Data Protection at CaterCTRL

CaterCTRL is built for professional kitchens, where operational records can contain important business and personal information.

We believe data protection should be part of how the product is designed and operated, not simply something described in a privacy notice. Our Privacy Policy explains how personal information is handled on this website.

CaterCTRL Ltd aims to process personal information lawfully, fairly and transparently and apply appropriate technical and organisational safeguards.

Our approach is guided by applicable UK data protection law, including the UK GDPR and Data Protection Act 2018 as amended.

We aim to collect and process only personal information reasonably required for a particular purpose.

The public demo-request database does not store visitor IP addresses or browser user-agent information.

IP addresses may be processed temporarily for website security and rate limiting without being added to the enquiry record.

On the public website current measures include:

No internet-connected service can guarantee absolute security.

The CaterCTRL public website does not currently use advertising pixels, behavioural tracking or visitor analytics systems such as Google Analytics, Meta Pixel, Microsoft Clarity or Hotjar.

Website fonts and core imagery are served locally.

Necessary infrastructure and security providers may still process limited technical information required to deliver and protect the website.

When a customer uses CaterCTRL to store information about its staff, operations or other individuals, the respective data-protection roles of CaterCTRL and the customer depend on the circumstances and purpose of the processing.

Where CaterCTRL acts as a processor on behalf of a customer, processing will be governed by appropriate contractual data-processing terms.

Those arrangements are separate from this public website page and will form part of CaterCTRL’s customer contracting framework.

CaterCTRL relies on specialist technology providers to deliver parts of its services.

Where providers process personal information on our behalf, we aim to select appropriate providers and put suitable contractual and security arrangements in place as required.

Customer-facing data-processing documentation will identify relevant sub-processors where appropriate.

Some technology providers may process information outside the United Kingdom.

Where UK data protection law requires safeguards for an international transfer, CaterCTRL will use an appropriate transfer mechanism or other lawful basis.

Public website demo enquiries and Founding Kitchen applications are normally retained for up to 12 months after the last meaningful contact, unless the information becomes part of a customer relationship or a longer period is required for legal or legitimate business reasons.

Customer-platform retention and deletion arrangements will be governed by applicable customer agreements and data-processing terms.

Individuals may have rights of access, correction, deletion, restriction, objection and, where applicable, data portability.

Requests can be sent to info@caterctrl.co.uk.

If CaterCTRL becomes aware of a personal-data incident, we will assess it and take appropriate action in accordance with applicable law and contractual obligations.

Where required, this may include notification to affected customers, individuals or the Information Commissioner’s Office.

CaterCTRL will review its security, privacy practices, suppliers and data-processing arrangements as the product develops and as legal or regulatory obligations change.