Privacy Policy

Last updated: March 2026

1. Data Controller

Capercode Ltd is the Data Controller for personal data collected through this website. If you have any questions about this policy or your personal data, contact us at support@capercode.com.

2. ICO Registration

Capercode Ltd is registered with the Information Commissioner's Office (ICO) as required under UK GDPR. ICO Registration No. [ICO REF — add when received].

3. What data we collect

When you purchase a digital product or interact with our services, we may collect:

• Name and email address
• Payment information (processed securely by Stripe — we do not store card details)
• Purchase history and order details

4. Legal basis for processing

We process your personal data on the following legal bases:

• Contract performance — to fulfil your order and deliver digital products
• Legitimate interests — fraud prevention and improving our services
• Consent — marketing emails, only with your explicit opt-in

5. Third-party processors

We share data with the following third-party services, solely for the purposes described above:

• Stripe — payment processing
• Cloudflare — website hosting and content delivery
• Resend — transactional and marketing email delivery
• Etsy — marketplace listings and order fulfilment
• Gumroad — marketplace listings and order fulfilment

6. Data retention

• Order records and transaction data are retained for 7 years to comply with HMRC tax and accounting obligations.
• Marketing consent can be revoked at any time by contacting support@capercode.com or using the unsubscribe link in any marketing email.
• Data no longer required for the above purposes will be securely deleted.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectification of inaccurate data
• Erasure of your personal data
• Restriction of processing
• Data portability
• Object to processing

To exercise any of these rights, email support@capercode.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office: ico.org.uk

8. Cookies

For details on how we use cookies, please see our Cookie Policy.

9. Etsy API Data

Capercode Ltd operates an internal tool called Capercode that connects to the Etsy API to manage product listings. This section describes how Etsy data is handled.

9.1 What Etsy data Capercode accesses

• Listings data (read and write) — product listing information including titles, descriptions, prices, and status
• Shop information (read only) — shop name, policies, and configuration for compliance checks

Capercode does not access Etsy customer personal data, transaction data, or payment information.

9.2 Retention period

Etsy API data accessed by Capercode is retained only for as long as it is needed for active shop management. Data is deleted when it is no longer required for listing management or compliance purposes.

9.3 Deletion rights

To request deletion of any Etsy-related data held by Capercode, contact support@capercode.com. We will process deletion requests within 30 days.

9.4 Third-party sharing

Etsy API data accessed by Capercode is not shared with any third parties. It is used solely for internal shop management by Capercode Ltd.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version.

11. Governing law

This policy is governed by the laws of England and Wales.