Who we are
S.A. CAPEO LTD (“we”, “us”) is the data controller for the personal data described in this notice. We are registered in Cyprus at Evagora Pallikaridi, 38,8010 Paphos, Cyprus.
For any question about this notice, or to exercise any of the rights set out below, email hello@sacapeo.com.
What this notice covers
This notice covers personal data collected through this website, which means the enquiry form and the server logs that support it.
We decide why and how that data is used, so for it we are thecontroller.
Some engagements involve specialised external providers. Where delivering an assignment requires us to pass your details to such a provider, we ask for your agreement first and tell you who they are. A provider that decides independently how to use those details acts as aseparate controller, and its own privacy notice governs what happens from that point.
What we collect and why
Enquiry form
| Data | Why | Legal basis |
|---|---|---|
| Name | To address you correctly | Consent |
| Email address | To reply to your enquiry | Consent |
| Company name (optional) | To understand your context | Consent |
| Phone number (optional) | To call you back, if you ask us to | Consent |
| Area of interest, message | To understand the enquiry and prepare a reply | Consent |
| Country of request, timestamp | Security and abuse prevention | Legitimate interests |
Please do not include special category data — health information, religious or political beliefs, trade union membership — in your message. We do not need it and do not want to hold it.
Who we share it with
We do not sell your data and we do not share it for advertising. We use a small number of processors to operate this site:
- Cloudflare, Inc. — hosting, security, bot protection (Turnstile), and privacy-preserving analytics.
- Resend (Plus Five Five, Inc.) — delivers the notification email containing your form submission to our inbox.
Both are US-headquartered. Where personal data is transferred outside the European Economic Area, that transfer is made under the European Commission's Standard Contractual Clauses together with the supplementary measures those providers apply.
How long we keep it
- Enquiries: 24 months from your last contact with us, then deleted.
- Contractor enquiries: 12 months from your last contact with us, then deleted.
- Security and abuse logs: retained for a short period by Cloudflare under their own retention policy.
You can ask us to delete your data sooner at any time, and we will do so unless we are legally required to retain it.
Cookies and analytics
We do not use advertising, tracking or profiling cookies, and this site sets no cookies for analytics. We use Cloudflare Web Analytics, which is cookieless and does not fingerprint or track individual visitors across sites. Cloudflare Turnstile, the anti-spam check on our forms, may store a short-lived token in your browser strictly to complete that check. See ourcookie notice for detail.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing of it;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time, without affecting processing already carried out.
Email hello@sacapeo.com to exercise any of these. We will respond within one month.
Complaints
If you believe we have handled your data improperly, please tell us first so we can put it right. You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to the supervisory authority in your own country of residence.
Changes to this notice
If we change how we handle personal data, we will update this page and change the date shown beside it.