Privacy Policy

Capital SCO Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit capitalsco.com or contact us directly.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for all personal data collected through this website.

Who we are

Capital SCO Ltd is a UK-based investment and acquisition firm. We identify, acquire, and grow established businesses across the United Kingdom.

Data we collect

We may collect and process the following categories of personal data:

Information you give us directly - when you submit an enquiry via our contact form, we collect:

• Your first and last name
• Your email address
• Your telephone number (if provided)
• The nature of your enquiry (selling a business, seeking investment, or general)
• Any information you include in your message

Information collected automatically - when you browse our website, basic technical data may be collected such as your IP address, browser type, and pages visited. This is used only for website performance monitoring and security purposes.

We do not collect any special category data (such as health information, political opinions, or financial data) through this website.

How we use your data

We use your personal data only for the purposes for which it was collected:

• To respond to your enquiry and communicate with you about potential acquisitions or investments
• To evaluate whether a business opportunity aligns with our acquisition criteria
• To maintain records of business conversations as required for legitimate business purposes
• To improve the functionality and content of this website
• To comply with any legal or regulatory obligations

We will never use your personal data for unsolicited marketing, sell it to third parties, or use it for any purpose you would not reasonably expect.

Lawful basis for processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

• Legitimate interests - to respond to business enquiries and conduct our core acquisition and investment activities, which you would reasonably expect when contacting an investment firm
• Contract - where you are entering into or considering a business transaction with us, processing is necessary to take steps at your request prior to entering a contract
• Legal obligation - where we are required by law to retain certain records

Data sharing & third parties

We do not sell, rent or trade your personal data to any third parties. We may share your data in limited circumstances:

• Service providers - we use Formspree (formspree.io) to process contact form submissions on our behalf. Formspree acts as a data processor and is bound by appropriate data processing agreements
• Professional advisors - solicitors, accountants, or other advisors may receive data where necessary to progress a business transaction you have initiated with us, and only with your knowledge
• Legal requirements - we may disclose your data if required to do so by law or in response to valid requests by public authorities

Where any third-party processor handles your data, we ensure appropriate contractual protections are in place. Your data is processed and stored within the UK and/or European Economic Area.

How long we keep your data

We retain personal data only for as long as is necessary for the purposes for which it was collected:

• Enquiries that do not progress to any business relationship: up to 12 months from last contact
• Enquiries that progress to active discussions or transactions: up to 6 years following completion or termination of the transaction (in line with standard UK contract limitation periods)
• Records required for legal, tax or regulatory compliance: retained for the period required by the relevant legislation

After the relevant retention period, your data will be securely deleted or anonymised.

Your rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at hello@capitalsco.com. We will respond within one month

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or damage. Our website is served over HTTPS (encrypted connection), and we use reputable third-party services with their own security standards for form processing and email delivery.

Whilst we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. If you have reason to believe your data has been compromised, please contact us immediately at hello@capitalsco.com.

Cookies

Our website uses only essential technical cookies required for the site to function correctly (such as remembering your theme preference between visits). We do not currently use any tracking, advertising, or analytics cookies.

You can control or disable cookies through your browser settings at any time. Disabling cookies will not affect your ability to browse this website.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page will always show when it was last revised. We encourage you to review this page periodically.

Continued use of our website after changes are made constitutes acceptance of the updated policy.

Contact us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we have handled your personal data, please get in touch: