Privacy Policy
- Website: wrapcapital.uk
- Business Name: Wrap Capital LTD
- Contact Email: info@wrapcapital.uk
- Last Updated: 20/2/2026
Who We Are
This website is operated by Wrap Capital LTD (“we”, “us”, “our”).
For the purposes of UK data protection law, we are the Data Controller of the personal data you provide to us.
If you have any questions about this policy or your personal data, please contact us at:
- Email: info@wrapcapital.uk
- Address: Unit E2, Greendale Business Park, Exeter, EX5 1EW
What Personal Data We Collect
We may collect and process the following information:
Information you provide directly
- Name
- Email address
- Telephone number
- Postal address
- Any information you submit via contact forms, bookings, or enquiries
Information collected automatically
- IP address
- Browser type and version
- Device type
- Pages visited
- Time and date of visits
- Website usage behaviour
- Referral source
Marketing information
- Communication preferences
- Newsletter subscription status
- Interaction with emails or adverts
You are not under a statutory or contractual obligation to provide your personal data to us, however we may be unable to respond to enquiries or provide services without it.
Source of Personal Data
We collect personal data directly from you when you contact us or use our services, and automatically through your use of our website via cookies and similar technologies.
How We Use Your Personal Data
We only use your personal data when the law allows us to. Under UK GDPR we rely on the following lawful bases:
| Purpose | Lawful Basis |
| Responding to enquiries | Legitimate interest |
|---|---|
| Providing services or quotations | Contract |
| Managing bookings or purchases | Contract |
| Website security & spam prevention | Legitimate interest |
| Website analytics | Consent |
| Email marketing | Consent or soft opt-in (PECR) |
| Legal or regulatory compliance | Legal obligation |
| Spam and abuse detection services | Legitimate interest |
Legitimate Interests
Where we rely on legitimate interests as our lawful basis, we have considered whether our processing is necessary and balanced against your rights and freedoms.
Our legitimate interests include:
- responding to enquiries
- operating and improving our website
- preventing fraud and spam
- maintaining the security of our systems
- managing customer relationships
You have the right to object to processing carried out under legitimate interests.
How We Store Your Personal Data
Your personal data is stored securely using a combination of website hosting systems, email systems and business administration software.
Access to personal data is restricted to authorised personnel only. We implement appropriate security measures including secure servers, password protection and access controls.
Where third-party providers store data on our behalf (such as email providers, website hosting providers or CRM systems), they are required to process data securely and in accordance with UK data protection law.
Contact Forms
When you submit a form on our website, the information you provide is sent to us via email and/or stored securely within our website system so we can respond to your enquiry.
We do not use this information for marketing unless you have given consent.
We retain contact enquiries for up to 24 months for customer service and record-keeping purposes.
Please do not submit sensitive personal data (such as health information, financial details, or identification documents) through website contact forms unless specifically requested.
Payments
Where payments are made through our website, payment information is processed by a secure third-party payment provider. We do not store or have access to your full payment card details.
Payment providers act as independent data controllers for payment processing.
Cookies & Website Tracking
Our website uses cookies and similar technologies.
We use a cookie consent banner to request your permission before placing non-essential cookies on your device.
Types of cookies we use:
- Necessary cookies (website functionality)
- Analytics cookies (Google Analytics)
- Marketing cookies (Meta/Facebook advertising)
For full details please see our Cookie Policy.
Google Analytics
We use Google Analytics 4 to understand how visitors use our website and to improve our services.
Google Analytics may collect:
- anonymised IP address
- pages visited
- time spent on the website
- interactions with content
- general location (country/region)
Google Analytics may also record interactions relating to purchases or bookings made through our website. This can include transaction values, products or services viewed or purchased, and conversion events (for example enquiries, bookings or completed orders). We do not receive payment card details through Google Analytics.
This information is used to measure the effectiveness of our website and advertising, understand customer behaviour, and improve our services and marketing. The data is analysed in aggregate form and is not used by us to personally identify individual users.
Google Analytics uses first-party cookies and may use device identifiers and browser information to distinguish users.
Analytics cookies are only activated after you provide consent.
Google may process data outside the United Kingdom. Safeguards are in place using approved international data transfer mechanisms.
Google Privacy Policy: https://policies.google.com/privacy
Meta (Facebook & Instagram) Advertising
We may use the Meta Pixel to measure advertising performance and show relevant adverts to people who have visited our website.
This allows us to:
- measure conversions
- create advertising audiences
- deliver relevant advertising
We may use information about website interactions to create advertising audiences and measure advertising performance.
Meta Platforms Ireland Ltd may act as a joint data controller for this processing.
These cookies are only used if you consent via our cookie banner.
Meta Privacy Policy: https://www.facebook.com/privacy/policy/
Third-Party Services We Use
We may share personal data with trusted third-party service providers who help operate our website and business, including:
- Website hosting provider
- Email provider
- Google (Analytics, Search Console, reCAPTCHA)
- Marketing platforms (e.g. Mailchimp/Brevo)
- Payment providers (if applicable)
These providers process data either on our behalf or as independent data controllers in accordance with their own privacy policies.
Marketing and Professional Advisors
We may share limited personal data and website usage data with third-party marketing or professional service providers (such as marketing agencies, advertising partners, SEO providers or IT support) who assist us in operating, analysing, or promoting our business.
This may include website developers and technical support providers who maintain the website on our behalf.
These organisations only have access to the information necessary to perform their services and are required to process personal data securely and in accordance with data protection law.
Automated Decision-Making and Profiling
We do not make decisions about you based solely on automated processing that have a legal or similarly significant effect.
However, we may use advertising platforms such as Meta which use automated profiling to show relevant advertisements based on website activity.
International Data Transfers
Some third-party services we use may transfer personal data outside the UK.
Where this happens, we ensure appropriate safeguards are used, including:
- UK International Data Transfer Agreement (IDTA)
- Standard Contractual Clauses approved by the ICO
How Long We Keep Your Data
We retain personal data only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Enquiries | up to 24 months |
| Customer records | up to 6 years (legal/tax requirement) |
| Analytics data | up to 14 months |
| Marketing subscriptions | until you unsubscribe |
| Security logs | up to 12 months |
Your Data Protection Rights
Under UK GDPR you have the right to:
- request access to your personal data
- request correction
- request erasure
- restrict processing
- object to processing
- withdraw consent at any time
- request data portability
- To exercise these rights, contact: info@wrapcapital.uk
We will respond to all legitimate requests within one calendar month in accordance with UK data protection law. We may need to verify your identity before fulfilling certain requests to protect personal data.
Withdrawing Consent
Where we rely on your consent to process personal data (for example analytics or marketing cookies), you may withdraw that consent at any time.
You can do this by:
- adjusting your cookie preferences via the website cookie settings, or
- contacting us using the details above.
Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
Complaints
If you are unhappy with how we use your data, you have the right to complain to the Information Commissioner’s Office (ICO):
Telephone: 0303 123 1113
We would appreciate the opportunity to resolve your concerns first.
Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.
Our website may include security protections such as spam and abuse detection services to protect both the website and its users.
Data Breaches
If you believe your personal data has been compromised or misused, please contact us immediately using the contact details above.
Legal Requirements
We may disclose your personal data where required to do so by law, regulation, court order, or to protect our legal rights.
External Links
Our website may contain links to other websites. We are not responsible for the privacy practices of other websites and encourage you to read their privacy policies.
Changes to This Policy
We may update this policy from time to time. The latest version will always be posted on this page.