1. Introduction
CATCHCO LIMITED ("CatchCo", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store and protect personal data when you interact with our website, our trade services, our training and consultancy offerings, or our team — and your rights under data protection law.
CATCHCO LIMITED is a private limited company registered in England and Wales with company number 16635385, with its registered office at 220 Legrams Lane, Bradford, BD7 2EH, United Kingdom.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, CATCHCO LIMITED is the data controller of the personal data described in this policy.
2. What personal data we collect
We collect personal data in the following contexts:
- Website visitors — IP address, browser type, device, pages visited, time spent (via standard server logs and limited analytics).
- Enquiry submissions — name, business name, email address, phone number where provided, country, and the content of your message, when you contact us via email or any future web form.
- Customers and trading partners — business contact details, company information, trade references, payment and banking details, import/export documentation, compliance certifications.
- Suppliers — company contact details, banking details, compliance and audit documentation, beneficial ownership information where required for due diligence.
- Training delegates — name, employer, job title, contact details, course attendance records, and certificate issuance information.
- Job applicants — name, contact details, CV, work history and any other information you choose to provide as part of an application.
3. Lawful basis for processing
Under UK GDPR, we rely on the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiries | Legitimate interests, or steps prior to entering a contract |
| Performing trade contracts | Contract |
| Delivering training and issuing certificates | Contract |
| Supplier due diligence and compliance | Legal obligation, legitimate interests |
| Service updates relating to your contract | Legitimate interests (with opt-out) |
| Direct marketing to new prospects | Consent |
| Recruitment | Legitimate interests, or steps prior to a contract |
4. How we use your personal data
We use your personal data to:
- Respond to enquiries about our sourcing, distribution or training services
- Manage and fulfil trade contracts, including arranging shipping, customs, payment and compliance documentation
- Onboard and audit suppliers in line with food safety, Halal, BRC, ONSSA and other regulatory standards
- Deliver training programmes and issue certificates of completion
- Comply with our legal and regulatory obligations under UK and international law
- Improve our website and the services we offer
- Recruit and manage staff
We do not sell personal data to third parties. Ever.
5. Who we share your data with
We may share your personal data with:
- Logistics, shipping and customs partners (to fulfil trade contracts)
- Banks and payment providers (to process payments)
- Compliance auditors and certification bodies (Halal authorities, BRC, HACCP, ONSSA, ISO 22000 etc.)
- HMRC, UK government departments, and overseas regulators where legally required
- Our IT, hosting and professional service providers, under written contracts that bind them to data protection obligations equivalent to UK GDPR
- Other Mumtaz Group companies where strictly necessary to support trade or operations
6. International transfers
Because our trade operates across four continents, we may transfer personal data outside the United Kingdom — including to Morocco, the MENA region, Sub-Saharan Africa, South Asia, East Asia and North America. Where we do so, we put in place appropriate safeguards (the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or another lawful transfer mechanism) and assess transfer risks on a country-by-country basis.
7. How long we keep your data
We retain personal data only as long as necessary for the purposes outlined above, or to comply with our legal obligations — typically six to seven years for trade and financial records under UK tax and company law. Enquiry and marketing data is held for up to two years from your last interaction, unless you ask us to delete it sooner.
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (subject to our legal retention obligations)
- Restrict processing in certain circumstances
- Object to processing based on legitimate interests, including direct marketing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time, where consent is the lawful basis
- Complain to the Information Commissioner's Office (ico.org.uk) — though we'd rather you came to us first so we can put things right
To exercise any of these rights, email abbas@catch-co.com. We'll respond within one calendar month.
9. Security
We use industry-standard measures to protect personal data, including HTTPS encryption on our website, access controls on internal systems, and contractual safeguards with our service providers. While no system is ever fully secure, we work to ensure your data is protected against unauthorised access, disclosure, alteration, or destruction.
10. Cookies
Our website uses a small number of strictly necessary and analytical cookies. See our Cookie Policy for full details and your options.
11. Children
Our services are aimed at businesses and adult professionals. We do not knowingly collect personal data from anyone under the age of 16.
12. Changes to this policy
We may update this policy from time to time to reflect changes to our services or the law. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on our homepage where practical.
13. Contact us
For any privacy questions, requests, or complaints:
- Email: abbas@catch-co.com
- Post: CATCHCO LIMITED, 220 Legrams Lane, Bradford, BD7 2EH, United Kingdom