Privacy Policy

Last Updated: 2026-01-07

This Privacy Policy describes how CapitoTap collects, uses, and protects your personal information when you use our financial products and budgeting tools.

1. Data Collection

We collect information you provide directly, such as when you subscribe to our newsletter, contact us, or engage with our content. This includes your name, email address, and any messages you send. We also automatically collect certain information about your device and how you interact with our website, including IP address, browser type, pages visited, time spent on pages, and referring websites. We use cookies and similar technologies to enhance your browsing experience and analyze website usage patterns. All data collection is conducted in accordance with UK data protection laws and with appropriate consent mechanisms in place.

2. Use of Data

We use your personal information to provide and improve our services, including delivering newsletter content, responding to inquiries, and personalizing your experience on our website. Your data helps us understand which financial products and topics are most relevant to our UK audience, allowing us to create more targeted and valuable content. We may use your information to communicate with you about new articles, product reviews, or service updates that align with your interests. We also analyze aggregated, anonymized data to improve our website functionality, optimize content delivery, and better understand user preferences and behavior patterns.

3. Data Storage

Your personal data is stored securely on servers located within the UK and EU, ensuring compliance with data protection regulations. We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Data retention periods vary depending on the type of information and the purpose for which it was collected. Newsletter subscriptions and contact information are retained until you unsubscribe or request deletion. Website analytics data is typically retained for up to 26 months. We regularly review our data storage practices and delete information that is no longer necessary for our legitimate business purposes.

4. User Rights

Under UK GDPR, you have several rights regarding your personal data. You can request access to the personal information we hold about you, ask for corrections to inaccurate data, or request deletion of your data under certain circumstances. You have the right to object to processing of your personal data for direct marketing purposes, including profiling related to such marketing. You can also request restriction of processing or data portability in applicable situations. To exercise these rights or if you have concerns about how your data is handled, please contact us using the information provided. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

5. Third-Party Services

We work with trusted third-party service providers to deliver our services effectively. This includes email marketing platforms for newsletter delivery, analytics services to understand website usage, and hosting providers for website infrastructure. We ensure all third-party providers comply with UK and EU data protection standards and have appropriate data processing agreements in place. These providers are only authorized to use your personal information as necessary to provide services to us and are prohibited from using your data for their own purposes. We do not sell, rent, or share your personal information with third parties for their marketing purposes without your explicit consent.

6. Data Security

We implement robust security measures to protect your personal information from unauthorized access, use, or disclosure. This includes encryption of data in transit and at rest, secure server configurations, regular security audits, and access controls that limit data access to authorized personnel only. Our team receives regular training on data protection best practices and security protocols. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We continuously monitor and update our security practices to address emerging threats and maintain the highest standards of data protection available.

7. Children's Privacy

Our website and services are not directed at children under the age of 16, and we do not knowingly collect personal information from children under this age. If we become aware that we have collected personal information from a child under 16 without appropriate parental consent, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided personal information to us should contact us immediately. We encourage parents to monitor their children's internet usage and to help enforce our Privacy Policy by instructing their children never to provide personal information through our website without permission.

8. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable laws. When we make material changes to this policy, we will notify you by email (if you have subscribed to our newsletter) and by posting a notice on our website. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. The 'Last Updated' date at the top of this policy indicates when the most recent changes were made. Your continued use of our website and services after any changes to this Privacy Policy constitutes acceptance of those changes.

Contact Information

If you have any questions about this Privacy Policy, please contact us:

[email protected]