Privacy Policy

Effective Date: 01/06/2025

Last Updated: 26/06/2025

Capital Croissant Limited ("we", "us", or "our") is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

This Privacy Policy explains what personal data we collect, how we use it, your rights, and how you can contact us.

1. Data Controller

The data controller responsible for your personal data is:

Capital Croissant Limited

Unit 2 Delphi house,

Concord Road,

W3 0SE London

Office@capitalcroissant.com

2. What Personal Data We Collect

We may collect and process the following types of data:

Identification Data: Name, email address, phone number, etc.
Technical Data: IP address, browser type, operating system, referring URLs.
Usage Data: Information on how you use our website.
Marketing Data: Your preferences in receiving marketing from us.

We collect this data directly from you (e.g., through forms) or automatically through cookies and analytics tools.

3. Legal Basis for Processing

Under GDPR, we rely on the following lawful bases:

Consent: When you give us clear consent (e.g., newsletter sign-ups).
Contract: When processing is necessary to fulfill a contract (e.g., services).
Legal Obligation: When required by law.
Legitimate Interests: When we have a genuine reason (e.g., website improvement) that doesn’t override your rights.

4. How We Use Your Data

We use your data to:

Provide, operate, and improve our services
Respond to inquiries and provide customer support
Send you updates and marketing communications (with your consent)
Analyze website traffic and usage

5. Data Sharing

We only share your data when necessary and with appropriate safeguards:

Service Providers: E.g., hosting, email platforms, analytics tools
Legal Authorities: If required for legal compliance or to protect rights
Business Transfers: In the event of a merger or sale

We ensure all third-party processors are GDPR-compliant.

6. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure it is protected by appropriate safeguards (e.g., Standard Contractual Clauses, adequacy decisions).

7. Data Retention

We retain personal data only for as long as necessary:

To fulfill the purposes outlined in this policy
To comply with legal obligations
To resolve disputes and enforce agreements

Retention periods vary depending on the type of data and purpose of processing.

8. Your Data Protection Rights

Under GDPR, you have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Erase your data (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time (where processing is based on consent)
Lodge a complaint with a supervisory authority

To exercise your rights, contact us at [Insert Contact Email].

9. Cookies and Tracking Technologies

We use cookies and similar technologies for:

Website functionality
Analytics
Marketing (if consented)

You can manage cookie preferences via our cookie banner or through your browser settings. See our [Cookie Policy] for details.

10. Security

We implement appropriate technical and organizational measures to secure your personal data from unauthorized access, disclosure, alteration, or destruction.

11. Changes to This Privacy Policy

We may update this policy periodically. Changes will be posted on this page with an updated “Last Updated” date. Please review regularly.

12. Contact Us