Privacy Policy

This policy explains what personal data CapturePoint collects through capture-point.org, why we collect it, who receives it, and the rights you have. It also explains how we handle data about people our clients ask us to contact.

Who we are

CapturePoint is a trading name of RILAX, a craft business registered in Croatia (“we”, “us”). For personal data collected through this website, we are the controller. Our registered name, address, and contact email are in our legal notice.

What we collect and why

When you send the inquiry form

Your name, business name, email address, and phone number, plus a message about your business if you add one. We use them to contact you about a free intro call and to prepare for it. Legal basis: taking steps at your request before a possible contract, and our legitimate interest in answering business inquiries.

FormSubmit (formsubmit.co) receives the form and emails it to our business mailbox, which Hostinger hosts. So that we notice new inquiries quickly, our mailbox then automatically sends a copy of each inquiry to a Gmail mailbox, hosted by Google, that we check on a phone. Only inquiry form messages are copied there, not other email.

As with any web request, FormSubmit also receives technical data such as your IP address. The form includes a hidden field that people never see, to filter out automated spam.

When you email us

Your email address, your message, and anything you choose to include. We use them to reply and to keep a record of our conversation. Legal basis: our legitimate interest in answering and keeping track of business correspondence.

When you visit the site

Our hosting provider processes technical data such as your IP address, browser type, the pages you request, and the time of each request, to deliver the site and keep it secure. Legal basis: our legitimate interest in running a secure, working website.

If you become a client

Contact, contract, and billing details. We use them to deliver the service, invoice you, and meet our legal duties. Legal basis: performing our contract with you, and complying with legal obligations such as tax and accounting rules.

We do not make decisions about you by automated means that have legal or similarly significant effects.

Cookies and tracking

This website does not set cookies and does not use analytics, advertising pixels, or other tracking technologies. If that changes, we will update this policy first and ask for your consent before any non-essential cookies or trackers run. Sending the inquiry form does not set cookies. If JavaScript is turned off in your browser, the form opens a FormSubmit page instead, which may show its own spam check and follows FormSubmit’s own practices.

Who receives your data

We use a small number of service providers to run this website and our email:

• Vercel, which hosts and delivers this website.
• FormSubmit, which receives the inquiry form and forwards it to our inbox.
• Hostinger, which hosts our business email.
• Google, which hosts the Gmail mailbox that receives a copy of each inquiry form. Google provides this mailbox under its own terms and privacy policy.
• If an intro call takes place over video, the meeting service we agree with you when we arrange it.

We may also share data with our professional advisers, or with authorities when the law requires it. We do not sell your personal data, and we do not share it with advertisers.

International transfers

Some of these providers are based in, or process data in, the United States or other countries outside the European Economic Area. Where that happens, we rely on safeguards recognized by the GDPR, such as an adequacy decision (including the EU-US Data Privacy Framework for certified companies) or the European Commission’s standard contractual clauses. You can ask us which safeguard applies to a provider.

FormSubmit does not publish a data processing agreement or say where it stores data. Its documentation says it keeps a copy of each submission for 30 days. We use it only to pass on the business contact details you choose to send. If you would rather not use the form, you can email us at the address in our legal notice.

Google LLC, which hosts the Gmail mailbox that receives a copy of each inquiry, is certified under the EU-US Data Privacy Framework.

How long we keep it

• Inquiries and intro calls that do not lead to work: up to 12 months after our last contact, then deleted.
• FormSubmit’s copy of a form submission: 30 days, as set by FormSubmit.
• The copy of an inquiry in our Gmail mailbox: deleted on the same schedule as the inquiry itself.
• Client records: for as long as we work together, then for as long as tax and accounting law requires.
• Emails: for as long as the inquiry or client record they belong to.
• Hosting logs: for the short period set by our hosting provider.

Your rights

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is wrong;
• delete it;
• restrict how we use it;
• send it to you, or to someone else, in a portable format;
• stop using it where we rely on legitimate interests, and stop any direct marketing at any time.

Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email us at the address in our legal notice. We reply within one month, and we may ask you to confirm your identity first.

You also have the right to complain to a data protection supervisory authority, in particular in the EU or EEA country where you live or work, or where you believe the problem happened.

People our clients ask us to contact

When we run ads, answer calls, or send messages for a business that uses CapturePoint, that business decides why and how your data is used. It is the controller, and we act as its processor, handling your data only on its instructions.

This can include your name, phone number, email address, service address, the details you give about the job, call recordings and transcripts, messages, appointment details, and the status of quotes, invoices, and payments. Calls may be recorded, and calls and messages may be handled by an automated system that follows the business’s approved scripts.

If you responded to an ad on Facebook or Instagram, Meta also processes your data under its own terms and privacy policy.

To use your privacy rights, contact the business that contacted you. You can also email us at the address in our legal notice, and we will pass your request to that business and help it respond. To stop texts, reply STOP to any text.

Security

We take reasonable technical and organizational measures to protect personal data, and we limit access to the people who need it.

Children

This website is for businesses. It is not directed at children, and we do not knowingly collect data about children.

Changes to this policy

We will post any changes on this page and update the date at the top.