Privacy Policy

This Privacy Policy describes how Onwards Capita ("we", "us", or "our") collects, uses, and protects personal data when you visit our website or interact with us in connection with our services. It applies where we act as the data controller determining the purposes and means of processing.

Onwards Capita is a company incorporated in Singapore. Our registered address and contact details are available on request via our contact page.

Personal data we collect and why

Enquiries and contact requests

When you submit an enquiry or contact us through this website, we collect the information you provide, including your name, work email address, company or firm name, country, and any message or context you include.

• We use this information to respond to your request and follow up where appropriate.
• Legal basis: performance of pre-contractual steps at your request, or our legitimate interest in managing commercial relationships and responding to inbound interest.

CFO services and partner management

In managing relationships with SME clients, accounting firm partners, and strategic contacts, we process contact and identity information about relevant individuals, including names, email addresses, job titles, and correspondence.

• Legal basis: performance of the contract between Onwards Capita and the relevant organisation, and our legitimate interest in administering and developing those relationships.
• We may also retain records of interactions where required to satisfy accounting, tax, or regulatory obligations.

Marketing communications

Where you have asked to receive updates or other communications from us, we process your name and email address for that purpose.

• We will only send marketing communications where you have requested them or where we have a legitimate interest in doing so. You can unsubscribe at any time.
• Legal basis: your consent, or our legitimate interest in communicating with people who have expressed interest in our services.

Website and analytics

When you visit our website we may collect information about your visit through cookies or similar technologies, including IP address, browser type, pages viewed, referral source, and session duration.

• This data is used to understand how the site is used and improve content and navigation. It is not used to identify you individually without your consent.
• Legal basis: our legitimate interest in operating and improving a functional website.
• You can disable or restrict cookies through your browser settings at any time.

Sharing and international transfers

We do not sell your personal data. We may share it with the following categories of recipient where necessary:

• Service providers — third-party providers who help us operate the website, deliver emails, or support business operations, acting as data processors under appropriate contractual protections.
• Professional advisers — legal, accounting, and audit professionals where required.
• Regulatory and public authorities — where we are legally required to disclose information.
• Business transfers — in the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction under equivalent protections.

Where personal data is transferred outside the country in which it was collected, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant supervisory authority.

Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Access to personal data is limited to individuals with a business need and subject to confidentiality obligations.

Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law. In practice:

• Enquiry and contact data is retained for as long as the relationship or potential relationship is active, and for a reasonable period afterwards.
• Client and partner data is retained for the duration of the engagement and for a period thereafter as required by applicable obligations — typically five to seven years.
• Marketing contact data is removed promptly on unsubscribe or on request.

Your rights

Depending on your location and applicable law, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. To exercise any of these rights, contact us via our contact page. We will respond within the timeframe required by law.

If you are located in the EEA, UK, or another jurisdiction with a data protection supervisory authority, you have the right to lodge a complaint with that authority if you believe your personal data has been processed unlawfully.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page reflects the most recent revision.