PRIVACY
POLICY
This Privacy Policy explains how JAG Catering Equipment Ltd collects, uses, and protects your personal data when you use our website or purchase, hire, or enquire about our equipment. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.
Last updated: November 2026
1. Who We Are
JAG Catering Equipment Ltd ("JAG", "we", "us", or "our") is the data controller responsible for your personal data. Our registered office is Unit D1, West Point Industrial Estate, Penarth Rd, Llandough, Cardiff CF11 8JQ.
You can contact us about your data at info@jaghire.co.uk or by post at the address above.
2. Data We Collect
We collect the following categories of personal data:
- Contact data — name, email address, and telephone number, provided when you submit a project enquiry, request a hire quotation, or contact us.
- Account data — email address and password (stored securely as a hash) when you register for an account.
- Marketing data — your email address when you subscribe to our newsletter.
- Order data — details of equipment you add to a project, quotations, and any hire or sales agreements.
- Technical data — basic information about your visit, such as pages viewed, used to keep the site running and to understand how it is used.
3. How We Use Your Data
We use your personal data for the following purposes:
- To process project submissions, prepare quotations, and manage sales and hire agreements.
- To respond to your enquiries and provide customer support.
- To set up and administer your account on our website.
- To send you our newsletter where you have consented to receive it.
- To maintain records for accounting, tax, and legal compliance.
We do not use your data to make solely automated decisions or to profile you in a way that has a legal or similarly significant effect.
4. Lawful Basis for Processing
We rely on the following lawful bases under the UK GDPR:
- Contract — to process your project submissions and fulfil sales or hire agreements.
- Consent — for sending you our marketing newsletter and for any non-essential cookies.
- Legal obligation — to retain records for tax, accounting, and regulatory requirements.
- Legitimate interests — to respond to your enquiries and to keep our website secure and functioning.
Where we rely on consent, you may withdraw it at any time.
6. How Long We Keep Your Data
We keep your personal data only for as long as is necessary for the purpose it was collected:
- Newsletter subscriptions are kept until you unsubscribe.
- Order and account data is retained for the duration of the commercial relationship and for the period required by tax and accounting law (typically six years).
- Enquiry data is kept for a reasonable period to respond and then securely deleted.
After the retention period, data is deleted or anonymised.
7. Your Rights
Under the UK GDPR you have the right to:
- Be informed about how we use your data (this policy).
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased in certain circumstances.
- Restrict or object to our processing.
- Receive your data in a portable format.
- Withdraw consent at any time (where we rely on consent).
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, email info@jaghire.co.uk. We will respond within one month.
8. Marketing & Unsubscribing
We will only send you our newsletter if you have given clear consent by subscribing. You can withdraw consent and unsubscribe at any time by using the unsubscribe link in any newsletter email or by emailing info@jaghire.co.uk.
We do not use your data for marketing without your consent.
10. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure storage, access controls, and encryption in transit.
In the unlikely event of a data breach affecting your rights, we will notify you and the ICO where legally required to do so.
11. International Transfers
Your data is processed primarily within the United Kingdom. Where any processing takes place outside the UK, we ensure it is protected by appropriate safeguards such as standard contractual clauses approved by the UK government.
12. Children
Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The date of the latest revision is shown at the top of this page. We encourage you to review it periodically.
Questions about your data?
Get in touch with our team and we'll be happy to help.
