GDPR Compliance Statement

CapEngage is fully committed to compliance with Regulation (EU) 2016/679 (General Data Protection Regulation or 'EU GDPR') and the UK Data Protection Act 2018 ('UK GDPR').

We provide enterprise tools enabling our EU and UK clients to collect consent, manage data subject rights, execute Data Processing Addendums (DPAs), and maintain transparent audit trails.

• As a Data Processor: CapEngage processes customer CRM records, contact lists, and message dispatches solely under the documented instructions of our business clients. • As a Data Controller: CapEngage collects account registration details, telemetry logs, and billing metadata directly from account administrators to operate and secure our platform.

CapEngage enables clients to capture and document lawful bases under GDPR Article 6:

• Explicit Opt-in Consent: Double opt-in checkboxes and time-stamped consent logs for newsletter and campaign dispatches. • Legitimate Interest Assessment (LIA): Platform analytics and security monitoring conducted under documented legitimate interest evaluations. • Contractual Necessity: Syncing profiles and delivering messages contracted by Customer.

For data transfers outside the European Economic Area (EEA) or UK, CapEngage executes Module 2 (Controller-to-Processor) of the European Commission Standard Contractual Clauses (SCCs) and UK International Data Transfer Addendum, ensuring appropriate data protection safeguards.

EU and UK residents or supervisory authorities may contact our Data Protection Officer at dpo@capengage.com or privacy@capengage.com.