Privacy Policy – CAPITAL PLAY

Effective Date: October 13, 2026

1. Introduction

Welcome to the privacy policy of CAPITAL PLAY LIMITED, designed to inform you of how we collect, use, process, and protect your personal information when you access and use our e-commerce website located at www.capitalplayltd.com. At CAPITAL PLAY LIMITED, we specialize in curating a range of durable, compact fitness small tools designed for smooth, effective home and on-the-go workouts, including our Portable Premium Workout Resistance Bands and premium textured massage balls that target tight deep muscle knots and ease post-workout soreness effectively. We are fully committed to upholding the highest standards of data protection, transparency, and respect for your privacy rights, and this policy outlines our practices in full compliance with applicable data protection regulations across the United Kingdom and global jurisdictions that our customers reside in.

This policy applies to all visitors, registered users, customers, and other individuals who interact with our website, purchase our fitness products, or use any of the services we make available through our platform. We recognize that your personal information is a sensitive and valuable asset, and we have implemented comprehensive technical, administrative, and physical security measures to ensure that all data we collect remains secure, and is only ever used for the purposes that are clearly disclosed in this document. By accessing our website, creating an account, placing an order, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the terms laid out in this Privacy Policy. If you do not agree with any part of this policy, we kindly ask that you discontinue your use of our website and services immediately.

2. Data Controller Information

The data controller responsible for your personal information under applicable data protection laws is CAPITAL PLAY LIMITED. You can reach out to us using the following contact details at any time for any privacy-related inquiries, requests, or concerns:

Registered Company Name: CAPITAL PLAY LIMITED
Official Website: www.capitalplayltd.com
Contact Email: [email protected]
Registered Physical Address: Ashcombe Court, Woolsack Way, Godalming, Surrey, United Kingdom, GU7 1LQ
Contact Telephone Number: +44 1483 428322‌

Our dedicated data protection team is available to respond to all legitimate privacy-related communications within 30 calendar days of receiving your request, and we will never charge you any fee for accessing your own personal data or exercising your legal rights under applicable regulations, unless your request is manifestly repetitive, excessive, or unfounded, in which case we may charge a reasonable administrative fee to cover our processing costs.

3. Types of Personal Information We Collect

We only collect personal information that is relevant, necessary, and directly related to the operation of our e-commerce platform and the delivery of our fitness products and associated services to you. The categories of personal information we may gather include, but are not limited to, the following:

3.1 Information You Provide Voluntarily

This is all information that you actively submit to us when you interact with our website, including:

Full name, billing address, shipping address, and contact phone number, which we require to process your orders, arrange for accurate delivery of your resistance bands, massage balls, and other fitness small tools, and resolve any order-related issues that may arise during the fulfillment process.
Email address, which we use to send you order confirmation notifications, shipping tracking updates, responses to your customer support queries, and (only if you have explicitly opted in to receive marketing communications) news about our New Arrivals, exclusive promotions, and upcoming product launches.
Payment information, including credit card or debit card details, billing postal code, and payment method identifiers. Please note that we do not store full sensitive payment card details on our own internal servers – all payment processing is handled through fully PCI DSS-compliant third-party payment processors that are held to the highest global data security standards for financial information.
Account registration details, including a unique username and password that you set up when creating a user profile on our website, to allow you to track your order history, save your preferred shipping addresses, and access exclusive member-only offers.
Voluntarily submitted information you share when contacting our customer support team, leaving product reviews, participating in customer surveys, or entering any promotional competitions or giveaways that we may run from time to time.

3.2 Information We Collect Automatically

When you visit and browse [www.capitalplayltd.com], we automatically collect certain technical information through the use of cookies, web beacons, and similar tracking technologies to help us improve your user experience and optimize the performance of our e-commerce platform. This automatically collected information includes:

Your device’s internet protocol (IP) address, browser type and version, operating system, and device type, which we use to troubleshoot technical issues, ensure our website is fully compatible with the devices our customers use to access it, and prevent fraudulent access attempts to our platform.
Date and time of your visit, pages you viewed on our website, links you clicked, products you added to your shopping cart, search terms you entered on our site, and the length of time you spent on each page. This analytics data helps us understand which of our fitness products are most popular with our customers, refine our product curation to better meet your workout needs, and make improvements to our website navigation to make it easier for you to find the durable, compact fitness small tools you are looking for.
General geolocation data derived from your IP address, which we use to display the correct currency, relevant shipping options, and region-specific product information based on where you are located, ensuring your shopping experience is as smooth and convenient as possible.

3.3 Information We Collect From Third Parties

In limited circumstances, we may receive additional information about you from trusted third-party sources, including:

Fraud prevention and identity verification service providers, who share data with us to help us detect and prevent unauthorized transactions, payment fraud, and other malicious activities that could harm our customers or our business operations.
Social media platforms, if you choose to connect your account on our website to your social media profile, or if you interact with our official social media pages linked to our brand. The information we receive in these cases is always governed by the privacy settings you have set on your respective social media accounts.

4. How We Use Your Personal Information

All personal information we collect is used for lawful, transparent, and clearly disclosed purposes, and we will never process your data in a way that is incompatible with the purposes we outline in this section. The primary uses of your personal information are as follows:

4.1 Order Fulfillment and Transaction Processing

We use your personal details to process and complete every purchase you make on our website: this includes verifying your identity, authorizing your payment, coordinating with our logistics partners to ship your ordered fitness tools to the exact delivery address you provided, sending you real-time updates about your order status, and processing any returns, refunds, or exchanges you may request. Without the necessary personal information required to complete these steps, we will not be able to successfully deliver the resistance bands, massage balls, or other fitness products you have ordered to you.

4.2 Website Functionality and User Experience Optimization

Your automatically collected browsing data and account information are used to maintain the smooth, secure, and reliable operation of [www.capitalplayltd.com]. This includes personalizing your shopping experience to show you product recommendations that are tailored to your previous browsing and purchase history of fitness small tools, remembering your saved preferences so you do not have to re-enter information on every subsequent visit, ensuring the checkout process runs without unnecessary interruptions, and fixing any technical bugs or errors that are reported by users or detected through our monitoring systems. Our goal is to create a seamless platform that makes it easy for you to shop our curated range of durable, compact fitness small tools designed for smooth, effective home and on-the-go workouts.

4.3 Customer Support and Communication

We use your contact information to respond promptly to all of your questions, comments, and concerns about our products, your orders, or any other aspect of our services. If you reach out to us via email, phone, or our website’s contact form, we will store a record of our communications with you to ensure we can provide consistent, high-quality support, and resolve any issues you face as quickly and effectively as possible. For example, if you contact us to ask about how our premium textured massage balls can help ease post-workout soreness, we will keep a record of that conversation to follow up with you if you have additional questions after you receive your product.

4.4 Marketing and Promotional Communications (With Your Explicit Consent)

When you have given us clear, explicit opt-in permission to send you marketing messages, we will use your email address to share updates about our New Arrivals, exclusive discount offers, limited-time promotions, fitness tips that complement the use of our resistance bands and massage balls, and announcements about upcoming new product launches. You have the full right to opt out of receiving these marketing communications at any time, by clicking the “unsubscribe” link located at the bottom of every marketing email we send, or by sending us an email at [email protected] requesting to be removed from our marketing mailing list. Even after you opt out of all marketing messages, we will still continue to send you non-promotional transactional communications that are necessary for your order, such as shipping confirmations and order delivery notifications.

4.5 Legal Compliance and Safety Protection

We may process your personal information when it is necessary for us to comply with our legal obligations under applicable United Kingdom and international laws, including responding to valid legal requests from public authorities, courts, or regulatory bodies. We also process your personal data when it is necessary to protect the vital interests of our users, our staff, or the general public, as well as to investigate and prevent fraud, unauthorized access to our systems, intellectual property infringement, and other illegal or harmful activities that could threaten the security of our website, our customers, or our business operations.

5. Sharing and Disclosure of Your Personal Information

CAPITAL PLAY LIMITED will never sell, rent, or lease your personal information to any third parties for their own independent marketing purposes without your explicit, separate written consent. We only share your personal data with trusted third-party service providers that we have carefully vetted, and who are contractually required to use your information solely for the limited purposes that we authorize, and to maintain the same high standards of data protection that we follow ourselves. The categories of third parties we may share your personal information with are:

Payment processing providers, who handle all of your payment transactions securely to ensure that your financial information is never exposed to unauthorized parties.
Logistics and shipping partners, who receive the necessary delivery information to transport your ordered fitness products from our warehouses directly to your specified shipping address in a timely manner.
Cloud hosting and website technology service providers, who host our [www.capitalplayltd.com] website on secure servers, provide us with website analytics tools, and help us maintain the technical security and uptime of our e-commerce platform.
Fraud prevention and compliance service providers, who help us identify and block suspicious transaction activity to protect both you and our business from financial harm.
Professional third-party advisors, including our lawyers, accountants, and auditors, when it is necessary for us to share limited personal information for the purposes of conducting audits, complying with our legal obligations, or protecting our legal rights.

We may also disclose your personal information if we are required to do so by a valid, legally binding order from a court, government authority, or regulatory body, or in the event of a merger, acquisition, sale of all or part of our company assets, or other corporate restructuring transaction, where your personal information may be transferred to the new operating entity, who will be required to continue to honor the terms of this Privacy Policy.

6. International Data Transfers

As a company registered and operating out of the United Kingdom, all personal information you provide to us is initially stored on secure servers located within the European Economic Area (EEA) and the United Kingdom. In some limited circumstances, it may be necessary for us to transfer your personal data to locations outside of the UK and EEA, for example to the data centers of our approved cloud service providers, or to international shipping partners that deliver orders to customers located outside of the United Kingdom. Whenever we transfer your personal information to a country that does not have an equivalent level of data protection that is recognized by the UK data protection authorities, we will implement legally recognized and appropriate safeguards to protect your personal data, including using the UK Government approved Standard Contractual Clauses, or ensuring that the receiving party has binding corporate rules in place that meet the required data protection standards. You can request a full copy of these safeguards from us at any time by reaching out to our team using the contact details provided earlier in this policy.

7. Data Retention Period

We will only retain your personal information for as long as it is strictly necessary to fulfill the exact purposes that we collected it for. For example:

We keep order-related information, including your name, shipping address, and order details, for a period of 7 years after your transaction is completed, to comply with UK tax and commercial record keeping requirements, and to resolve any potential post-order issues such as warranty claims, returns, or product-related support requests.
If you create a registered user account on our website, we will retain all of your account-related personal data for as long as you keep your account active, until you choose to delete your account entirely. After you request to delete your account, we will remove all of your personal information from our active operational systems, apart from the limited data we are legally required to retain for compliance, tax, or dispute resolution purposes.
We retain marketing communication opt-in records for as long as you remain subscribed to our marketing mailing list, so that we can demonstrate we have received your valid consent to send you promotional messages. If you opt out of marketing communications, we will keep a minimal record of your email address to ensure that we do not accidentally send you any unwanted marketing messages in the future.

Once the retention period for your personal information expires, we will securely delete, anonymize, or irreversibly destroy that data in full compliance with our internal data security protocols, to ensure it can no longer be linked back to you as an individual.

8. Your Data Protection Rights

Under applicable UK and global data protection laws, you hold a range of clearly defined legal rights in relation to your personal information. You can exercise any of these rights at any time by submitting a request to us via email at [email protected], or by contacting us via our registered address or phone number listed in Section 2 of this policy. Your rights include:

‌Right of Access‌: You have the right to request a full, free copy of all of the personal information that we hold about you, along with a detailed explanation of how we have processed that data.
‌Right to Rectification‌: If you discover that any of the personal information we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct that information immediately. For example, if you move house and your shipping address changes, you can update this directly in your user account, or contact us and we will amend your details for you.
‌Right to Erasure‌: You have the right to request that we delete all of your personal information from our systems, in circumstances where the data is no longer necessary for the purposes we originally collected it for, you withdraw your consent to our processing, or our processing of your data is otherwise unlawful.
‌Right to Restriction of Processing‌: You have the right to request that we pause the processing of your personal information in specific scenarios, such as when you are contesting the accuracy of your data, you need us to retain your data for a legal claim, or you have objected to our processing activities and we are in the process of verifying our legitimate grounds for continuing that processing.
‌Right to Data Portability‌: You have the right to receive all of the personal data that you have provided to us, in a structured, commonly used, machine-readable format, and to request that we transfer that data directly to another data controller of your choice, where technically feasible.
‌Right to Object‌: You have the right to object at any time to our processing of your personal information that is based on our legitimate business interests, including for marketing purposes. If you object to direct marketing, we will immediately stop all processing of your data for those purposes.
‌Right to Withdraw Consent‌: Any time you have previously given us your explicit consent to process your personal information for a specific purpose (such as receiving marketing emails), you have the full right to withdraw that consent at any time, without any negative impact to your ability to continue using our website, purchasing our fitness products, or receiving order-related support.
‌Right to Lodge a Complaint‌: If you believe that our processing of your personal information has violated applicable data protection regulations, you have the right to submit a formal complaint to the relevant data protection supervisory authority in your country of residence. For customers located in the United Kingdom, this supervisory authority is the Information Commissioner’s Office (ICO).

Before we are able to action your data rights request, we may need to request a small amount of additional information from you to verify your identity, to ensure that we are disclosing or modifying personal information only to the actual individual that the data belongs to, and to prevent fraudulent requests from unauthorized third parties.

9. Cookies and Tracking Technologies

Our website [www.capitalplayltd.com] uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize the content we show you. Cookies are small text files that are stored on your device’s hard drive when you visit a website, which allow the website to remember your actions and preferences over time. The different categories of cookies we use are:

‌Strictly Necessary Cookies‌: These cookies are absolutely essential for our website to function properly, and they enable you to move around the site and use its core features, such as accessing your user account, adding items to your shopping cart, and completing the checkout process. These cookies do not collect any information about you that could be used for marketing purposes, and they will not remember where you have browsed on other websites.
‌Performance and Analytics Cookies‌: These cookies collect anonymous, aggregated information about how visitors use our website, such as which pages users visit most often, and if they receive error messages from web pages. The data collected by these cookies is used only to make improvements to our website’s performance and ensure that our users have a better overall shopping experience when looking through our fitness tool collection.
‌Functionality Cookies‌: These cookies allow our website to remember the choices you make, such as your preferred language, your selected currency, and your saved login credentials, to provide you with more personalized features that make your next visit to our site more convenient.
‌Targeting and Marketing Cookies‌: These cookies are used to deliver advertisements that are relevant to you and your interests, based on your previous browsing activity on our website and other third-party sites. They are also used to limit the number of times you see the same advertisement, and to help measure the effectiveness of our marketing campaigns.

You have full control over cookie settings on your device, and you can modify your web browser options to refuse cookies entirely, or to alert you when a website is attempting to place a cookie on your device. Please note that if you choose to disable all cookies on your browser, some core functions of our [www.capitalplayltd.com] website may not work correctly, and you may not be able to complete your purchase of resistance bands, massage balls, or other fitness small tools through our checkout process.

10. Children’s Privacy

Our e-commerce website, all of our fitness products, and our associated services are intended exclusively for use by adults who are 18 years of age or older. We do not knowingly collect personal information from children under the age of 18, and no part of our website is designed to attract individuals under the age of majority. If we ever become aware that we have inadvertently collected personal information from a child under 18 without verifiable parental consent, we will take immediate steps to permanently delete that information from all of our servers and systems. If you believe that we may have collected information from a child under 18, please contact us immediately at [email protected] so that we can resolve this issue without delay.

11. Data Security Measures

CAPITAL PLAY LIMITED takes the security of your personal information extremely seriously, and we have implemented a comprehensive set of industry-standard technical, administrative, and physical security measures to protect your personal data against unauthorized access, accidental loss, alteration, destruction, or misuse. All sensitive personal and payment data transmitted between your browser and our website is encrypted using TLS 1.3 technology, which is the highest standard of secure data transmission currently available for e-commerce platforms. We regularly conduct independent third-party security audits of our systems to identify and address any potential vulnerabilities, all of our staff are required to complete regular data protection and information security training, and access to your personal information is strictly limited only to the authorized employees who need that data to fulfill their job duties related to processing your orders and providing you with customer support.

While we do everything in our power to protect your personal information, it is important to acknowledge that no method of data transmission over the internet, or method of electronic storage, can ever be guaranteed to be 100% secure. In the unlikely event that a personal data breach occurs that poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority of that breach without undue delay, in full compliance with all applicable legal notification requirements.

12. Updates to This Privacy Policy

We may occasionally update and revise this Privacy Policy from time to time to reflect changes in our business operations, new regulatory requirements, or updates to the features and functionality we offer on our [www.capitalplayltd.com] website. When we make any material changes to this policy, we will update the “Effective Date” listed at the top of this document, post the revised policy prominently on our website homepage, and send a notification to all registered users via email to inform them of the upcoming changes at least 30 days before the new policy terms come into effect. Your continued use of our website and our services after the effective date of the revised Privacy Policy will be considered as your acceptance of the updated terms. We encourage you to review this policy periodically whenever you visit our website, to stay fully informed about how we are protecting your personal information.

13. Contact Us

If you have any questions, comments, concerns, or requests related to this Privacy Policy, our data processing practices, or your personal data rights, please do not hesitate to get in touch with us at any time using the following contact details:

By Email: [email protected]
By Post: CAPITAL PLAY LIMITED, Ashcombe Court, Woolsack Way, Godalming, Surrey, United Kingdom, GU7 1LQ
By Telephone: +44 1483 428322‌

Our dedicated privacy team will review and respond to your inquiry as quickly as possible, and we are always happy to provide you with any additional clarification you may need about how we keep your personal data safe while you shop our curated range of durable, compact fitness small tools designed for smooth, effective home and on-the-go workouts.