Skip to content

Legal

Privacy Policy

Last updated: 11 September 2026

This policy sets out how Capital Custodian Authority Ltd collects, uses and protects personal data. By using our website or providing your information to us, you acknowledge that you have read and understood this policy.

1. Introduction

This privacy policy explains how Capital Custodian Authority Ltd ("we", "us" or "our") collects, uses, stores and protects personal data. It applies to anyone who visits our website, subscribes to our communications, attends our events, or otherwise contacts us in relation to our business.

We are committed to protecting your privacy and handling your personal data fairly and lawfully in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data controller

The data controller is Capital Custodian Authority Ltd, registered in England and Wales, of 133 Houndsditch, London, EC3A 7DB. For data protection questions, please contact us at contact@officialcca.com.

3. What personal data we collect

We may collect and process the following categories of personal data:

  • Identity and contact data — name, job title, employer, email address, postal address and telephone number.
  • Professional data — investor status, investment interests, professional qualifications and relationship history.
  • Communications data — records of correspondence, meeting notes and feedback you provide.
  • Technical data — IP address, browser type and version, device information, time zone setting, location data, operating system and platform, and other technology on the devices you use to access our website.
  • Usage data — information about how you use our website, products and services.
  • Marketing and communications data — your preferences in receiving marketing from us and your communication preferences.

4. How we collect personal data

We collect personal data in the following ways:

  • Direct interactions — when you complete forms on our website, subscribe to newsletters, request information, attend events, or correspond with us by post, phone, email or otherwise.
  • Automated technologies — as you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns through cookies and similar technologies. Please see our Cookie Policy for further details.
  • Third parties — we may receive personal data about you from analytics providers, advertising networks, search information providers and professional introducers, but only where we have confirmed that they have a lawful basis for sharing it with us.

5. How we use your personal data

We will only use your personal data where the law allows us to. Most commonly, we use your personal data in the following circumstances:

  • To respond to your enquiries and provide information you request.
  • To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
  • To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
  • To improve our website, products, services, marketing and customer relationships and experiences.
  • To make suggestions and recommendations to you about goods or services that may be of interest to you.
  • To comply with legal and regulatory obligations.
  • To exercise our rights, defend legal claims and protect our operations and assets.

7. Who we share your data with

We may share your personal data with the following categories of recipients where necessary for the purposes described in this policy:

  • Our employees, directors, operating partners and professional advisers.
  • Service providers who perform functions on our behalf, such as IT and hosting.
  • Fund administrators, auditors, lawyers and other professional service providers involved in the management of our funds.
  • Regulators, government bodies and law enforcement agencies where required by law.
  • Professional introducers and business partners, but only where you have been informed and, where required, have consented.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

8. International transfers

Some of our external third parties are based outside the United Kingdom. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: the transfer is to a country deemed adequate by the UK government; the recipient has entered into UK-approved standard contractual clauses; or another recognised legal mechanism applies.

9. Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or regulatory reporting requirements. When deciding how long to keep your data, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it and applicable legal requirements.

10. Your data protection rights

Under data protection law, you have rights in relation to your personal data, including:

  • The right to access your personal data.
  • The right to request correction of inaccurate or incomplete data.
  • The right to request erasure of your personal data in certain circumstances.
  • The right to object to processing based on legitimate interests or direct marketing.
  • The right to request restriction of processing in certain situations.
  • The right to data portability in certain circumstances.
  • The right to withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at contact@officialcca.com. We will respond to all legitimate requests within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

11. Cookies

Our website uses cookies and similar technologies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

13. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you by email. Please check back regularly to see any updates.

14. Contact us

If you have any questions about this privacy policy or our data practices, please contact us at contact@officialcca.com.