Introduction
CapInteract ("we", "us", "our") is a software development firm focused on technology for Fund Managers & Investors.
We understand that you (“users”, “you”, “your”) are aware of and care about your own personal privacy interests, and we take that seriously. This Privacy Notice describes CapInteract's policies and practices regarding its collection and use of your personal data, and sets forth your privacy rights. We recognize that information privacy is an ongoing responsibility, and so we will from time to time update this Privacy Notice as we undertake new personal data practices or adopt new privacy policies.
Data Controller
The data controller responsible for the collection and processing of your personal data is:
CAPINTERACT
40221 Main Street
Waterford, VA 20197
United States
You can contact us regarding this Privacy Policy or any privacy-related matters at: privacy@capinteract.com
Data Protection Officer
CapInteract has appointed an internal data protection officer. If you have any questions or concerns about our personal data policies or practices, or wish to exercise your privacy rights, please contact:
Chief Security Office
security@capinteract.com
How We Collect and Use Your Personal Information
CapInteract collects personal information about its website visitors and customers. This information is generally limited to:
Full name
Job title
Employer name and industry
Work address
Work email
Work phone number
Messages submitted via contact forms
Contact Forms and Inquiries
When you submit a contact form to request a product presentation, assistance, help, or further information, we collect the personal data you provide (name, phone number, address, email address, and message content).
We process this information solely to respond to your specific request. The data is received via email and is not stored in any database or long-term system unless we enter into a commercial agreement with you. In the absence of such an agreement, we retain the data only for as long as necessary to handle and reply to your inquiry (typically a few days to a maximum of a few weeks). We do not use this data for marketing or any unrelated purposes unless you explicitly agree otherwise.
Lawful Basis for Processing
We process personal data in accordance with the GDPR, UK GDPR, and Guernsey Data Protection Law (DPL) on the following lawful bases:
Performance of a contract or steps prior to entering a contract — when you submit inquiries or contact forms, processing is necessary to respond to your requests.
Legitimate interests — to maintain website security (e.g., via CSRF and CAPTCHA protection), improve our services, and respond to business communications, where these interests do not override your rights.
We do not engage in automated decision-making or profiling.
Cookies and Analytics
Our website uses only strictly necessary cookies and does not use any third-party analytics tools (such as Google Analytics or similar services). We do not track your browsing behavior for marketing, advertising, or profiling purposes.
The strictly necessary cookies we use are limited to:
Session cookies — to maintain your session and basic website functionality.
CSRF protection cookies — to prevent cross-site request forgery attacks and secure form submissions.
reCAPTCHA cookies (provided by Google) — used on our contact forms to protect against spam and abuse by verifying that submissions come from real users.
These cookies are essential for the security and proper functioning of the website. They are typically session-based or short-lived. Because these cookies are strictly necessary, they do not require prior consent under the GDPR and ePrivacy Directive. You may manage or block cookies through your browser settings (note that this may affect contact form functionality).
For details on Google reCAPTCHA data processing, see: https://policies.google.com/privacy
Sharing Information with Third Parties
We do not sell personal information. We share data only with third parties who facilitate our services (e.g., email providers).
We may also share data when required by law, to protect rights and safety, or with your consent. Third-party services connected to our site (e.g., social media sharing) are governed by their own privacy policies.
Transferring Personal Data to the U.S.
CapInteract is headquartered in the United States. Your personal data may be processed in the U.S. We provide appropriate safeguards, including Standard Contractual Clauses, and endeavor to protect your data consistently with this Privacy Policy.
Your Data Subject Rights
Under the GDPR, UK GDPR, Guernsey DPL, and other applicable laws (including CCPA/CPRA for California residents), you have the following rights:
Right to be informed
Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right of data portability
Right to object
Right to withdraw consent
Right to lodge a complaint with a supervisory authority (e.g., your national data protection authority or the California Attorney General)
To exercise these rights, email us at privacy@capinteract.com. We respond within one month (or as required by law) and may verify your identity. Reasonable access is provided at no cost. If access cannot be provided within a reasonable time frame, CapInteract will provide you with a date when the information will be provided. If for some reason access is denied, CapInteract will provide an explanation as to why access has been denied.
California Privacy Rights (CCPA / CPRA)
For California residents, we comply with the CCPA/CPRA. We do not sell or share your personal information as defined under CCPA. We do not use your data for cross-context behavioral advertising.
Do Not Sell or Share My Personal Information
Since we do not sell or share personal information, no opt-out action is required. You may still submit requests for access or deletion by emailing privacy@capinteract.com. We will verify your identity and respond within CCPA timeframes.
Data Storage and Retention
Your personal data is stored by the CapInteract on its servers, and on the servers of the cloud-based database management services the CapInteract engages, located in the United States. The CapInteract retains service data for the duration of the customer's business relationship with the CapInteract and for a period of time thereafter, to analyze the data for CapInteract's own operations, and for historical and archiving purposes associated with CapInteract's services. CapInteract retains prospect data until such time as it no longer has business value and is purged from CapInteract systems. All personal data that CapInteract controls may be deleted upon verified request from Data Subjects or their authorized agents. For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at: privacy@capinteract.com
Children's Data
We do not knowingly collect or solicit personal data from children.
Questions, Concerns or Complaints
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at: privacy@capinteract.com