Last updated: February 2026

1. Data Controller

Curzon Uranium Ltd. (“Curzon”, “we”, “us”, “our”) is the data controller responsible for your personal data.

• Registered address: Trilogy Limassol Seafront, 28th October Avenue 335, West Tower, Office 801, 3106, Limassol, Cyprus
• Email: nuclearfuel@curzonresources.co.uk

As a Cyprus-registered company operating within the European Union, we process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

2. What Data We Collect

2.1 Contact Form Submissions

When you use the contact form on our website, we collect:

• Your name
• Your email address
• Subject line (optional)
• Your message

2.2 Technical Data

When you visit our website, we may collect:

• IP address (anonymised for rate limiting purposes only, not stored long-term)
• Browser type and version
• Pages visited and time of access

2.3 Cookies

We use a single first-party cookie to store your cookie consent preference. If you accept optional cookies, third-party services (Google Fonts, Google Maps) may set additional cookies. For full details, see our Cookie Policy.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries: We process contact form submissions to reply to your questions and business enquiries. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• To maintain website security: We use IP addresses for rate limiting to prevent abuse of our contact form. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• To provide website functionality: We use a consent cookie to remember your cookie preferences. Legal basis: consent (Art. 6(1)(a) GDPR) for optional cookies; legitimate interest for the essential consent cookie itself.

4. Third-Party Services

Our website uses the following third-party services, which are only loaded with your consent:

• Google Fonts: Web fonts served by Google LLC. When loaded, Google may receive your IP address. Google Privacy Policy.
• Google Maps: Embedded maps served by Google LLC. When loaded, Google may set cookies and receive your IP address. Google Privacy Policy.

These services are only activated if you click “Accept All” on our cookie consent banner. If you choose “Essential Only”, these services are not loaded and no data is shared with Google.

5. Data Retention

• Contact form submissions: Emails containing your enquiry are retained for as long as necessary to address your request and any resulting business relationship, then deleted.
• Rate limiting data: IP hashes used for rate limiting are automatically deleted after 5 minutes.
• Cookie consent preference: Stored for 365 days in your browser, then expires.

6. International Transfers

If you consent to optional cookies, data may be transferred to Google LLC in the United States. Google participates in the EU-U.S. Data Privacy Framework, providing adequate safeguards for such transfers. No other international data transfers take place.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15) – Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16) – Request correction of inaccurate data.
• Right to erasure (Art. 17) – Request deletion of your personal data.
• Right to restrict processing (Art. 18) – Request that we limit how we use your data.
• Right to data portability (Art. 20) – Request your data in a structured, commonly used format.
• Right to object (Art. 21) – Object to processing based on legitimate interest.
• Right to withdraw consent (Art. 7(3)) – Withdraw cookie consent at any time by clearing your browser cookies.

To exercise any of these rights, contact us at nuclearfuel@curzonresources.co.uk. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption on all pages
• Server-side input validation and sanitisation
• Honeypot and rate limiting on contact forms to prevent abuse
• CSRF protection via security tokens

9. Right to Complain

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For Cyprus, this is the Commissioner for Personal Data Protection (www.dataprotection.gov.cy).

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

11. Contact Us

For any questions about this privacy policy or our data practices, contact us at:

• Email: nuclearfuel@curzonresources.co.uk
• Post: Curzon Uranium Ltd., Trilogy Limassol Seafront, 28th October Avenue 335, West Tower, Office 801, 3106, Limassol, Cyprus