Legal
Privacy Policy
What we collect, why we collect it, who processes it and how to get it removed.
Last updated 1 January 2026
Who we are
Capra Digitals is a HubSpot solutions practice delivering migrations, onboarding, RevOps and AI search visibility work for B2B teams. This policy explains what we do with personal data collected through this website, our contact and consultation forms, and our free tools.
What we collect
We keep collection deliberately narrow. Depending on how you use the site, we may hold:
- Contact details you submit: name, work email, company, phone number and the message you write.
- Engagement context you choose to share: current CRM, portal size, timelines, budget range.
- Technical data: IP address, browser and device type, referring page and pages viewed.
- Analytics and consent state stored in cookies or local storage.
- Inputs to our free tools. Workflow naming inputs stay in your browser; domain lookups in the email deliverability checker query public DNS records only.
How we use it
We use personal data to:
- Reply to enquiries and schedule consultations.
- Scope, deliver and support engagements.
- Send service updates, and marketing email only where you have opted in.
- Measure site performance and improve content.
- Meet legal, accounting and contractual obligations.
Legal bases
Where UK GDPR or EU GDPR applies, we rely on: performance of a contract (delivery work and quotes), legitimate interests (responding to business enquiries, securing and improving the site), consent (marketing email, non-essential cookies) and legal obligation (records retention).
Processors we use
We share data only with processors that support the service, under contract and only as needed. These typically include HubSpot (CRM, forms, meetings and email), our website hosting and analytics providers, and standard business tools for email, storage and accounting. We do not sell personal data, and we do not share it for third-party advertising.
Client data during engagements
In migration and implementation work we process data inside your systems as a processor acting on your instructions. That work is governed by the engagement contract and any data processing agreement you require. We use least-privilege access, remove access at the end of an engagement, and do not retain copies of client records beyond agreed reconciliation evidence.
Retention
Enquiry records are kept for up to 24 months from last contact unless they become client records. Client and financial records are kept for the period required by law and contract. Analytics data is retained in aggregated form. You can ask us to delete earlier.
Your rights
Subject to local law you can request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can withdraw marketing consent at any time using the unsubscribe link or by emailing us. We respond within 30 days. If you are in the UK or EU and unhappy with our response, you can complain to your supervisory authority.
Cookies
Essential cookies keep the site working. Analytics and marketing cookies, including any HubSpot tracking used on forms and meeting pages, are set only where permitted. You can clear or block cookies in your browser; essential functionality will still work.
Security
We use encrypted transport, access controls, multi-factor authentication on business systems and least-privilege permissions in client portals. No system is perfectly secure, so we also keep an incident process and will notify you and any regulator where the law requires.
Contact
Privacy questions and rights requests: hello@capradigitals.com. We will confirm receipt and tell you what we need to verify your identity.
