1. Our Commitment to Data Protection
At NATHE LIMITED, we prioritize the privacy and security of your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy outlines how we collect, use, and safeguard your information.
2. Types of Data Collected
We process the following categories of data to deliver our services effectively:
- Contact Information: Name, email address, phone number, and business/organization details.
- Event Details: Event dates, venue location, guest numbers, dietary preferences, and special requests.
- Financial Data: Payment details (processed securely via encrypted third-party gateways like Stripe or PayPal).
- Communications: Emails, call recordings (where applicable), and feedback.
3. How We Use Your Data
Your data is used for the following lawful purposes:
- Contract Fulfillment: To plan, coordinate, and execute catering/event services as agreed.
- Billing & Accounting: To generate invoices, process payments, and maintain financial records (retained for 6 years as per UK tax laws).
- Marketing: With your explicit consent, we may send promotional offers or newsletters. You may opt out anytime via the “unsubscribe” link or by emailing us.
- Legal Compliance: To meet regulatory obligations (e.g., health and safety audits, tax inspections).
4. Data Sharing & Third Parties
We do not sell or rent your data. Limited sharing occurs only when necessary with:
- Suppliers & Subcontractors: Caterers, venues, or staffing agencies involved in your event (strictly under confidentiality agreements).
- Legal Authorities: If required by law (e.g., HMRC, courts, or fraud prevention agencies).
5. Data Retention & Security
- Retention Period: Client data is stored for 6 years post-event for legal/financial compliance. Marketing data is retained until consent is withdrawn.
- Security Measures: We employ encryption, secure servers, and access controls to prevent unauthorized access, loss, or breaches.
6. Your Rights Under UK GDPR
You have the right to:
- Access: Request a copy of your personal data held by us (free of charge, within 30 days).
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of data (subject to legal exceptions).
- Restrict Processing: Limit how we use your data (e.g., if you contest its accuracy).
- Data Portability: Receive your data in a structured, machine-readable format.
- Withdraw Consent: Opt out of marketing communications at any time.
To exercise these rights, contact us at info@nathelimited.co.uk. If unsatisfied, you may lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
Contact Information:
NATHE LIMITED
125c Croxley View, Watford, England, WD18 6PE
Email: info@nathelimited.co.uk