Privacy policy
Who we are
This policy explains how Capricos handles personal information collected through capricos.com. Capricos is a sole trader in the United Kingdom, trading as Capricos, and is the data controller for that information. There is no company number or registered office to publish, because Capricos is not a registered company.
For anything in this policy, including any request about your data, email contact@capricos.com. That address is read by the person who does the work.
What we collect
This site has no accounts, no login and no shopping basket. There are two places where you can send us information, and both are voluntary.
Start a project, on the homepage, asks for: Name; Email; What do you need?; Tell us a bit more (optional).
Build your spec, on the operations software page, asks for: Your current tools; Where does it hurt?; People in the business; People who’d log in; In your words (what the business does); What would the system have to do for this to be worth it? (optional); Timeline; Budget in mind (optional); Name; Email; Company (optional).
When you send either form, the server that receives it also sees your IP address. It is used only to stop the same address sending the forms over and over, is held in memory for no more than ten minutes, and is not stored or sent on.
Separately, the site counts page views with cookieless analytics, described under Cookies and analytics below.
Why we use it
What you send through a form is used to reply to you and, if it goes further, to scope and quote the work. Under UK and EU data protection law our lawful bases are taking steps, at your request, before entering a contract, and our legitimate interests in answering enquiries and keeping a record of them.
Page-view counts are used, under our legitimate interests, to understand roughly how the site is used so it can be improved. They identify nobody.
We do not use your information for automated decision-making, we never sell it, and we never share it for anyone else’s marketing. Sending a form does not put you on a mailing list.
Who processes it for us
Three companies process data on our behalf, each for one narrow job:
- Vercel Inc. (United States) hosts the website and runs the small piece of code that checks a form and passes it on. It sees request logs, including IP addresses, and the contents of a form while passing it on. It also provides the cookieless page-view counts.
- Formspree, Inc. (United States) turns a form into an email to us. It receives everything you typed into the form and keeps a copy in its submission archive.
- Proton AG (Switzerland) provides our email. It holds the enquiry once it reaches our inbox, and anything you email us afterwards.
Where information goes to the United States, it is protected by the safeguards each company provides for international transfers, such as standard contractual clauses. Loading a page on this site contacts nobody but us: the fonts are served from this site, and there are no embeds.
How long we keep it
Enquiries and the correspondence that follows them are kept while there’s a live conversation, and then for up to two years afterwards, so that if you come back a year later we still know what we discussed. After that they’re deleted, from our inbox and from the Formspree archive.
Where an enquiry turns into paid work, the records that go with it are kept for six years from the end of the engagement, which is what UK tax and contract-limitation rules require.
If you’d rather we didn’t keep your enquiry at all, say so and it will be deleted.
Your rights
Under the UK GDPR, and the EU GDPR where it applies to you, you can ask us to tell you what we hold about you and give you a copy, correct anything that’s wrong, delete it, restrict or object to what we do with it, or send it to you or someone else in a portable format.
Email contact@capricos.com and we’ll act on it. There’s no charge and no form to fill in. We aim to reply within a few days, and in any case within one month.
If you think we’ve handled your data badly, you can complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk. If you’re in the EU you can also complain to the data protection authority where you live. We’d appreciate the chance to put it right first.
Changes to this policy
If this policy changes, the date at the top changes with it. Anything significant, such as a new analytics tool, a new company processing data or a change to what the forms ask for, will be described here rather than folded in quietly.
Contact
Questions about this policy or your data: contact@capricos.com.