service you have requested or to take steps at your request before entering into an agreement. We may process information because we have a legitimate interest in operating, securing and improving Kurl Connect, provided that those interests do not override your fundamental rights and freedoms. We may process information where necessary to comply with a legal obligation. Where we rely on consent, we will obtain consent in accordance with applicable law and you may withdraw that consent at any time.
Consent will be presented separately from other terms where required. Consent must be freely given, specific, informed and unambiguous under the GDPR.
We do not use personal data for purposes that are incompatible with the purposes described in this Privacy Policy without providing additional information and obtaining any consent required by law.
We may create aggregated or anonymised information for analytical, statistical, research and business purposes. Where information has been properly anonymised so that an individual can no longer be identified, it is no longer personal data for the purposes of the GDPR.
3. How We Protect & Share Your Data
3. How We Protect & Share Your Data
Kurl Connect takes the security and confidentiality of personal data seriously. We maintain appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.
No online service can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify Kurl Connect promptly if you believe that your account has been accessed without authorisation.
Kurl Connect may engage trusted third-party service providers to operate the platform. These providers may include hosting and cloud infrastructure providers, database providers, email and communications providers, customer support providers, analytics providers, security providers, payment processors and booking or scheduling providers.
Where a service provider processes personal data on behalf of Kurl Connect, we will require the provider to comply with applicable data protection obligations and to process personal data only for authorised purposes.
Kurl Connect may also disclose personal data where required by applicable law, regulation, court order or lawful request from a competent authority. We may disclose information where reasonably necessary to establish, exercise or defend legal claims, investigate fraud or abuse, protect the security of the platform, or protect the rights, safety or property of Kurl Connect, our users or another person.
Kurl Connect does not sell your personal data.
If Kurl Connect is involved in a merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction, personal data may be transferred or disclosed as part of that transaction where legally permitted and subject to appropriate safeguards.
Some of our service providers may process personal data outside the European Economic Area. Where personal data is transferred outside the EEA, Kurl Connect will use a lawful transfer mechanism recognised under applicable data protection law. Depending on the circumstances, this may include a European Commission adequacy decision, Standard Contractual Clauses or another lawful safeguard.
Kurl Connect retains personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Account information will generally be retained for the duration of the account and for a reasonable period afterwards where necessary for legal, security or operational purposes. Information concerning transactions, complaints, disputes and legal matters may be retained for the period necessary to resolve those matters and comply with applicable obligations.
Reviews and community content may remain available after an account is closed where necessary to preserve the integrity of the platform, provided that such retention remains lawful. Where appropriate, content may be anonymised or removed.
Kurl Connect may use cookies and similar technologies. Strictly necessary cookies may be used to operate and secure the website. Non-essential analytics, advertising or similar technologies will be used only in accordance with applicable law and, where required, after obtaining your consent.
The specific third-party providers used by Kurl Connect may change as the platform develops. Where required by applicable law, relevant information concerning such providers will be made available through this Privacy Policy, our cookie documentation or other appropriate notices.
Kurl Connect takes the security and confidentiality of personal data seriously. We maintain appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.
No online service can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify Kurl Connect promptly if you believe that your account has been accessed without authorisation.
Kurl Connect may engage trusted third-party service providers to operate the platform. These providers may include hosting and cloud infrastructure providers, database providers, email and communications providers, customer support providers, analytics providers, security providers, payment processors and booking or scheduling providers.
Where a service provider processes personal data on behalf of Kurl Connect, we will require the provider to comply with applicable data protection obligations and to process personal data only for authorised purposes.
Kurl Connect may also disclose personal data where required by applicable law, regulation, court order or lawful request from a competent authority. We may disclose information where reasonably necessary to establish, exercise or defend legal claims, investigate fraud or abuse, protect the security of the platform, or protect the rights, safety or property of Kurl Connect, our users or another person.
Kurl Connect does not sell your personal data.
If Kurl Connect is involved in a merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction, personal data may be transferred or disclosed as part of that transaction where legally permitted and subject to appropriate safeguards.
Some of our service providers may process personal data outside the European Economic Area. Where personal data is transferred outside the EEA, Kurl Connect will use a lawful transfer mechanism recognised under applicable data protection law. Depending on the circumstances, this may include a European Commission adequacy decision, Standard Contractual Clauses or another lawful safeguard.
Kurl Connect retains personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Account information will generally be retained for the duration of the account and for a reasonable period afterwards where necessary for legal, security or operational purposes. Information concerning transactions, complaints, disputes and legal matters may be retained for the period necessary to resolve those matters and comply with applicable obligations.
Reviews and community content may remain available after an account is closed where necessary to preserve the integrity of the platform, provided that such retention remains lawful. Where appropriate, content may be anonymised or removed.
Kurl Connect may use cookies and similar technologies. Strictly necessary cookies may be used to operate and secure the website. Non-essential analytics, advertising or similar technologies will be used only in accordance with applicable law and, where required, after obtaining your consent.
The specific third-party providers used by Kurl Connect may change as the platform develops. Where required by applicable law, relevant information concerning such providers will be made available through this Privacy Policy, our cookie documentation or other appropriate notices.
4. Your Rights & Contact
4. Your Rights & Contact
Under the GDPR, individuals have important rights concerning their personal data. Subject to applicable conditions and exceptions, you may request access to personal data held about you, ask us to correct inaccurate or incomplete information, request deletion of personal data, request restriction of processing, object to certain processing and request portability of personal data where the legal requirements for portability are satisfied.
Where Kurl Connect processes your personal data on the basis of consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You have an unconditional right to object to the processing of your personal data for direct marketing purposes.
Where Kurl Connect processes your personal data on the basis of legitimate interests, you may object to that processing where you have grounds relating to your particular situation, subject to the circumstances provided by applicable law.
To exercise your rights, you may contact Kurl Connect using the contact details published on our website. We may request information reasonably necessary to verify your identity before responding to a request. This is intended to protect your information and prevent personal data from being disclosed to an unauthorised person.
We will respond to valid data protection requests without undue delay and, in principle, within one month of receiving the request, subject to the extensions permitted by the GDPR for complex or numerous requests. If we do not comply with a request, we will explain the reasons and inform you of your right to lodge a complaint with a supervisory authority.
If you believe that Kurl Connect has processed your personal data unlawfully or has failed to respect your rights, you may contact us first so that we can investigate the matter. You also have the right to lodge a complaint with the data protection supervisory authority in the European Union Member State of your habitual residence, place of work or place of the alleged infringement, subject to the rules applicable to your circumstances.
If Kurl Connect is established in a particular EU Member State, the competent supervisory authority for Kurl Connect's establishment will be identified in our final published privacy documentation.
Kurl Connect is not intended to knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law. Where we become aware that personal data has been collected from a child in circumstances where the collection was unlawful, we will take appropriate steps to delete that information.
Kurl Connect may update this Privacy Policy when our Services, technology, business operations or applicable law change. Where a change is material, we will provide appropriate notice where required by law. The effective date shown at the beginning of this Privacy Policy indicates the date on which the current version became effective.
For privacy enquiries, data protection requests or questions regarding this Privacy Policy, please contact:
Legal entity: Kurl Connect
Privacy email: kurlconnectapp@gmail.com
Under the GDPR, individuals have important rights concerning their personal data. Subject to applicable conditions and exceptions, you may request access to personal data held about you, ask us to correct inaccurate or incomplete information, request deletion of personal data, request restriction of processing, object to certain processing and request portability of personal data where the legal requirements for portability are satisfied.
Where Kurl Connect processes your personal data on the basis of consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You have an unconditional right to object to the processing of your personal data for direct marketing purposes.
Where Kurl Connect processes your personal data on the basis of legitimate interests, you may object to that processing where you have grounds relating to your particular situation, subject to the circumstances provided by applicable law.
To exercise your rights, you may contact Kurl Connect using the contact details published on our website. We may request information reasonably necessary to verify your identity before responding to a request. This is intended to protect your information and prevent personal data from being disclosed to an unauthorised person.
We will respond to valid data protection requests without undue delay and, in principle, within one month of receiving the request, subject to the extensions permitted by the GDPR for complex or numerous requests. If we do not comply with a request, we will explain the reasons and inform you of your right to lodge a complaint with a supervisory authority.
If you believe that Kurl Connect has processed your personal data unlawfully or has failed to respect your rights, you may contact us first so that we can investigate the matter. You also have the right to lodge a complaint with the data protection supervisory authority in the European Union Member State of your habitual residence, place of work or place of the alleged infringement, subject to the rules applicable to your circumstances.
If Kurl Connect is established in a particular EU Member State, the competent supervisory authority for Kurl Connect's establishment will be identified in our final published privacy documentation.
Kurl Connect is not intended to knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law. Where we become aware that personal data has been collected from a child in circumstances where the collection was unlawful, we will take appropriate steps to delete that information.
Kurl Connect may update this Privacy Policy when our Services, technology, business operations or applicable law change. Where a change is material, we will provide appropriate notice where required by law. The effective date shown at the beginning of this Privacy Policy indicates the date on which the current version became effective.
For privacy enquiries, data protection requests or questions regarding this Privacy Policy, please contact:
Legal entity: Kurl Connect
Privacy email: kurlconnectapp@gmail.com