What this site collects, and what happens to it.
Who we are
Capricos is a design and marketing studio operated by a sole trader in the United Kingdom. It builds custom operations software and brand, print, social and website work.
Capricos is the data controller for personal information collected through this website. There is no company number or registered office to publish because Capricos is not a registered company.
For anything in this policy, including any request about your data, email contact@capricos.com. That address is monitored by one person — the same person who does the work.
What this site collects
This site has no accounts, no login and no shopping basket. There are exactly two places on the site itself where you can give us information, and both are voluntary:
| Where | What it asks for | Why |
|---|---|---|
| The spec builder on the operations software page | Your name, your company name, your email address, and your answers about what your business runs on now and what you want built — including roughly how many people are in the business, how many would use the system, a timeline, and a budget range if you give one | To understand the job well enough to quote it, and to reply to you |
| The contact form on the studio page | Your name, your email address, and a description of the work | To reply to your enquiry |
That's the complete list for the site. We don't ask for a phone number or a job title, because neither is needed to answer an enquiry. The spec builder does ask how big the business is, how many people would use the system, and whether you have a budget in mind — those shape what gets built and what it would cost, and the budget question is optional. If a field appears on a form and you'd rather not fill it in, leave it blank and send it anyway.
There is one more place, and it is not on this site: the operations software page offers a link to book a call, which opens Cal.com. If you book, you give your name, email address and chosen time to Cal.com, who pass it to us. If you never click it, nothing is sent.
Beyond that, our hosting provider records standard technical information about requests to the site — the pages requested, timestamps, and approximate location and device type derived from the request. That is covered below.
Cookies — this site doesn't set any
This website sets no cookies at all. Not for analytics, not for advertising, not for preferences. That is why you have not been shown a cookie banner: there is nothing to ask your permission for.
We use Vercel Web Analytics, which is deliberately cookieless. It counts page views and referrers without storing anything on your device and without building a profile of you across sites. It does not follow you anywhere.
There are no advertising pixels, no retargeting tags, no session replay, no embedded social feeds, no chat widget and no third-party video or maps embeds anywhere on this site.
If that ever changes — if Capricos adds Google Analytics or an advertising pixel — this section will change with it and a real consent banner will appear, one that blocks those scripts until you accept.
Why we're allowed to hold it
Under UK and EU data protection law we need a lawful basis for handling personal information. Ours are:
- Your consent, and taking steps to enter a contract. You chose to send an enquiry. We use what you sent to reply to it and, if it goes further, to quote and scope the work.
- Legitimate interests. Keeping a record of enquiries and correspondence so we can run the business, and understanding roughly how the site is used so it can be improved. We've kept this narrow on purpose: cookieless analytics, no profiling, no tracking across sites.
We do not use your information for automated decision-making, and we never sell it or share it for anyone else's marketing.
Who else touches it
Four companies process data on our behalf. Each has its own privacy policy, and each is used for one narrow job:
| Who | What for | What they see |
|---|---|---|
| Vercel — hosting and analytics | Serving this website and counting page views | Request logs, and cookieless analytics events |
| Formspree — form delivery | Taking a form submission and emailing it to us | Whatever you typed into the form |
| Proton Mail — our email | Holding the enquiry once it reaches our inbox | Whatever you typed into the form, and anything you email us |
| Cal.com — call booking | Offering times and taking a booking, only if you click through | Your name, email address and the time you pick |
Loading this page contacts nobody but us. The typefaces used to come from Google Fonts, which meant every visit sent your IP address to Google before you had done anything at all. They are now served from this site's own domain, so there is no longer any third-party request when a page loads. Formspree, Proton Mail and Cal.com only ever see anything if you choose to send a form or book a call.
Some of these providers operate outside the UK and EEA. Where information is transferred internationally it is done under the transfer safeguards those providers have in place, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
How long we keep it
Enquiry emails and the correspondence that follows them are kept for as long as there's a live conversation, and then for up to two years afterwards — long enough that if you come back a year later we still know what we discussed. After that they're deleted.
Where an enquiry turns into paid work, the records that go with it are kept for six years from the end of the engagement, which is what UK tax and contract-limitation rules require.
Analytics data is aggregated and holds nothing that identifies you.
If you'd rather we didn't keep your enquiry at all, say so and it will be deleted.
Your rights
Wherever you are, you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that's wrong;
- delete it;
- stop or limit what we do with it;
- send it to you or someone else in a portable format;
- stop emailing you, at any time and for any reason.
Email contact@capricos.com and we'll act on it. There's no charge, and no form to fill in. We aim to respond within a few days and in any case within one month.
If you're in the UK or the EU
These are your rights under the UK GDPR and the EU GDPR. Where we rely on consent you can withdraw it at any time. If you think we've handled your data badly, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your own country's supervisory authority — though we'd appreciate the chance to put it right first.
If you're in California
You have the right to know what personal information we collect and why, to request deletion or correction, and not to be discriminated against for exercising those rights. Capricos does not sell or share personal information as those terms are defined by the CCPA and CPRA, and has no financial incentive programmes. There is nothing to opt out of.
Keeping it safe
The site is served over HTTPS, so what you send from a form is encrypted in transit. It's a static website: there is no database attached to it, no admin login, and nothing stored on the server that could be broken into and read. Enquiries live in an email inbox, protected the way any business inbox is.
No system is perfectly secure, and it would be dishonest to claim otherwise. What we can say is that this site holds the minimum it possibly could — which is the most effective security measure available.
Children
This site sells business services and is not directed at children. We don't knowingly collect information from anyone under 18. If you believe a child has sent us something, email contact@capricos.com and it will be deleted.
Changes to this policy
If this policy changes, the "last updated" date at the top changes with it. Anything significant — a new analytics tool, a new third party, a change to what's collected — will be described here rather than folded in quietly.
Questions about any of it: contact@capricos.com.