Privacy Policy

1. Introduction

CAPA Resolve ("CAPA", "we", "us", or "our") operates the public website at caparesolve.com and is developing a consumer dispute-resolution and case-support platform. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website or interact with our services.

By using this website, you acknowledge that you have read and understood this policy. If you do not agree, please do not use our website.

2. Information we collect

When you visit this website, we may receive limited information automatically through standard web server logs and hosting infrastructure, including:

• IP address (typically in truncated or anonymised form depending on infrastructure configuration)
• Browser type and version
• Referring page or URL
• Pages visited and time of visit
• Device type and operating system

The public website is static and does not currently use contact forms, user accounts, or analytics tracking scripts. If you contact us by email, we receive the content of that communication and any personal information you include in it.

When the CAPA platform launches, this policy will be updated to describe the specific types of information collected through platform services, which may include case details, correspondence, evidence files, and identity information. Those uses will be described in full before any such data is collected.

3. How we use information

We use the information we collect to:

• Operate, maintain, and improve this website and our services
• Respond to enquiries and communications you direct to us
• Comply with applicable legal obligations
• Detect and address security or technical issues

We do not use personal information for advertising, profiling, or sale to third parties.

4. Legal bases for processing

Where applicable data protection and privacy law requires a legal basis for processing personal data, we rely on the following:

• Legitimate interests: operating a secure, functional website and responding to inbound communications
• Legal obligation: complying with applicable laws and regulations
• Consent: where we request specific consent before introducing any optional services such as notifications
• Contract: where processing is necessary to perform a service you have requested

5. Disclosure and sharing

We do not sell personal information. We may share information with:

• Hosting and infrastructure providers: who process data on our behalf as part of delivering this website (see Subprocessors)
• Legal or regulatory bodies: where required by law, court order, or to protect the rights and safety of CAPA or others
• Professional advisers: such as lawyers or auditors, under appropriate confidentiality obligations

Any third parties we engage are required to handle personal information in accordance with applicable law and our instructions.

6. Data retention

We retain personal information only for as long as necessary for the purposes described in this policy, or as required by applicable law. Server logs are retained for a limited period for security and operational purposes. Email correspondence is retained for the period reasonably required to resolve the relevant matter.

Specific retention periods for platform data will be published when the CAPA platform launches.

7. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. This includes using HTTPS for all web traffic and applying security headers to this website. See our Security page for more detail.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we commit to addressing any identified vulnerabilities promptly and to notifying affected individuals as required by applicable law.

8. International data handling

This website is hosted on infrastructure that may process data across multiple jurisdictions. Where personal data is transferred across borders, we rely on appropriate transfer mechanisms as required by applicable law. We engage only reputable infrastructure providers and require appropriate data handling commitments from them.

9. Your rights

Depending on your location and applicable law, you may have rights regarding the personal information we hold about you, including rights to access, correct, delete, restrict, or port your data, or to object to certain types of processing. You may also have the right to withdraw consent where processing is based on consent, and to raise a concern with a relevant supervisory authority.

To exercise any of these rights, please contact us at privacy@caparesolve.com or see the Data Requests page.

10. Cookies

Our current website does not use tracking cookies or analytics scripts. If this changes, we will update this policy and our Cookies Policy before making those changes.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically. Continued use of the website after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related enquiries, to exercise your rights, or if you have questions about this policy, please contact:

privacy@caparesolve.com
CAPA Resolve