privacy policy

CAPELO Design takes your privacy seriously, and is committed to protecting and respecting it.

We want you to understand how we collect and use information about you. We also value your comments about the way we do this.

The privacy notice describes to you:

who we are
what personal data we collect and store about you, and how we collect it
why we collect personal data and what we do with it
the categories of third parties with whom we share your personal data
how we retain your information and keep it secure
your rights and how to exercise them
how to contact us.

It also contains information on the correct people to contact in the unlikely event that you have a complaint.

Who are we?

Here are some key details about us:

Our name: CAPELO Design Limited (we will refer to ourselves using the word “we” and related words such as “us” and “our” in this privacy notice)
Place of incorporation: England and Wales (this is where we are registered)
Company number: 10343997
Registered address: Unit 4, Woodside Industrial Estate, Thornwood, Epping CM16 6LJ
VAT number: 248556963

Under data protection law, we are considered to be a “controller”. As a controller, we are responsible for, and control the processing of, your personal data. We are registered as a data controller with the Information Commissioner’s Office, which is the UK’s supervisory authority for data protection matters.

What information do we collect from you?

In the course of our business – namely, acting as a design consultancy specialising in architectural and interior design delivery – we collect the following personal data when you provide it to us:

personal details, such as

name and title
gender
date of birth

contact data, such as

your address
delivery address (if different from your address)
billing address (if different from your address)
e-mail address
telephone and mobile number(s)

biographical data from job applications and CVs, such as

institutions attended
academic and other results gained
employment history
any other personal information you provide

payment details, such as

bank account
card details

transaction data, such as

details about payments to and from you
details of products and services you have purchased from us

technical data, such as

internet protocol (IP) address
your browser type and version
time-zone setting and location
browser plug-in types and versions
operating system and platform and other technology on the devices you use to access our website

usage data, such as

information about how you use our website, products and services

marketing data, such as

your preferences in receiving marketing and communications.

We do not knowingly collect “special category” personal data.This is a type of particularly sensitive data to which more stringent processing conditions apply, and comprises data concerning your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation, and genetic data and/or biometric data.

We also do not collect information about criminal convictions or offences.

How do we collect personal data?

We obtain personal data from sources as follows:

directly from you when you interact with us, for example when you
buy our services
request information
attend an event
write to us
phone us
enter a competition
give us feedback
apply for a job or send a CV
from others, if they provide your details (for example, if you are copied on an e-mail that is sent to us, and your e-mail address identifies you, we will have collected your personal data): if you are providing another person’s details, please ensure you have that person’s explicit consent to do so
from automated technologies such as cookies and tags when you use our website – for more information, please see our Privacy Policy to find out more
from suppliers who may deliver products to you, if they collect personal data from you in addition to the personal data that we collect

How do we use your personal data?

Introduction

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

to perform a contract we are about to enter into, or have entered into, with you
if it is necessary for our legitimate interests (or those of a third party) and these are not overridden by your own rights and interests
where we need to comply with a legal or regulatory obligation.

Lawful processing

In order to process personal data, we must have a lawful reason (sometimes called a lawful basis). We always ensure that this is the case, and we set out our lawful bases below – but please note that more than one may apply at any given time: for example, if we inform you of changes to our privacy notice, we may process your personal data on the ground of complying with law and on the ground of legitimate interests.

We will use your personal data only for the purposes for which we collected it, unless we fairly consider that we need it for another reason that is compatible with the original purpose.

Please contact us if you would like more information on this, and on situations in which more than one lawful basis applies.

Contractual Necessity

If you are our customer or applying for a job, we will process your personal data for the following purposes, on the legal basis that it is necessary for us to provide our products and services to you:

to identify you
to respond to your enquiries
to the extent necessary to provide pre-contractual information about our services
to provide our services, including enabling items to be delivered to you and contacting you about this (for example, regarding stock or availability)
to carry out billing and administration activities, including refunds and credits
to evaluate your job application and take any next steps, and to evaluate your suitability for roles where you have asked to be considered for future opportunities.

Legitimate Interests

We process your personal information for our legitimate business purposes, which include the following:

to conduct and manage our business
to enable us to carry out our services
to ensure our website and systems are secure (for example, by conducting security penetration tests on our website to ensure our security tools are effective)
to analyse, improve and update our services for the benefit of our customers
to deal with complaints
to let you know about our products, services, promotions or events that we consider may be of interest to you (and which may be tailored to your interests as construed from your purchase history): we carry out this processing on the legal basis that we have a legitimate interest in marketing our products and services, and only to the extent that we are permitted to do so by applicable direct marketing laws. Please see section 8 below for further information about our marketing activities and regarding your right to opt out.

Whenever we process your personal data for these purposes, we ensure that your interests, rights and freedoms are carefully considered.

Compliance with laws

We may process your personal data in order to comply with applicable laws (for example, if we are required to co-operate with an investigation pursuant to a court order).

Consent

Generally we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via electronic means where we are not otherwise entitled to do so. You have the right to withdraw consent to marketing at any time. This will not affect the lawfulness of processing that took place prior to the withdrawal of consent.

We will always be clear whenever we intend to process on the basis of consent, and we will process lawfully and only for the purpose for which consent was given.

Do we share your personal data?

We may provide your personal data to the following recipients for the purposes set out in this notice:

our service providers, including;
- logistics providers, such as those who deliver products
- e-mail and mail service providers
- technical and support partners, such as the companies who host our website and who provide technical support and back-up services
- recruitment service providers
merger or acquisition partners, to the extent that sharing your personal data is necessary
law enforcement agencies, government or public agencies or officials, regulators, and any other person or entity that has the appropriate legal authority where we are legally required or permitted to do so, to respond to claims, or to protect our rights, interests, privacy, property or safety
any other parties, where we have your specific consent to do so.

Do you have to provide personal data – and, if so, why?

To form a contract with you, we will need some or all of the personal data described above so that we can perform that contract or the steps that lead up to it: this is set out above in this notice. If we do not receive the data, it will not be possible to perform that contract.

For how long will we keep your personal data?

We carefully consider the personal data that we store, and we will not keep your information in a form that identifies you for longer than is necessary for the purposes set out in this notice or as required by applicable law. In some instances, we are required to hold data for minimum periods: for example, UK tax law currently specifies a minimum six-year period for retention of some of your personal data.

Marketing

We may store your contact details, and carry out marketing profiling activities, for direct marketing purposes. If you have given your consent, or if we are otherwise permitted to do so, we may contact you about our products or services that may be of interest to you. You will be given the opportunity to opt out each time you are contacted, and you may also opt out at any other time by e-mailing hello@capelo.design. This will not affect the lawfulness of processing that took place prior to your opt-out.

Do we transfer personal data outside the EEA?

Although we are based in England, we may transfer your personal information to a location (for example, to a secure server) outside the European Economic Area, if we consider it necessary or desirable for the purposes set out in this notice.

In such cases, to safeguard your privacy rights, transfers will be made to recipients to which a European Commission “adequacy decision” applies (this is a decision from the European Commission confirming that adequate safeguards are in place in that location for the protection of personal data), or will be carried out under standard contractual clauses that have been approved by the European Commission as providing appropriate safeguards for international personal data transfers, or by the adoption of EU-US Privacy Shield.

For more information, please contact us using the details in section 15 below.

How do we keep your personal data secure?

We have security measures in place designed to prevent data loss, to preserve data integrity, and to regulate access to the data. Only our authorised employees and third parties processing data on our behalf have access to your personal data.
All our employees who have access to your personal data are required to adhere to our privacy policy and we have in place contractual safeguards with our third-party data processors to ensure that your personal data is processed only as instructed by us.

The security measures we have in place include:

regular reviews of information collection, storage and processing practices to protect against unauthorised access
restriction of access to personal information
monitoring of systems storing and processing information
use of secure technologies (e.g. SSL, encryption)
scenario planning and crisis-management exercises to ensure we are ready to respond to cyber security attacks and data security incidents.

We take all reasonable steps to keep your data safe and secure and to ensure the data is accessed only by those who have a legitimate interest to do so. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us. Any transmission over the internet is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.
Please contact us using the details in section 15 below if you would like more information about this.

Your information rights

We draw your attention to your following rights under data protection law:

right to be informed about the collection and use of your personal data
right of access to your personal data, and the right to request a copy of the information that we hold about you and supplementary details about that information – you will be asked to provide proof of your identify and residential address, and we may ask you to provide further details to assist us in the provision of such information
right to have inaccurate personal data that we process about you rectified – we want to ensure that the personal information that we process and retain about you is accurate, so please do remember to tell us about any changes, for example if you have moved house or changed your contact details. It is your responsibility to ensure you submit true, accurate, and complete information to us – and please also update us if this information changes
right of erasure – in certain circumstances you have the right to require us to block, erase or destroy personal data that we process about you
right to object to, or restrict:
- processing of personal data concerning you for direct marketing
- decisions being taken by automated means which produce legal effects concerning you or that similarly significantly affect you
- in certain other situations, our continued processing of your personal data
the right of portability of your data in certain circumstances.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Please contact us using the details in section 15 below if you would like to know more about, or to exercise, these rights.
These rights are subject to certain limitations that exist in law. Further information about your information rights is available on the ICO’s website: https://ico.org.uk/.

Cookies

Cookies are small text files that can be used by web sites to make a user's experience more efficient.

The law states that we can store cookies on your machine if they are essential to the operation of this site but that for all others we need your permission to do so.

We use essential cookies (called session cookies) designed to guarantee a friendly and rich user experience. This type of cookies does not store any personal information about the user.

Our website does use some non-essential cookies. We do not do this to track individual users or to identify them, but to gain useful knowledge about how the site is used so that we can keep improving it for our users. Without the knowledge we gain from the systems that use these cookies we would not be able to provide the service we do.

We use Google Analytics, a popular web analytics service provided by Google, Inc. Google Analytics uses cookies to help us to analyse how users use the site. It counts the number of visitors and tells us things about their behavior overall – such as the typical length of stay on the site or the average number of pages a user views.

The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google undertakes not to associate your IP address with any other data held by Google.

If you have Adobe Flash installed on your computer (most computers do) and you use audio or video players within our website, Google Analytics will try to store some additional data on your computer. This data is known as a Local Shared Object or Flash cookie. This helps us to analyse the popularity of our media files. We can count the total number of times each file is played, how many people watch videos right to the end and how many people give up half way through. Adobe's website offers tools to control Flash cookies on your computer.

If you want to delete any cookies that are already on your computer, please refer to the instructions for your file management software to locate the file or directory that stores cookies. You can access them through some types of browser.

Changes to this privacy notice

We may change this notice from time to time. You should check this notice on our website occasionally, in order to ensure you are aware of the most recent version.

What should you do if you have a complaint?

We hope that you will be satisfied with the way in which we approach and use your personal data.
Should you find it necessary, you have the right to raise a concern with our supervisory authority, the Information Commissioner’s Office: https://ico.org.uk/.
However, we do hope that if you have a complaint about the way we handle your personal data, you will contact us in the first instance using the contact details in section 15 below, so that we have an opportunity to resolve it.

Do you want to contact us?

If you would like to contact us about this notice, including if you wish to receive further information about any aspect of it, our details are as follows:

E-mail
hello@capelo.design

Post
Capelo Design Limited
Unit H, Third Floor
81 Curtain Road
London EC2A 3AG
For the attention of: Gerald Allbury

Telephone

020 3870 4032