The house behind the curves.

1. Controller and contact

1.1 The controller is MissCurvy.com as identified in the Imprint. Data protection enquiries: privacy.bofc@misscurvy.com.

1.2 Where a Data Protection Officer is appointed, the contact is published in the Imprint.

2. What we collect

2.1 Visitors: technical log data (IP address, browser, device, pages viewed, timestamps), strictly necessary cookies (see Cookie Policy).

2.2 Registered users: name, email address, country, password (hashed), language, account status, date joined; activity on the site (votes, ratings, favourites, comments, reports) with timestamps.

2.3 Applicants and contestants: date of birth, citizenship(s), contact details (address, phone), body measurements, written story, photographs and films, identification documents shown for verification (not stored beyond verification), selection decisions and scores, contest results.

2.4 MissCurvy Associates and photographers: grant type and scope, decisions, scores, reports and comments made in the desks, assignment records.

2.5 We do not knowingly collect data of persons under 18. Applications require confirmation of age; accounts of minors are deleted when identified.

3. Why and on what legal basis

3.1 Running the Contest you take part in (registration, voting, application, selection, live rounds, results) — performance of a contract (Art. 6(1)(b) GDPR).

3.2 Processing body measurements and photographs for selection and casting — your explicit consent, given by ticking the consent box in the application (Art. 6(1)(a); Art. 9(2)(a) where applicable). You may withdraw consent at any time; withdrawal ends your application.

3.3 Publishing contestant names, IDs, photographs, films and results in the Live Contest, galleries, archive and promotion — performance of the contest contract and the licence granted in the Terms of Participation; our legitimate interest in operating a public contest (Art. 6(1)(f)).

3.4 Integrity and security (detecting vote fraud, multiple accounts, abuse; audit logging) — legitimate interest (Art. 6(1)(f)) and legal obligations.

3.5 Email notifications about your account and your journey in the Contest — contract performance. Marketing emails only with your consent, which you may withdraw with each email.

4. Who sees your data

4.1 MissCurvy Associates reviewing applications see anonymised profiles only: contest ID, age, measurements, story and media — never name, address, email or phone.

4.2 Sub-administrators see contestants anonymised by contest ID. Only the House’s main administration sees full identity.

4.3 The public sees what the Contest publishes: contestant name (or stage name), contest ID, country, Contest Photography, photographer credit, vote counts and results.

4.4 Service providers acting on our instructions under data processing agreements: hosting and content delivery, email delivery, media storage, analytics (privacy-configured), payment providers for prizes where applicable.

4.5 Sponsors and partners receive aggregated exposure statistics only; never personal data.

4.6 Authorities where required by law. Data may be transferred outside the EEA/UK only with appropriate safeguards (adequacy decision or standard contractual clauses).

5. How long we keep it

5.1 Account data: for the life of the account and 12 months after deletion request (fraud prevention), then deleted.

5.2 Applications not selected: 24 months after the Contest closes, then deleted or anonymised, unless you ask for earlier deletion.

5.3 Contest Photography, results and published contestant names: retained in the archive as part of the historical record of the Contest; on request the House will restrict further promotional use.

5.4 Identification documents: viewed for verification and not stored; a verification note (date, verifier) is kept.

5.5 Audit log entries: 6 years (integrity and legal defence).

6. Your rights

6.1 You may request access to, rectification or erasure of your data, restriction of processing, portability, and object to processing based on legitimate interest. Where processing is based on consent you may withdraw it at any time with effect for the future.

6.2 Contestants may withdraw their application and request deletion of unpublished media at any time before the Live Contest begins. Published Contest Photography remains in the archive under the licence granted; further promotional use is stopped on request.

6.3 Requests: privacy.bofc@misscurvy.com. We respond within one month. You may lodge a complaint with your national supervisory authority.

7. Security

7.1 Data is encrypted in transit (TLS) and at rest. Access is role-based and logged. Passwords are stored hashed. Original media is stored in access-controlled storage; public pages receive derived display sizes only.

7.2 In the event of a personal data breach that is likely to result in a high risk to you, we will notify you and the competent authority as required by law.

8. Changes

8.1 We may update this Policy. Material changes are announced on the site and, for registered users, by email. The date of the current version appears at the top.