Undo Capital Privacy Policy

Last updated: 28 June 2026

1. About this policy and who we are

Undo Capital Ltd (“Undo Capital”, “we”, “us” and “our”), a company registered in England and Wales under company number 15278949 with its registered office at 124 City Road, London, England, EC1V 2NX, is the controller of the personal data described in this policy.

This policy explains how we handle personal data when you visit our website, create an account, and use our Services as a business user, and when we deal with prospective customers and other contacts.

Where you upload personal data about other people into the platform for us to process on your behalf, for example your shareholders, directors or investors, we act as a processor and not a controller of that data, and our Data Processing Addendum governs that processing. This policy covers the personal data we process as a controller.

2. The personal data we collect

account and profile data: your name, email address, password, role, and the company details you provide;
transaction and billing data: your plan, billing contact and payment records. Card payments are processed by Stripe, and we do not store full card numbers;
content you provide: the information you enter to use the Services. Where this includes other people’s personal data, see section 1;
company register data: where you use features that source company information, we obtain publicly available information from Companies House, which can include the personal data of directors and persons with significant control;
support and communications data: the messages you send us, including through our in-app chat provided by Intercom and by email;
usage and device data: how you interact with our website and platform, collected through analytics tools including Google Analytics and PostHog, and through cookies and similar technologies described in our Cookie Policy; and
marketing data: your preferences for receiving marketing from us.

3. How we use your data and our lawful bases

To provide the Services and perform our contract with you, including creating your account, submitting applications you instruct us to submit, and providing support. Lawful basis: performance of a contract, and our legitimate interests where you act as an individual on behalf of a company.
To take payment and manage billing. Lawful basis: performance of a contract and compliance with our legal obligations.
To operate, secure, maintain and improve our website and platform, including analytics and preventing fraud and misuse. Lawful basis: our legitimate interests in running and improving a secure service.
To send you service messages about your account and changes to the Services. Lawful basis: performance of a contract and our legitimate interests.
To send you marketing about our Services where you are an existing or prospective business customer. Lawful basis: our legitimate interests, and your consent where required. You can opt out at any time.
To comply with our legal and regulatory obligations, including accounting and tax. Lawful basis: compliance with a legal obligation.
To establish, exercise or defend legal claims, and in connection with a sale or reorganisation of our business. Lawful basis: our legitimate interests.

Where we rely on legitimate interests, we have considered the impact on you, and we do not use your data in ways that override your rights.

4. Marketing

We may send you marketing about our Services by email where you are a customer or have asked to hear from us, and otherwise where you have consented. We rely on our legitimate interests to market to business contacts, and on your consent where the law requires it. Every marketing message includes a way to opt out, and you can tell us at any time that you no longer wish to receive marketing by contacting us at info@undocapital.com. Opting out of marketing does not stop service messages about your account.

5. Who we share your data with

service providers who help us run the Services, including Google (analytics and the AI models used in some features), PostHog (product analytics), Intercom (support messaging), Stripe (payments) and DigitalOcean (hosting in the United Kingdom). They act on our instructions;
HMRC, where you instruct us to submit an application as your agent;
our professional advisers, such as lawyers and accountants, where needed;
authorities and regulators where we are required to share by law; and
a buyer or successor in connection with a sale, merger or reorganisation of our business.

We do not sell your personal data.

6. International transfers

Your account data is hosted in the United Kingdom with DigitalOcean (London). Some of our providers, including Google, Stripe, Intercom and PostHog, may process personal data outside the United Kingdom. Where they do, we rely on an appropriate safeguard under data protection law, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the European Commission standard contractual clauses.

7. How long we keep your data

We keep your data for as long as you have an account and for as long as we need it for the purposes in this policy. After that, we keep it only for as long as required to meet our legal, accounting, tax and regulatory obligations, or to establish or defend legal claims, after which we delete or anonymise it.

8. Your rights

Under data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to our processing, to data portability, and to withdraw consent where we rely on it, including the right to object to direct marketing at any time. To exercise any of these rights, contact us at info@undocapital.com. We will respond within the time limits the law allows. These rights are not absolute and are subject to conditions and exemptions under the law.

9. Complaints

If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.

10. Cookies

Our website and platform use cookies and similar technologies. Our Cookie Policy explains which ones we use and how you can manage them.

11. Children

The Services are for business users and are not directed at children. We do not knowingly collect the personal data of children.

12. Security

We use appropriate technical and organisational measures to protect personal data. No system is completely secure, but we work to protect your data and to respond appropriately to any personal data breach.

13. Changes to this policy

We may update this policy from time to time. We will post the current version on our website and update the date above. We will tell you about significant changes where appropriate.

14. How to contact us

Email us at info@undocapital.com, or write to us at Undo Capital Ltd, 124 City Road, London, England, EC1V 2NX.

‍