Privacy Policy
Last updated: [Month Year] · Applies to visitors and customers of thecapitalregister.com
This policy explains what data we collect, why, and what rights you have — both as a visitor to this site, a buyer of our product, and, if relevant, as an investor listed within our dataset.
1. Who we are
The Capital Register is a trading name of [Your Full Name], operating as a sole trader in the United Kingdom, based at [your registered/business address]. As a sole trader there is no separate company registration number — [Your Full Name] is the data controller for the purposes of UK GDPR and, where applicable, acts as the responsible business under US state privacy laws such as the CCPA/CPRA.
Contact for all privacy matters: [privacy@domain.com]
2. What data we collect
| Who | What we collect | Why |
|---|---|---|
| Site visitors | Basic analytics (pages viewed, referrer, approximate location, device type) | To understand site usage and improve the page |
| Buyers | Name, email, payment confirmation (processed by our payment provider — we do not store card details) | To deliver the product and provide support |
| Investors listed in the dataset | Fund name, thesis, sector focus, cheque size, public deal history, and — where opted in — a named contact route | To compile and maintain the register product |
3. Our lawful basis
For firm-level, publicly sourced information (fund name, thesis, sector, public deal history), our lawful basis is legitimate interests — compiling publicly available business information into a usable format for founders.
For any personal contact route belonging to a named individual, our lawful basis is consent — that individual has actively opted in to being listed as open to founder outreach, and may withdraw that consent at any time.
4. How long we keep data
Buyer records are kept for as long as needed to provide support and meet accounting obligations, typically 6 years. Dataset entries are reviewed and refreshed quarterly; entries that are no longer accurate or where consent has been withdrawn are removed.
5. Who we share data with
- Our payment processor (e.g. Lemon Squeezy) — to process your purchase and deliver the product
- Website analytics and hosting providers — to run the site
- We do not sell visitor or buyer personal data to third parties
6. Your rights
If you are in the UK/EU, under GDPR you have the right to access, correct, delete, or port your data, and to object to or restrict its processing. If you are a US resident, you may have similar rights under applicable state law (e.g. CCPA/CPRA), including the right to know what's collected and to request deletion.
To exercise any of these rights, contact [privacy@domain.com]. If you are an investor listed in the dataset and want to be removed or corrected, see our Sourcing & Methodology page for the fastest route.
7. International transfers
As this dataset and its buyers are international, data may be processed in the UK and other jurisdictions. Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses via our service providers.
8. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by an updated "last updated" date at the top of this page.