Last updated: 17th February 2026
This Privacy Policy explains how NetOnTarget Limited trading as Capway Art (“Capway Art”, “we”, “us”, “our”) collects and uses personal data when you visit capway.uk (the “Website”), contact us, or buy products from us.
1) Who we are (Data Controller)
Controller: NetOnTarget Limited t/as Capway Art
Registered address: Capway Art, PO Box 18928, Redditch, B97 9AJ
Company number: 07147307
Email: support@capway.uk
If you have any questions about this policy or your personal data, contact us using the details above.
2) What data we collect
We may collect the following categories of personal data:
- Identity and contact data: Name, billing/shipping address, email address, phone number.
- Order and payment data: Items purchased, order notes, delivery information, payment status (we do not store full card details if you pay by card via a payment provider).
- Account data (if you create an account): Login details and order history.
- Customer support data: Messages you send us by email, forms or other contact methods.
- Technical data: IP address, browser/device information, and usage data (especially if analytics is enabled and you consent where required).
3) How we use your data (purposes and lawful bases)
UK GDPR requires us to have a lawful basis for each use of your personal data.
We typically use your data for:
- Processing and delivering your order (e.g., taking payment, printing/fulfilment, shipping updates) — lawful basis: contract.
- Customer service and handling queries/complaints — lawful basis: contract (where it relates to an order) or legitimate interests (running our business and providing support).
- Fraud prevention and security (e.g., protecting the Website, preventing misuse) — lawful basis: legitimate interests.
- Legal and tax compliance (e.g., invoices/records) — lawful basis: legal obligation.
- Marketing (e.g., email newsletters) — lawful basis: consent where required for email marketing, or legitimate interests for limited marketing where permitted and you can opt out.
- Website analytics and improvement — lawful basis: consent where cookies/technologies require it.
4) Cookies and similar technologies
We use cookies and similar technologies to help the Website work and (if enabled) to understand how it is used.
Where non-essential cookies are used (for example, analytics/marketing), we will ask for your consent and you can change your preferences at any time via our cookie settings/banner (if available).
5) Who we share data with
We share personal data only where necessary, for example with:
- Payment providers (to process payments): Stripe / PayPal / WooPayments.
- Delivery and fulfilment providers (to ship your order): e.g., Royal Mail.
- Website/hosting and IT providers (to run and secure the Website).
- Professional advisers (accountants, insurers, legal advisers) where needed.
These providers act as processors/service providers and are only permitted to process your data under our instructions (and as required by law).
6) International transfers
Some of our service providers may store or process data outside the UK.
Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are used (for example, contractual protections and other measures required under UK GDPR).
7) How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this policy.ico.org+1
Typical retention periods include:
- Order and accounting records: kept for 6 years to meet tax/accounting requirements.
- Customer service messages: kept for 24 months after your last interaction (unless needed longer for a dispute).
- Marketing records/consent: kept until you unsubscribe/withdraw consent and for a short period after to maintain suppression lists.
8) Your data protection rights
Depending on the circumstances, you have rights including: access, rectification, erasure, restriction, objection, and data portability, plus the right to withdraw consent where processing is based on consent.ico.org+1
To exercise your rights, contact us using the details in section 1.
9) Complaints
If you are unhappy with how we handle your personal data, you can complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO). ICO website: ico.org.uk
10) Children
Our Website and products are not intended for children, and we do not knowingly collect personal data from children.
11) Changes to this policy
We may update this Privacy Policy from time to time.
When we do, we will update the “Last updated” date at the top of this page.
