Privacy Policy

Introduction:

Capital Parent Limited (“Capital Parent”, “we”, “us”, or “our”) provides an employer-funded support platform offering community spaces, professional-led education, structured guidance, and enhanced leave payments.

For the purposes of UK data protection law, Capital Parent  Limited is a data controller in relation to personal data processed through our website and platform.

Registered Company Number: 15618445

Registered Address: Collingwood Buildings, 38 Collingwood Street, Newcastle Upon Tyne, Tyne And Wear, United Kingdom, NE1 1JF

Data protection contact: info@capitalparent.co.uk

This Privacy Policy explains how we collect, use, store, and protect personal data relating toemployers, employees accessing Capital Parent through their employer, professional partnersparticipating on the platform, and individuals contacting us through our website.

We may collect personal data including:

- Name and work email address

- Employer and organisational information

- Platform participation data

- Verification documents (e.g., MAT B1 forms or birth certificates where required for enhanced

payments)

- Limited financial information required to administer enhanced leave payments, such as bank details or payment identifiers, where applicable.

- Professional qualifications (for partners)

- Technical data such as IP address and device/browser information

In limited circumstances, we process health-related information (such as MAT B1 forms or documentation confirming childbirth) where necessary to administer enhanced leave payments. We process this data only where an appropriate lawful basis applies under Article 9 UK GDPR and appropriate safeguards are in place.

We use personal data to:

- Provide access to the Capital Parent platform

- Administer employer subscriptions

- Verify eligibility and administer enhanced leave payments

- Facilitate events, courses, and community participation

- Respond to enquiries and support requests

- Comply with legal and regulatory obligations

- Maintain platform security and integrity

Capital Parent does not sell personal data.

We rely on the following lawful bases under UK GDPR:

- Contract (to provide services)

- Legal obligation (for compliance and financial record-keeping)

- Legitimate interests (operating and improving services, safeguarding, fraud prevention)

- Consent (for non-essential cookies and certain processing activities)

For special category data, we rely on explicit consent or processing necessary for social protection purposes under Article 9(2)(b) UK GDPR, where applicable.

We may share personal data with payment processors, IT hosting providers, analytics providers, professional advisers, and regulators where legally required.

Capital Parent does not provide employers with identifiable individual engagement data relating toemployee participation in the platform. Verification documents are retained only for as long as necessary to verify eligibility and comply with legal or financial record-keeping requirements.

Capital Parent does not hold employer funds in trust. Employers pay for a service, and enhanced payments are funded from company revenues. Relevant identity and financial information is processed securely through authorised payment service providers. Capital Parent does not store full payment card details.

Some service providers operate outside the United Kingdom. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including UK-approved Standard Contractual Clauses or transfers to jurisdictions recognised as adequate by the UK government.

We retain personal data only for as long as necessary, including for the duration of employer subscriptions and financial record-keeping obligations (typically up to 6 years). When no longer required, data is securely deleted or anonymised.

We implement appropriate technical and organisational measures including secure hosting, access controls, and encryption of data in transit. While no system is completely secure, we take reasonable steps to protect personal data.

Your Rights

Under UK data protection law, individuals may have rights to access, correct, delete, restrict, object to processing, or request portability of their personal data.

Requests can be made via: info@capitalparent.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

Changes to this Policy

We reserve the right to update this Privacy Policy from time to time. We will notify you of any changes by posting an updated version of this policy.