Privacy notice

Who we are

8Caps is a UK software, AI, and automation studio.

• Registered in England & Wales, company number 00000000.
• Registered office: [Registered office address — to be confirmed].
• Registered with the Information Commissioner’s Office (ICO), registration number ZA000000.
• Data protection contact: master@8caps.co.uk.

The personal data we collect

We only collect the data you choose to give us through the contact form on this site. When you submit an enquiry we collect:

• your name;
• your email address;
• your company name (if you provide it);
• the type of project you’re enquiring about;
• how you heard about us (if you tell us); and
• the content of your message.

We do not collect special category data, and we do not ask you to provide any more information than we need to respond to your enquiry. Our website does not run advertising or analytics tracking, so we do not build profiles of visitors or track you across other sites.

How we use your data, and our lawful basis

We use the data you submit to:

• respond to your enquiry and discuss the work you’re interested in; and
• keep a record of our communications with you.

Our lawful bases under Article 6 of the UK GDPR are: taking steps at your request before entering into a contract (Article 6(1)(b)); and our legitimate interests in responding to enquiries and running our business (Article 6(1)(f)). Where the law requires us to keep certain records — for example for tax and accounting once you become a client — we rely on compliance with a legal obligation (Article 6(1)(c)).

Who we share your data with

We do not sell your data or share it for marketing. We do use a small number of trusted service providers (“processors”) who handle data on our behalf and only on our instructions:

• Supabase — hosts the database in which your enquiry is stored.
• Resend — delivers the notification email to us and the confirmation email to you.
• Vercel — hosts this website and its server infrastructure.

We may also disclose your data where we are required to do so by law, or to establish, exercise, or defend our legal rights.

International data transfers

Some of our service providers are based outside the UK, which means your data may be transferred to and processed in other countries. Where that happens, we make sure the transfer is protected by appropriate safeguards recognised under UK data protection law — such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision — so your data receives an equivalent level of protection.

How long we keep your data

We keep enquiry data for as long as we need it to deal with your enquiry and for up to 24 months after our last contact with you, after which we delete it — unless you ask us to delete it sooner, or unless we need to keep it longer to meet a legal obligation (for example, where you become a client and we must retain financial records for the period required by UK law). You can ask us to delete your data at any time using the contact details below.

Cookies

This public website does not use analytics, advertising, or tracking cookies, so there is no cookie banner. The only cookies we set are strictly necessary cookies used to keep our team signed in to the private admin area of the site — these are essential for that area to work and are not used to track visitors.

How we keep your data secure

We take appropriate technical and organisational measures to protect your data, including encryption in transit, access controls on our database and admin area, and limiting access to the people who need it. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly if anything goes wrong.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data (the “right to erasure”);
• ask us to restrict how we use your data;
• object to our processing based on legitimate interests;
• request a copy of your data in a portable format (data portability); and
• withdraw any consent you have given, without affecting processing we carried out before you withdrew it.

To exercise any of these rights, email master@8caps.co.uk. We will respond within one month. There is normally no charge.

Complaints

If you have a concern about how we handle your data, please contact us first at master@8caps.co.ukso we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk/make-a-complaint.

Changes to this notice

We may update this notice from time to time. When we do, we will change the “last updated” date below. Significant changes will be made clear on this page.