Privacy & Cookies
Last updated: 21 February 2026
1. Who we are
Coup Works Ltd, trading as Coup and Coup Works, is responsible for the personal information described in this policy. We refer to the company as “Coup”, “we”, “us” and “our”.
Company number: NI737281
Privacy enquiries: https://coupworks.com/contact
Website: https://coupworks.com/
This policy explains how we handle personal information when you visit our website, contact us, enquire about our services or programmes, work with us, or receive business communications from us.
It covers information we use for our own business purposes. Where we process personal information solely on a client’s instructions, our responsibilities are covered by our agreement with that client and the client’s relevant privacy information.
2. Information we collect
Contact and enquiry information. Your name, email address, telephone number, business, job title and the information you provide in forms, emails, calls or meetings. This may include your project requirements, budget, business revenue band, programme application and other information you choose to share.
Client and supplier information. Business contact details, correspondence, proposals, contracts, project records, invoicing details and payment records. Business information is personal information where it relates to an identifiable individual.
Website information. Technical information processed when you access the website, such as your IP address, browser and device information, requested pages, access times and error or security logs. Any additional information collected through cookies, analytics or similar technologies is covered by the cookie section below.
Communication preferences. Records of consent, objections, unsubscribe requests and preferences about hearing from us.
Please do not send sensitive personal information, or information about other people, unless it is relevant to the work and you are entitled to share it.
3. Where information comes from
We collect information directly from you and through the operation of our website and business systems.
We may also obtain professional contact information from your colleagues, introductions, company websites, Companies House, professional directories, public professional profiles and other publicly available business sources. This may include your name, role, employer and business contact details.
Where we obtain your information from another source, we explain its source and provide the required privacy information within the applicable time limits, normally when we first contact you.
4. How and why we use information
Responding to enquiries and discussing projects. We use contact details and correspondence to answer questions, assess requirements and prepare proposals. Our lawful basis is our legitimate interest in responding to business enquiries. Where you are personally entering a contract with us, we also rely on taking steps at your request before entering that contract.
Delivering services and managing relationships. We use relevant information to organise and deliver agreed work, communicate with clients and suppliers, and administer projects. We rely on our legitimate interests in providing services and managing business relationships, or on performance of a contract where you are personally a party to it.
Accounting and legal requirements. We use the information needed to maintain financial records and comply with tax, accounting and other legal obligations. Our lawful basis is compliance with those obligations.
Website operation and security. We process necessary technical information to deliver the website, diagnose problems, prevent misuse and protect our systems. Our lawful basis is our legitimate interest in operating a reliable and secure website. Consent requirements for cookies and similar technologies are addressed separately below.
Business development and marketing. We use relevant professional information to introduce our services and maintain business relationships. We rely on legitimate interests where the law permits this and your interests and rights do not override ours. Where consent is required, we obtain it before sending marketing.
Handling complaints and protecting legal rights. We use relevant records to investigate concerns, resolve disputes and establish, exercise or defend legal claims. We rely on applicable legal obligations and our legitimate interests in resolving disputes and protecting our business.
5. Marketing and your right to object
We may contact businesses and relevant professional contacts about Coup’s services and programmes. We consider the relevance of the contact, the source of the information, your reasonable expectations and the rules that apply to the communication method and recipient.
You have the right to object to the use of your personal information for direct marketing at any time. Contact us using the details above or use the unsubscribe option provided in a marketing message. We will stop using your information for that purpose.
We may retain the minimum information needed to record your objection and prevent further marketing. This does not stop necessary communications about an existing project or contract.
6. Who we share information with
We share relevant information with people and organisations who support the purposes described above. These include website hosting and technical support providers; email, file storage, enquiry-management and project-management providers; accounting and payment providers; and professional advisers.
Where necessary to deliver a project, we share relevant information with the designers, writers, developers and other specialist collaborators involved in that work.
Access is limited to what is needed for the relevant task. Where a provider processes personal information on our behalf, we require appropriate contractual protections. Some recipients, such as professional advisers or payment providers, may act as independent controllers for their own responsibilities.
We may also disclose information where required by law or reasonably necessary to establish, exercise or defend legal claims.
7. International transfers
Some of the services supporting our business may involve processing personal information outside the United Kingdom.
Where a restricted international transfer takes place, it must be covered by an appropriate legal mechanism. Depending on the destination and provider, this may be UK adequacy regulations or contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, together with any required assessment and additional safeguards.
You can contact us for further information about relevant transfers and how to obtain a copy of the applicable safeguards.
8. How long we keep information
We keep personal information only for as long as it is needed for the purpose for which it was collected, including relevant legal and record-keeping requirements.
Enquiry information is kept while we respond, discuss a possible engagement and complete any agreed follow-up. We then assess whether continued retention is justified by an ongoing business relationship or a specific legal or administrative requirement.
Client, supplier and project records are kept during the relationship and afterwards where needed for contractual obligations, accounting, insurance or legal claims. The applicable statutory record-keeping and claim periods determine the additional retention required.
Technical logs are retained according to their security or diagnostic purpose and the relevant provider’s configured retention period. Cookie and device-storage durations are given in the inventory below.
Marketing information is retained while it remains relevant and lawful to use. A minimal suppression record may be kept for as long as needed to respect an objection or withdrawal of consent.
We delete or anonymise information when it is no longer needed. Where it remains in a backup pending scheduled deletion, it is not used for new business purposes.
9. Your rights
Depending on the circumstances, you have rights to access your personal information, correct inaccurate information, request deletion, restrict its use, and receive or transfer information in a portable format.
You may object to processing based on legitimate interests on grounds relating to your particular situation. Your right to object to direct marketing is described separately above.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent.
Contact us using the details above to exercise your rights. We may need reasonable information to verify your identity. We normally respond within one month and will explain any permitted extension or applicable exemption.
Providing enquiry information is voluntary, but without the information needed to understand and answer your request, we may be unable to respond or provide the relevant service. Where particular information is needed for a contract or legal obligation, we will explain this at the relevant time.
10. Complaints
You can complain about our handling of your personal information using the contact details above. Please describe your concern and the information or interaction it relates to.
We will acknowledge your complaint within 30 days, investigate without undue delay, keep you appropriately informed and explain the outcome.
You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator. You do not have to complete our complaints process before contacting the ICO.
ICO complaints information: https://ico.org.uk/make-a-complaint/
11. Cookies and similar technologies
Cookies are small files stored on your device. Similar technologies include local storage, tracking pixels and scripts that store or access information on your device. A technology does not fall outside these rules simply because it does not use a traditional cookie.
Strictly necessary technologies support functions essential to provide a service you request, such as security or recording privacy choices. Technologies that meet this exception do not require consent.
Optional technologies may support analytics, additional functionality, embedded content or advertising. Our approach is to obtain consent before using optional technologies for these purposes. Rejecting them does not prevent you from accessing the website’s core content, although a particular optional feature may remain unavailable.
We do not treat continued browsing, scrolling or closing a banner as consent.
Technologies used on this website
We keep the use of tracking technologies on this website limited.
Necessary technologies
We may use strictly necessary cookies or browser storage to operate the website, maintain security and remember your privacy choices. These technologies do not require consent where they are essential to provide the website or a service you have requested.
Google Analytics
We use Google Analytics to understand how people find and use the website. This helps us understand matters such as which pages are visited, how visitors move through the website, approximate location, device and browser information, and general patterns of website use.
Google Analytics may set the following first-party cookies:
- _ga — used to distinguish users. Default expiry: 2 years.
- ga<container-id> — used to maintain session information. Default expiry: 2 years.
Google Analytics is treated as an optional analytics technology on this website and is only activated where the required consent has been given.
Google Analytics is provided by Google.
Google Search Console
We use Google Search Console to understand how this website appears and performs in Google Search. Search Console does not place tracking cookies on this website for this purpose and is therefore not included as an optional cookie technology.
Advertising and social media measurement
We do not currently use advertising or social media tracking pixels on this website.
If we introduce technologies such as the Meta Pixel or LinkedIn Insight Tag, we will update this policy and our cookie controls before activating them. Where consent is required, these technologies will not operate until the visitor has accepted the relevant cookies.
Managing your choices
You can accept or reject optional analytics technologies through our cookie controls. You can change your choice at any time using the Cookie Settings link on the website.
You can also use your browser settings to view, block or delete cookies. Blocking strictly necessary technologies may affect some website functions.
Managing your choices
You can accept or reject optional technologies through our cookie controls and reopen those controls using “Cookie settings” in the footer. Withdrawing consent stops future use of the relevant optional technologies.
You can also use your browser’s settings to view, block or delete cookies and other stored information. Blocking strictly necessary technologies may affect website functions. Deleting stored privacy choices may mean you are asked to choose again.
Third-party content and links
Where third-party content requires consent for its storage or tracking technologies, it remains blocked until you give that consent. Visiting an external website through a link is subject to that website’s own privacy and cookie information.
12. Changes to this policy
We update this policy when our activities, website technologies or legal obligations change. The date at the top shows the latest revision. Where a change requires new information or consent, we provide it or request it as appropriate.