Skip to content
Legal

Privacy & Cookie Policy

How Chapeau Collective handles your personal information, and the rights you have over it. Last updated: 13 August 2026.

01

Who We Are

Chapeau Collective (“Chapeau”, “we”, “our” or “us”) is a trading name of Popcorn Consultants Ltd. We are committed to protecting and respecting your privacy. This policy explains what personal information we collect through this website, how we use it, and the rights you have over it.

We act as the data controller for the personal information described in this policy, under UK GDPR and the Data Protection Act 2018.

Chapeau Collective, trading name of Popcorn Consultants Ltd

1 Minerva Way, 2/2

Glasgow, G3 8AT

Registered in Scotland, company number SC885108

ICO registration reference: pending — the company has only recently registered; this reference will be added once issued

Email: vandan.mandloi@chapeaucollective.com

02

Information We Collect

Information you give us directly, through the contact form on this site:

  • Your name and business name
  • Your email address
  • Your website (optional)
  • The message you send us, plus which option and contact method you select

Information collected automatically. Our hosting provider processes standard server logs — including IP address, browser type and requested pages — to operate, secure and troubleshoot the site. We do not run analytics or advertising technology on this site, so nothing beyond these baseline hosting logs is collected as you browse. The one exception is the contact form, which uses Google reCAPTCHA to prevent spam — see section 08 for what that involves.

Information collected if you become a client. If you go on to work with us, we’ll collect further information needed to deliver the agreed services — this is gathered directly from you as part of onboarding and set out in the relevant engagement, not through this website.

03

How and Why We Use It

Respond to your enquiryLegitimate interests / pre-contractual steps
Deliver services you’ve engaged us forContract performance
Protect the website from abuse and spamLegitimate interests
Meet legal, accounting or regulatory obligationsLegal obligation

We do not sell your personal information, and we do not use it to make automated decisions that produce legal or similarly significant effects for you.

04

Who We Share It With

We use a small number of trusted suppliers to run this site and respond to you. We don’t share your information with anyone for their own marketing purposes.

  • Resend — delivers contact-form enquiries to our inbox by email
  • Vercel — hosts this website and processes the server logs described above
  • Google (reCAPTCHA) — checks that contact-form submissions come from a person, not a bot

We may also disclose information where required by law, or to establish, exercise or defend legal claims.

05

International Transfers

Some of our suppliers, including Resend, Vercel and Google, may process data outside the UK, primarily in the United States. Where this happens, we rely on UK Government adequacy regulations or an Information Commissioner–approved International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses), which require appropriate safeguards to protect your information. Details are available on request.

06

How Long We Keep It

  • Enquiries that don’t become client work: up to 12 months from your last contact with us, then deleted
  • Client records: for the duration of our relationship, plus 6 years afterwards to meet legal and accounting obligations
  • Server logs: retained only for the short period our hosting provider (Vercel) uses by default to operate and secure the site

Information we no longer need is deleted or anonymised.

07

Security

We take appropriate administrative, physical and technical measures to protect your information against unauthorised access, loss, misuse or alteration. All submissions through this website use encrypted HTTPS. While no method of transmission over the internet is completely secure, we take reasonable steps to protect information entrusted to us, and to notify you and the Information Commissioner’s Office where we are required to do so.

08

Cookies and Tracking

We don’t run analytics, advertising technology or marketing trackers on this site. The one exception is the contact form, which is protected by Google reCAPTCHA to keep spam and automated abuse out of our inbox. To do this, reCAPTCHA sets cookies and reads device and browser signals when you use the form.

Because of this, we show a short cookie notice when you first visit the site. If that changes in future — for example, if we add analytics — we will update this policy and, where the law requires it, ask for your consent before anything further is set.

09

Your Rights

Under UK GDPR, you have the following rights over your personal information, which you can exercise free of charge and which we’ll respond to within one month:

  • Access — request a copy of the information we hold about you
  • Rectification — ask us to correct inaccurate or incomplete data
  • Erasure — ask us to delete your information in certain circumstances
  • Restriction — ask us to limit how we use your information
  • Portability — receive your data in a portable format, or ask us to transfer it to another organisation
  • Objection — object to processing based on legitimate interests, including direct marketing
  • Withdrawing consent — withdraw consent at any time, as easily as you gave it

10

Contact and Complaints

To exercise any of these rights, or if you have a question about this policy, contact us:

Chapeau Collective, trading name of Popcorn Consultants Ltd

1 Minerva Way, 2/2

Glasgow, G3 8AT

Registered in Scotland, company number SC885108

ICO registration reference: pending — the company has only recently registered; this reference will be added once issued

Email: vandan.mandloi@chapeaucollective.com

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office:

  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
  • Helpline: 0303 123 1113
  • Web: ico.org.uk/make-a-complaint

Questions about this policy?

vandan.mandloi@chapeaucollective.com