Cap1visuals Ltd is a data visualisation and business intelligence consultancy registered in England and Wales (Company No. 16969172). We help organisations make better decisions through clear, accessible reporting and dashboard solutions.
For the purposes of UK data protection law, Cap1visuals Ltd is the data controller for personal data collected through our website and marketing activity. Where we process personal data on behalf of a client as part of a project, we act as a data processor.
Registered address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
Contact: lawrence@cap1visuals.com
When you visit cap1visuals.com, our website hosting platform may automatically collect limited technical data including your IP address, browser type, and the pages you visit. This is used solely for website security and performance monitoring. We do not use this data to identify individuals.
If you submit an enquiry via our contact form, we collect your name, email address, and the content of your message in order to respond to you.
As part of our business development activity, we may hold professional contact information — such as name, job title, company name, and business email address — for individuals at organisations we believe may benefit from our services. This information relates solely to individuals in their professional capacity and is sourced from publicly available professional directories and platforms.
We use this information to send targeted, relevant communications about our services. Every communication includes a clear and simple way to opt out, and we will honour all opt-out requests promptly and permanently.
Our lawful basis for this activity is legitimate interests under UK GDPR Article 6(1)(f), and we comply with the Privacy and Electronic Communications Regulations (PECR) in relation to direct marketing.
When you engage with us — whether through an enquiry, proposal, or active project — we collect the contact and organisational details necessary to deliver our services, manage our relationship, and fulfil any contractual obligations. This may include name, role, company, email, and telephone number.
During the delivery of a project, clients may provide us with data files or system access that contains personal information about their employees, customers, or other individuals. We treat this data with the highest level of care and apply the following principles without exception:
- We process client-provided data only for the purpose of delivering the agreed project scope — never for any other purpose
- We do not share, sell, or disclose client data to any third party
- We do not retain client data beyond project completion — all data is securely deleted or returned within 30 days of project sign-off, unless a longer retention period is agreed in writing
- Access to client data is strictly limited to authorised personnel directly involved in the project
- Where client data contains sensitive or special category personal data (including health records, HR data, or financial information), we apply additional safeguards appropriate to the sensitivity of that data
- We operate under a formal data processing agreement with clients where required, which sets out each party’s responsibilities under UK GDPR
Clients retain full ownership and control of their data at all times. Our role is purely to process it in order to deliver the agreed output.
Our website uses essential cookies necessary for basic functionality. We may also use analytics cookies to understand how the site is used in aggregate. These do not identify you personally. You can manage or disable cookies at any time through your browser settings.
We use a small number of trusted third-party platforms to operate our business — including website hosting, email delivery, and business administration tools. These providers act as data processors under contract and are only permitted to use personal data to provide services to us. They are not permitted to use it for their own purposes.
We do not sell personal data to any third party. We do not share personal data with advertisers, data brokers, or any commercial partner.
We may disclose personal data to legal or regulatory authorities if required to do so by law or in response to a valid legal request.
Some of the third-party platforms we use may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place — such as UK adequacy decisions or Standard Contractual Clauses — to ensure your data receives an equivalent level of protection.
| Category | Retention period |
|---|---|
| Website enquiries | 12 months from last communication |
| Business development contacts (active) | Up to 12 months from last contact, or until opt-out |
| Business development contacts (opted out) | Suppression list retained indefinitely to prevent re-contact |
| Client contact details | Duration of engagement plus 3 years |
| Client project data (personal data in files) | Deleted or returned within 30 days of project sign-off |
| Financial and contractual records | 7 years (statutory requirement) |
Under UK GDPR, you have the following rights in relation to personal data we hold about you:
To exercise any of these rights, contact us at lawrence@cap1visuals.com. We will respond within one calendar month. There is no charge for making a request.
If you are not satisfied with how we have handled your data, you have the right to complain to the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
We take the security of personal data seriously and apply appropriate technical and organisational measures to protect it. These include restricted access controls, secure storage of files, and regular review of the data we hold. In the event of a personal data breach that is likely to result in risk to individuals, we will notify the ICO within 72 hours as required by law.
We may update this policy periodically to reflect changes in our practices or legal obligations. The current version will always be published at cap1visuals.com/privacy-policy with the date of the most recent update shown at the top.