Privacy policy

Who we are

CapTab is a cap table management product for private equity funds. The service, this website (captab.co.uk) and the application (app.captab.co.uk) are operated by LLRO LTD, a company registered in England & Wales (the "data controller", "we", "us"). If you are a customer, LLRO LTD acts as a data processor in respect of the cap table data you load into the application, and as a data controller in respect of the account and contact data described below.

What we collect

We collect personal data in three situations:

• Demo enquiries. When you submit the demo form, we collect your name, firm, email address, an indication of how many funds you manage, and any message you choose to include.
• Application accounts. When you use the application, authentication is handled by your organisation's Microsoft Entra ID tenant. We receive your name, work email and the identifiers your tenant releases; we do not receive or store your password.
• Analytics. If you accept analytics cookies, we collect anonymous usage data (pages viewed, approximate location, device and browser) through Google Analytics, loaded via Google Tag Manager. This never runs unless you consent — see Cookies and analytics below.

Lawful basis for processing

• Legitimate interests — responding to demo enquiries and operating and securing the application.
• Contract — providing the service to customers who have agreed to our terms.
• Consent — analytics cookies, which you may grant or withdraw at any time.

Cookies and analytics

We use a single essential mechanism to remember your cookie choice, plus optional analytics cookies that only load after you accept.

Cookie / key	Purpose	Type	Retention
captab_consent	Remembers whether you accepted or declined analytics cookies	Essential	Until you clear it
_ga, _ga_*	Google Analytics — distinguishes users and sessions	Analytics (consent)	Up to 2 years

Analytics scripts are blocked until you click Accept on the cookie banner. To withdraw consent after accepting, clear your browser's site data for captab.co.uk; the banner will reappear and analytics will stay off unless you accept again.

How long we keep data

Demo enquiry details are kept for up to 24 months so we can follow up, then deleted. Application account data is kept for the life of the customer relationship and removed on request when access ends. Customer cap table data is retained under the customer agreement and returned or deleted when that agreement ends.

Who we share data with

We do not sell personal data and we do not use it for third-party advertising. We rely on a small number of processors to run the service: Microsoft Azure (UK/EU hosting and Entra ID authentication), and Google (analytics, only with consent). Each processes data on our instructions under its own data-protection terms.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing;
• data portability;
• withdraw consent for analytics at any time.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Contact us

To exercise any of these rights, or for any question about this policy, please reach us through our contact page. We will respond within one month.

This policy may be updated from time to time. Material changes will be reflected in the "last updated" date above.