Catch Design Management – Privacy Policy
Last updated: 13 November 2025
Introduction
This privacy notice explains how Catch Design Management (“Catch Designs”, “we”, “us”, or “our”) collects and processes your personal data when you use our website www.catchdesigns.co.uk, purchase our services, contact us, sign up to our newsletter, or take part in competitions or events.
By providing us with your personal data, you confirm that you are at least 13 years old. We do not knowingly collect personal data relating to children under 13.
Catch Design Management is the data controller and responsible for your personal data.
If you have any questions about this privacy notice, please contact our Data Protection Lead using the details below.
Contact Details
Legal entity: Catch Design Management
Email: [email protected]
Postal address: Office 19, Unit 2, Roseberry Ct, Stokesley Business Park, Middlesbrough, TS9 5QT
Telephone: 01642 712817.
If you are unhappy with how we use your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk. We would appreciate the chance to resolve your concerns before you contact the ICO.
Please keep your personal data up to date by emailing us at [email protected] if anything changes.
What Data We Collect
Personal data means information that can identify an individual. We may collect and process the following categories:
Identity Data
First name, last name, title, username, date of birth.
Contact Data
Email address, telephone number, billing and delivery addresses.
Financial Data
Bank account and payment card details (processed securely via third‑party providers).
Transaction Data
Details of payments made to or from you, and details of purchases.
Technical Data
IP address, login information, browser type/version, time zone settings, device information, operating system, and platform.
Profile Data
Usernames, passwords, preferences, feedback, survey responses, purchase history.
Usage Data
Information about how you interact with our website, services, and content.
Marketing & Communications Data
Preferences regarding how you receive marketing from us and third parties.
Aggregated Data
Statistical or demographic data that may be derived from your personal data but does not identify you.
Sensitive Data
We do not collect sensitive personal data such as: ethnicity, religious beliefs, health information, biometric data, sexual orientation, political opinions, or criminal offence data.
How We Collect Your Data
We collect data through:
Direct Interactions
When you: – order our products or services – create an account – subscribe to communications – request marketing or resources – enter competitions or surveys – give us feedback or contact us
Automated Technologies
We collect Technical and Usage Data via cookies, server logs, tracking technologies, and analytics tools. See our Cookie Policy at www.catchdesigns.co.uk/cookie-policy.
Third‑Party Sources
- Analytics providers (e.g., Google Analytics)
- Advertising platforms (e.g., Google Ads, Facebook Advertising)
- Payment and delivery service providers
- Public databases (e.g., Companies House)
- Networking interactions at events
How We Use Your Personal Data
We only use your data where legally allowed. The main lawful bases are: – Contract: to perform a contract with you – Legitimate Interests: for our business interests, provided these do not override your rights – Legal Obligation: where we must comply with the law – Consent: for electronic marketing or optional cookies
You may withdraw consent at any time by emailing [email protected].
Purpose and Lawful Basis Table
| Purpose | Data Type | Lawful Basis |
| Register you as a new customer | Identity, Contact | Contract |
| Process and deliver orders, manage payments | Identity, Contact, Financial, Transaction, Marketing | Contract; Legitimate interests (recovering debts) |
| Manage our relationship – updates, feedback requests | Identity, Contact, Profile, Marketing | Contract; Legal obligation; Legitimate interests (improving services) |
| Competitions, promotions, surveys | Identity, Contact, Profile, Usage, Marketing | Contract; Legitimate interests (customer insight) |
| Administer and protect our website and business | Identity, Contact, Technical | Legitimate interests (IT security, business operations); Legal obligation |
| Deliver personalised website experiences and ads | Identity, Contact, Technical, Profile, Usage | Legitimate interests (marketing, website improvement) |
| Data analytics to improve services | Technical, Usage | Legitimate interests (business improvement) |
| Suggestions/recommendations | Identity, Contact, Profile, Technical, Usage | Legitimate interests (marketing) |
Marketing Communications
You will receive marketing from us if you: – requested information from us – purchased services – entered competitions – have not opted out
You can opt out at any time via links in emails or by emailing us.
Cookies
We use cookies and similar technologies to enhance your browsing experience, analyse site usage, and support marketing activities. Cookies help us understand how visitors use our website so we can improve functionality, content, and services.
How We Use Cookies
We use cookies to: – track how visitors use our website – identify patterns in behaviour to help improve usability – enhance features such as account login and preferences – support analytics and advertising tools
Types of Cookies We Use
Session Cookies
Stored temporarily during your browsing session and deleted when you close your browser. These do not collect personal data.
Persistent Cookies
Remain on your device after the browser is closed and help us recognise you when you return. We use persistent cookies for tools such as Google Analytics.
Cookie Categories
Strictly Necessary Cookies
Required for core site functions such as navigating pages or processing orders. These cannot be disabled.
Performance Cookies
Help us monitor website performance, count visits, identify traffic sources, and analyse which pages are most popular.
Functionality Cookies
Remember your preferences and provide enhanced features, such as personalised content or saved settings.
Third-Party Cookies
Some cookies are set by third parties that provide services to us. You can learn more about how these providers use cookies here: – Facebook: https://www.facebook.com/about/privacy/update – YouTube: https://www.youtube.com/static?template=privacy_guidelines
Change of Purpose
We use your data only for the purposes collected unless reasonably compatible with the original reason. If we need to use it for a new purpose, we will notify you.
Sharing Your Personal Data
We may share your data with: – IT, hosting, and system administration providers – Professional advisers (lawyers, accountants, insurers) – HMRC and regulatory authorities – Payment providers and platforms – Third‑party marketing/advertising partners (with consent) – Business transferees (if we sell or merge part of the business)
All processors are required to protect your data and act only on our instructions.
International Transfers
Some providers are located outside the UK. When transferring your data internationally, we ensure appropriate safeguards, such as: – UK Adequacy Regulations – UK International Data Transfer Agreements (IDTA) – Standard Contractual Clauses (SCCs)
You may request details by emailing [email protected].
Data Security
We use technical and organisational measures to safeguard your personal data from loss, misuse, unauthorised access, alteration, or disclosure. Only authorised personnel may access your data.
We have procedures in place for any suspected data breaches and will notify you and regulators as required by law.
Data Retention
We retain personal data only as long as necessary for the purposes collected.
Typical retention periods: – Customer and transaction data: 6 years (legal/tax requirement) – Marketing data: until you opt out or after 3 years of inactivity – Account data: while your account remains active
We may anonymise data for statistical purposes and use it indefinitely.
Your Legal Rights
You have the right to: – request access to your personal data – request correction – request deletion – object to processing – request restriction – request transfer of your data (data portability) – withdraw consent at any time
You may exercise your rights by emailing [email protected].
We may need to verify your identity before fulfilling requests.
Third‑Party Links
Our website may contain links to third‑party sites. We are not responsible for their privacy practices. We recommend reading their privacy notices.
Automated Decision‑Making and Profiling
We do not make decisions based solely on automated processing that produce legal or significant effects. We may use limited profiling for marketing and analytics to improve user experience.
Updates to This Policy
We may update this privacy notice occasionally. Material changes will be communicated via our website or direct notification. This version was last updated on 13 November 2025.
