Privacy Policy for digitalroute.uk (Capture Holdings Ltd)
Approved for launch: 6 October 2026. Publication date to be confirmed at launch. Publication date will be added when this revised policy goes live.
digitalroute.uk along with all subdomains and alias domains (the “Site”) are owned and operated by Capture Holdings Ltd [Registered in England & Wales: 11440475]. Capture Holdings Ltd is the data controller and can be contacted at:
[email protected]
01782 228850
Digital Route
FWB Building, Whieldon Road,
Stoke-on-Trent
ST4 4JE
Purpose
The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the following:
- The personal data we will collect;
- Use of collected data;
- Who has access to the data collected;
- The rights of Site users; and
- The Site’s cookie policy.
This Privacy Policy applies in addition to the terms and conditions of our Site.
GDPR
Capture Holdings Ltd, trading as Digital Route, processes personal data in accordance with the UK GDPR, the Data Protection Act 2018 and other applicable UK data protection law. Where the EU GDPR applies to particular processing, we will comply with its applicable requirements.
Consent
Using this Site does not mean that you consent to all processing of your personal data. Where we rely on consent, we will ask for it separately and make clear what you are agreeing to. You can withdraw consent at any time by emailing [email protected]. Withdrawing consent does not affect processing that was lawful before withdrawal.
Legal Basis for Processing
Responding to website enquiries and callback requests: our legitimate interests in responding to business enquiries and managing prospective customer relationships. Where an enquiry relates to entering into a service with us, we may also process information to take steps at your request before entering into a contract.
Website and form security: our legitimate interests in protecting the Site, preventing abuse and keeping our systems secure.
Business development and B2B prospecting: our legitimate interests in promoting our services to relevant business contacts, subject to applicable UK data protection and electronic marketing law.
Email marketing: consent where consent is required by PECR. Where the law permits marketing without consent, we may rely on legitimate interests, subject to your right to object or opt out.
Personal Data We Collect
We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.
Where we get personal data from
We may receive business contact information from public sources such as company websites, search engines and LinkedIn, and from business data/prospecting services such as Apollo. We may use this information for business development and to contact relevant businesses, subject to applicable data protection and electronic marketing law.
Data Collected Automatically
Essential security services may process technical information such as your IP address, browser details and request data to protect the Site and its forms from abuse. Where you allow analytics, we use Google Analytics 4 through Google Tag Manager to understand how visitors use the website. Vimeo video content loads only where you allow third-party media and select a video. We do not use advertising cookies at launch.
Data Collected in a Non-Automatic Way
We may also collect the following data when you perform certain functions on our Site:
- First and last name;
- Email address;
- Phone number;
- Business name, where supplied; and
- The information you include in your enquiry; and
- Your optional email-marketing choice, with the date/time, form source and wording version.
This data is collected when you submit a contact or callback form.
How We Use Personal Data
Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.
Technical data used by essential security services is processed to protect the Site and prevent fraudulent or abusive form submissions.
Information submitted through our forms is used to respond to your enquiry, understand the support you are looking for and keep an appropriate record of our communication.
Who We Share Personal Data With
Employees
We may disclose user data to any member of our organisation who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.
Service providers
We use carefully selected providers to operate the Site, manage business contacts and respond to enquiries. These include Google Cloud for the Encap OS CRM and underlying databases, Google Workspace/Gmail for business email, Brevo for email delivery, and Cloudflare for website hosting and security. We also use Vimeo for optional video content and Google Analytics 4 and Google Tag Manager for website measurement and tag management. Analytics and Vimeo content are controlled by your separate cookie choices.
Other Disclosures
We will not sell or share your data with other third parties, except in the following cases:
- If the law requires it;
- If it is required for any legal proceeding;
- To prove or protect our legal rights; and
- To buyers or potential buyers of this company in the event that we seek to sell the company.
If you follow hyperlinks from our Site to another Site, please note that we are not responsible for and have no control over their privacy policies and practices
International transfers
Some of our service providers may process personal data outside the United Kingdom. Where this involves a restricted transfer, we use an appropriate lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards. You can contact us if you would like more information about the safeguards used for a particular provider.
How Long We Store Personal Data
We keep personal data only for as long as it is needed for the purpose for which it was collected and to meet any legal, accounting or record-keeping requirements that apply to us. Enquiries that do not become customers are normally kept for up to 24 months after our last meaningful interaction. Obvious spam or unsolicited sales enquiries may be deleted sooner, normally within 90 days. Customer records may be kept for longer where this is required for contractual, accounting or legal reasons. We may keep a minimal suppression record where necessary to make sure we continue to respect a marketing opt-out.
How We Protect Your Personal Data
We use appropriate technical and organisational measures designed to protect personal data. These include encrypted connections, access controls and carefully selected service providers. Access is limited to staff and providers who need the information for their role or to provide services to us. No method of transmission or storage is completely secure, but we take reasonable steps to protect personal data against unauthorised access, loss, misuse or disclosure.
Your Rights as a User
Under UK data protection law, you may have rights in relation to your personal data, including access, rectification, erasure, restriction, portability and objection. These rights are not all absolute and their availability depends on the circumstances and the lawful basis we rely on. Where we rely on consent, you can withdraw it at any time. You also have an absolute right to object to the use of your personal data for direct marketing.
Children
We do not knowingly collect or use personal data from children under 16 years of age. If we learn that we have collected personal data from a child under 16 years of age, the personal data will be deleted as soon as possible. If a child under 16 years of age has provided us with personal data their parent or guardian can contact us at [email protected].
How to Access, Modify, Delete, or Challenge the Data Collected
If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to whom we disclosed your personal data, if you would like your data to be deleted or modified in any way, or if you would like to exercise any of your other rights under the GDPR, please email [email protected]
How to Opt-Out of Data Collection, Use, or Disclosure
If we send you marketing emails, you can opt out at any time using the unsubscribe option in the email or by contacting [email protected]. We will respect your opt-out and may keep a minimal suppression record so that we do not contact you again for that marketing purpose.
Cookie choices
You can choose separately whether analytics and third-party media / Vimeo are allowed. Necessary storage is always on. Your choices are remembered for 180 days, unless you change them or clear your browser storage sooner. You can review or change them at any time using Cookie Settings in the footer. Further information is available in our Cookies Policy.
Modifications
This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the “Last updated” date at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of changes to this Privacy Policy.
Complaints
If you have concerns about how we use your personal data, please contact us at [email protected] and we will try to resolve them. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator. You do not have to contact us before making a complaint to the ICO.
Contact Information
If you have any questions, concerns or complaints, you can contact [email protected]