Privacy Policy
Last updated: 12 January 2026
This Privacy Policy explains how Kapibara Social (“we”, “us”, “our”) collects, uses, and protects personal data when you visit our website, contact us, work with us as a client, apply to work as a freelancer, or interact with us through communication channels.
We are committed to protecting your privacy and handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
For data protection inquiries, contact:
Email: privacy@kapibarasocial.com
Address: Kapibara Social, 124 City Road, London, EC1V 2NX.
Kapibara Social is operated by Marcel Obst, a UK-based sole trader providing video editing and post-production services.
2. Personal data we collect
We process personal data only where we have a lawful basis to do so under the UK GDPR.
The primary bases are:
- Performance of a contract – for providing services to clients and managing freelancer relationships.
- Legal obligation – for compliance with tax, accounting, or recordkeeping requirements.
- Legitimate interests – for responding to enquiries, maintaining business relationships, and improving our operations, provided those interests are not overridden by individuals’ rights.
- Consent – where required (for example, when retaining contact details for marketing updates or testimonials).
From freelancers & applicants:
Personal and professional information provided as part of an application or working relationship, including contact details, location, professional background, skills, experience, availability, rates, portfolio or sample work, and any information required to assess suitability, manage engagements, meet contractual obligations, and comply with legal or tax requirements.
We also process communications and correspondence exchanged in the course of applications, onboarding, and ongoing collaboration, using communication tools and platforms appropriate to the work.
From individuals appearing in client-provided video/audio:
Personal data that may be contained within media files submitted by clients for editing or review. We process such data solely on the client’s instructions and for the purposes of delivering the requested services. Clients are responsible for ensuring that any personal data included in submitted content is lawfully obtained and that any required consents or legal bases are in place before providing the content to us.
3. How we use your data
We use personal data to respond to enquiries, provide and manage our services, deliver and review client work, manage freelancer relationships, process payments, comply with legal and tax obligations, and maintain the security of our systems.
Each use of personal data is based on one or more lawful grounds described in Section 2 — mainly contract performance, legal obligations, or our legitimate interests in running and improving our business. Where consent applies (for example, marketing updates), you may withdraw it at any time.
4. Data retention
We keep personal data only as long as needed to provide our services, meet legal or tax obligations, and resolve disputes.
Project files and related communications are normally retained for up to 12 months after completion unless required longer by law. When no longer needed, data is securely deleted or anonymised.
We use trusted third-party providers to support our operations, including hosting, communications, project management, file storage, payments, and accounting. These providers act either as data processors (processing information on our behalf) or, as independent data controllers under their own terms and privacy policies.
Examples include providers such as secure cloud platforms, communication tools, and payment processors. We select only reputable providers that demonstrate GDPR compliance and implement appropriate security measures.
Where personal data is transferred outside the UK or EEA, transfers are protected using standard contractual clauses, UK adequacy decisions, or other lawful safeguards recognised under data protection law.
We do not store or process full payment card or bank details; these are handled directly and securely by our payment partners.
6. Cookies & analytics
Our website does not use tracking cookies or collect personal information. We use privacy-friendly analytics that gather only aggregated, anonymised data such as page views and device type, to understand website usage and improve our content.
7. Special category data (Video Content)
When clients provide video or audio content containing personal data, we process it solely to deliver the requested services and only on the client’s instructions. Clients are responsible for ensuring any required consents or lawful bases are in place before sharing such content. We treat all media as confidential and restrict access to authorised team members involved in the project.
8. Data security
We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or misuse.
Access is limited to authorised personnel and service providers who need it to perform their work. While no system is completely secure, we regularly review our practices to ensure a reasonable level of protection in line with data protection law.
9. Data breaches
If a personal data breach occurs that may risk individuals’ rights or freedoms, we will act promptly in line with data protection law.
This may include notifying the ICO and, where required, the affected individuals, as well as documenting the breach and our response.
10. Your rights
Under UK data protection law, you have the right to access, correct, delete, or restrict your personal data, to object to certain processing, and to request data portability. Where processing is based on consent, you may withdraw it at any time.
To exercise these rights, contact us using the details in Section 1.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
11. Children’s data
Our services are not directed to children under 18, and we do not knowingly collect their data. If children appear in client-provided content, it is the client’s responsibility to ensure parental consent and lawful processing before submission.
12. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted here with an updated ‘last updated’ date, and significant updates will be communicated to you directly where appropriate.
Questions? Contact us using the details in section 1.