Privacy Policy

CaterCTRL is operated by CaterCTRL Ltd, a company registered in England and Wales under company number 14293652.

Email: info@caterctrl.co.uk

For the purposes of UK data protection law, CaterCTRL Ltd is the controller of the personal information described in this Privacy Policy where we determine how and why that information is used.

This policy explains how we collect, use, store and protect personal information when you visit the CaterCTRL website, request a demo, apply to become a Founding Kitchen or otherwise contact us through the website.

This policy relates to the public CaterCTRL website. Additional data protection terms may apply to organisations and users using the CaterCTRL software platform.

If you request a demo or apply to become a Founding Kitchen, we may collect:

Please avoid including unnecessary sensitive or special-category personal information in the message field.

Our website infrastructure may process limited technical information needed to deliver and protect the website. This may include:

The CaterCTRL demo-request database does not store your IP address or browser user-agent. An IP address may be processed temporarily in memory for security and rate-limiting purposes.

Our infrastructure providers may maintain their own technical or security logs. The content and retention of infrastructure-level logs are controlled by the relevant provider.

We use personal information to:

Submitting a demo request does not currently subscribe you to a marketing mailing list.

We do not currently use demo enquiries to create advertising audiences, perform marketing profiling or send automated marketing communications.

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we rely on:

We do not rely on consent simply because you submit a demo enquiry.

We do not sell your personal information.

We may use carefully selected service providers to operate the website and respond to enquiries. These may include providers of:

At present, website infrastructure is provided through the Emergent platform and related infrastructure services. Cloudflare infrastructure is used for website delivery and security.

Demo-request notifications are processed through an Emergent-managed email relay using Resend as the underlying email-delivery service. Information submitted in your enquiry may therefore be processed through these services so that CaterCTRL can receive and respond to your request.

We may also disclose information where required by law, regulation, court order or a competent authority, or where reasonably necessary to establish, exercise or defend legal rights.

Some of the technology providers involved in operating our website or delivering email may process information in countries outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps required by applicable UK data protection law to ensure that the information remains protected. Depending on the destination and provider, this may include applicable adequacy regulations or approved contractual safeguards.

You may contact us at info@caterctrl.co.uk if you would like further information about safeguards relevant to your personal information.

We do not keep personal information for longer than we reasonably need it.

Demo requests, Founding Kitchen applications and related prospective-customer correspondence will normally be retained for up to 12 months after our last meaningful contact with you.

If your organisation becomes a CaterCTRL customer, relevant information may instead become part of our customer and contractual records and may be retained for longer in accordance with our legal, accounting, contractual and operational obligations.

We may also retain limited information for longer where necessary to comply with law, resolve a dispute, prevent fraud or establish, exercise or defend legal claims.

Technical and security information may be retained for different periods by our infrastructure providers.

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

The public enquiry form uses measures including server-side validation, rate limiting and anti-bot protection. Enquiry information is not exposed through a public read endpoint.

No method of transmitting or storing information can be guaranteed to be completely secure.

The website does not currently use advertising or behavioural-tracking cookies and does not currently use Google Analytics, Google Tag Manager, Meta Pixel, Microsoft Clarity or similar visitor analytics tools.

Security infrastructure may set strictly necessary cookies used to protect and deliver the website.

Please see our Cookie Policy for more information.

Depending on the circumstances and lawful basis involved, UK data protection law may give you rights including the right to:

These rights are not absolute and may not apply in every situation.

Where we process your personal information on the basis of our legitimate interests, you have the right to object to that processing in certain circumstances.

To exercise a data protection right, contact info@caterctrl.co.uk.

We may need to confirm your identity before completing a request.

If you have concerns about how CaterCTRL handles your personal information, please contact us first at info@caterctrl.co.uk so that we can investigate.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Our website may contain links to third-party websites. CaterCTRL is not responsible for the privacy practices of websites operated by other organisations.

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or how we process personal information.

The latest version will be published on this page and the “Last updated” date changed where appropriate.