This Privacy Policy explains how Capitova Financial Solutions Ltd ("Capitova", "we", "us", or "our") collects, uses, discloses, and protects your personal data when you use our services, visit our website, or interact with us in any way. We are committed to protecting your privacy and handling your data in an open and transparent manner.
Key Principles
We adhere to the following principles when processing your personal data:
- Lawfulness, fairness, and transparency: We process your data lawfully, fairly, and in a transparent manner.
- Purpose limitation: We collect data for specified, explicit, and legitimate purposes.
- Data minimization: We only collect data that is adequate, relevant, and limited to what is necessary.
- Accuracy: We keep your data accurate and up to date.
- Storage limitation: We retain your data only for as long as necessary.
- Integrity and confidentiality: We process your data securely.
Data We Collect
Personal Information
We may collect the following types of personal information:
- Identity Data: Name, title, date of birth, gender, passport or ID numbers.
- Contact Data: Email address, telephone number, postal address, billing address.
- Financial Data: Bank account details, payment card information, income, credit history, financial transactions.
- Business Data: Company name, registration number, VAT number, business address, directors' information.
- Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system.
- Usage Data: Information about how you use our website and services.
- Marketing Data: Your preferences in receiving marketing from us and third parties.
How We Collect Data
We collect data through various methods:
- Direct interactions: When you fill in forms on our website, correspond with us, or use our services.
- Automated technologies: As you interact with our website, we may automatically collect Technical Data about your equipment and Usage Data.
- Third parties: From publicly available sources, credit reference agencies, fraud prevention agencies, and regulatory bodies.
How We Use Your Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Legitimate Business Purposes
- To provide and maintain our financial services
- To process applications and provide financing solutions
- To manage our relationship with you, including notifying you about changes
- To administer and protect our business and website
- To deliver relevant website content and measure effectiveness
- To use data analytics to improve our website and services
- To make suggestions and recommendations about services that may interest you
Legal and Regulatory Compliance
As a UK-regulated financial services provider, we are required to process certain personal data to comply with legal obligations including:
- Anti-Money Laundering (AML) regulations
- Know Your Customer (KYC) requirements
- Financial Conduct Authority (FCA) rules
- Tax reporting obligations
- Fraud prevention and detection
Data Protection and Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.
Security Measures
- 256-bit SSL encryption for data transmission
- Secure data storage with access controls
- Regular security assessments and penetration testing
- Employee training on data protection
- Incident response and breach notification procedures
Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
Typically, we retain client data for 7 years after the end of our business relationship, in compliance with UK financial regulations.
Your Legal Rights
Under data protection laws, you have rights including:
Your Data Protection Rights
- Right to access: Request copies of your personal data.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data.
- Right to restrict processing: Request restriction of processing your personal data.
- Right to data portability: Request transfer of your data to another organization.
- Right to object: Object to processing of your personal data.
- Rights related to automated decision-making: Request human intervention in automated decisions.
To exercise any of these rights, please contact our Data Protection Officer using the details in the Legal Contact section.
International Transfers
We may transfer your personal data outside the UK and European Economic Area (EEA). When we do, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are implemented.
Contact Our Data Protection Team
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
Data Protection Officer
Capitova Financial Solutions Ltd
45 Financial Square, Edinburgh EH3 9EF, Scotland
Email: privacy@capitova.com
Phone: +44 (0)787 749 9797