Company Name: Cand Capital Limited
Company Number: 10699502
Registered Address: 27a Barker Road, Sutton Coldfield, United Kingdom, B74 2NY
Contact Email: contact@candcapitalltd.com
1. Introduction
At Cand Capital Limited, your privacy is extremely important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website, use our services, or communicate with us. We are committed to handling your data transparently and in full compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
By accessing or using our website or services, you agree to the practices described in this Privacy Policy.
2. Information We Collect
We collect personal and non-personal information through the following means:
2.1 Personal Data You Provide to Us
This may include:
-
Full Name
-
Email Address
-
Phone Number
-
Country of Residence
-
Payment Information (where applicable)
-
Case Details (including scam description and relevant documentation)
-
Any other information you voluntarily submit via forms, email, or consultation requests
2.2 Automatically Collected Data
When you visit our website, we may collect:
-
IP Address
-
Browser Type and Version
-
Device Type
-
Referral URLs
-
Pages visited and time spent
-
Cookies and usage data
3. How We Use Your Information
We use your personal data for the following purposes:
-
To provide scam recovery consultations and services
-
To respond to inquiries and support requests
-
To process payments (where applicable)
-
To send service updates, recovery progress notifications, or follow-ups
-
To improve our website and user experience
-
To comply with legal obligations
-
To prevent fraud, abuse, or suspicious activity
We do not sell, rent, or trade your personal data to third parties.
4. Legal Basis for Processing Data
We process your data based on one or more of the following legal grounds:
-
Your consent
-
Performance of a contract
-
Compliance with legal obligations
-
Legitimate interest (e.g., to prevent fraud or improve services)
5. How We Share Your Information
We may share your information with trusted third parties under the following conditions:
-
With legal and regulatory bodies when required by law
-
With law enforcement authorities in cases involving criminal investigations
-
With institutional partners or recovery agents solely for the purpose of fund recovery and case escalation
-
With our service providers (e.g., hosting providers, email marketing platforms) under strict confidentiality agreements
We ensure that all third parties handling your data are GDPR-compliant.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements.
-
Client recovery records: retained for 7 years
-
Contact inquiries: retained for 12 months
-
Billing/payment records: retained as required by UK financial regulations
You may request deletion of your data at any time (see Section 9).
7. Cookies and Tracking Technologies
Our website uses cookies to enhance your browsing experience and analyze site traffic.
Types of Cookies We Use:
-
Essential Cookies: Enable basic functionality (e.g., page navigation, form submission)
-
Performance Cookies: Collect anonymized usage data for analytics
-
Marketing Cookies: Used for targeted advertising via third-party platforms
You can manage your cookie preferences through your browser settings or via our cookie banner when visiting the site.
8. Data Security
We take data security seriously and have implemented appropriate technical and organizational safeguards, including:
-
Secure socket layer (SSL) encryption
-
Firewalls and intrusion detection systems
-
Data access controls and staff confidentiality agreements
-
Regular system audits and compliance reviews
Despite these efforts, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we work diligently to protect your data.
9. Your Data Protection Rights
Under the UK GDPR and other applicable laws, you have the following rights:
-
Right to access – You can request copies of your personal data.
-
Right to rectification – You can request that we correct inaccurate or incomplete data.
-
Right to erasure – You can request deletion of your personal data (subject to legal limits).
-
Right to restrict processing – You can request we limit how we use your data.
-
Right to data portability – You can request we transfer your data to another organization.
-
Right to object – You can object to data processing under certain conditions.
To exercise any of these rights, contact us at contact@bokesltd.com.
10. International Transfers
If your data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as:
-
Transfer to countries with an adequacy decision from the UK
-
Use of Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO)
11. Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect data from children. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.
12. Updates to This Policy
We may update this Privacy Policy from time to time to reflect legal or operational changes. When we do, we will revise the “Effective Date” at the top of the policy. We encourage you to review this page periodically.
13. Contact Us
If you have any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact:
Cand Capital Limited
27a Barker Road, Sutton Coldfield, United Kingdom, B74 2NY
Email: contact@candcapitalltd.com
