Privacy Policy
Policies

Privacy Policy

How we handle your personal data, protect your account, and maintain a safe environment for everyone.

Home/Privacy Policy

Data Never Sold

We do not share your personal information with third parties for marketing.

Zero Tolerance

Abusive behaviour towards staff results in immediate refusal of service.

Last updated

July 2026

Secure

Your Data

Never sold to third parties

Private

Passwords

Your responsibility to protect

Zero

Tolerance

For abusive behaviour

Recorded

Calls May Be

For training & reference

At CaterChoice, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains what personal data we collect, why we collect it, the lawful basis we rely on, who we share it with, how long we keep it, and the rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By registering an account or placing an order, you acknowledge and agree to this policy.

Section 1

Data We Collect

  • 1Contact and account details: name, email address, phone number, delivery and billing addresses, and account password (stored encrypted, never in plain text).
  • 2Order information: your order history, product preferences, and communications with our customer service team.
  • 3Payment information: card payments are processed directly by our payment provider, Dojo. We do not store your full card number on our systems.
  • 4Technical data: IP address, browser type, device information, and site usage data, collected via cookies and similar technologies — see our Cookie Policy for details.

Section 2

Lawful Basis for Processing

  • 1Contract: to create and manage your account, process orders, and deliver products or services you have requested (UK GDPR Art. 6(1)(b)).
  • 2Legal obligation: to keep financial and tax records as required by HMRC and other regulators (Art. 6(1)(c)).
  • 3Legitimate interests: to keep our website secure, prevent fraud, and improve our services, balanced against your rights and interests (Art. 6(1)(f)).
  • 4Consent: for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting past processing (Art. 6(1)(a)).

Section 3

Data Sharing & International Transfers

  • 1We share personal data only where necessary, with: Dojo (payment processing), Google Analytics (website analytics), and Cloudflare (site security and bot protection, including Turnstile).
  • 2We do not sell or share your personal information with third parties for unsolicited marketing or advertising purposes.
  • 3Some of our service providers may process data outside the UK or EEA (for example, in the United States). Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, and only work with providers that maintain an adequate level of data protection.

Section 4

How Long We Keep Your Data

  • 1Account data is retained for as long as your account is active, and is deleted within 12 months of account closure or prolonged inactivity, unless a longer period is required by law.
  • 2Order and transaction records are retained for 6 years to meet UK tax and accounting obligations.
  • 3Records of marketing consent are retained until you withdraw consent, plus a reasonable period afterwards to demonstrate compliance.
  • 4Call recordings kept for training or reference purposes are retained for 90 days unless needed for an ongoing investigation or dispute.
  • 5We do not keep personal data for longer than is necessary for the purpose it was collected.

Section 5

Your Rights Under UK GDPR

  • 1Right of access — request a copy of the personal data we hold about you.
  • 2Right to rectification — ask us to correct inaccurate or incomplete data.
  • 3Right to erasure — ask us to delete your data where there is no legal reason for us to keep it ('right to be forgotten').
  • 4Right to restrict or object to processing — including objecting to direct marketing at any time.
  • 5Right to data portability — receive your data in a portable format, or have it transferred to another provider.
  • 6Right to withdraw consent — where processing is based on consent, at any time, free of charge.
  • 7To exercise any of these rights, contact us using the details below. If you are unhappy with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Section 6

Account Security

  • 1Upon registration on our online platform, you are required to create a password.
  • 2It is your responsibility to keep this password confidential.
  • 3Any orders placed or information provided using your email address and password will be considered authorised.
  • 4If you become aware of any unauthorised use of your email address or password, or any breach of security, you must notify us immediately.

Section 7

Cookies

  • 1We use essential cookies to operate the website, and non-essential cookies (such as analytics) to understand how the site is used.
  • 2Under UK PECR regulations, non-essential cookies are only set once you give consent via the cookie banner shown on your first visit.
  • 3You can change your choice at any time using the "Cookie Preferences" link in the footer, or via your browser settings.
  • 4See our Cookie Policy for the full list of cookies we use and their purpose.

Section 8

Conduct & Behaviour

  • 1The company has a zero-tolerance policy towards any abusive behaviour towards its staff.
  • 2The company reserves the right to refuse service to individuals who exhibit abusive behaviour.
  • 3Telephone calls may be recorded for training or reference purposes.
  • 4The company reserves the right to refuse entry to its premises at any time.

Section 9

Premises & Visitor Policy

  • 1All visitors must follow company directives for entry and parking, with full acknowledgement of associated risks.
  • 2Children are welcome but must be accompanied by an adult and kept under strict control.
  • 3Smoking is strictly prohibited on company premises.
  • 4Only guide dogs are permitted on company premises.
  • 5For security reasons, the company may ask for identification before releasing an order.

Section 10

Data Protection Contact & ICO Registration

  • 1For any questions about this Privacy Policy or to exercise your data protection rights, contact us at info@cater-choice.com.
  • 2Data controller: Cater Choice Limited, Company No. 03665746, registered in England, Bradford.
  • 3ICO registration: pending. This section will be updated with our registration number once confirmed with the Information Commissioner's Office.
  • 4You also have the right to lodge a complaint with the ICO at any time — ico.org.uk or 0303 123 1113.

Related policies

Explore our other policies

Read our full range of policies to understand how we operate and what you're entitled to.