Next Day Delivery on Orders Placed Before 4pm

Privacy Policy

Last updated: 19 July 2026

This policy explains what personal data we collect when you use cathive.co.uk, why we collect it, who we share it with and the rights you have over it. We keep it in plain English deliberately.

1. Who is responsible for your data

The data controller is PLEXPAD LTD T/A CatHive (PLEXPAD LTD, registered in England and Wales, company number 14156842; registered office 124 City Road, London, EC1V 2NX). Contact: info@cathive.co.uk, 0207 870 3694.

2. What we collect and why

What When Why we use it Legal basis
Name, billing and delivery address, email address, phone number, order details When you place an order To process, deliver and provide support for your order, including order and delivery emails; to keep the records we are legally required to keep Performance of a contract; legal obligation (tax and accounting records)
Account email address and the details you save to your account When you create an account To operate your account: saved addresses, order history, faster checkout Performance of a contract
Vehicle details you enter (make, model, engine, registration number) When you use the part finder or ask us to check fitment To identify the correct parts for your vehicle Legitimate interest (helping you find the right part); steps prior to a contract
Payment card details At checkout Taken and processed directly by our payment provider, Stripe — we never see or store your full card number Performance of a contract
Technical data (IP address, browser) When you browse or submit forms Security, fraud prevention and keeping the site working (server logs, bot protection on forms) Legitimate interest (security)
Correspondence When you contact us To answer you and keep a record of what was agreed Legitimate interest (customer service)

We do not send marketing emails — the only emails you will receive from us relate to your orders, your account or your enquiries. If we ever introduce a newsletter it will be strictly opt-in. We do not sell personal data, and we do not use automated decision-making that produces legal effects about you.

3. Who we share data with

We share personal data only with the service providers needed to run the shop, and only what each needs:

  • Payment processing — Stripe. Your payment is handled by Stripe Payments Europe Ltd/Stripe Payments UK Ltd. Stripe acts as an independent controller of payment data for purposes such as fraud prevention; see the Stripe Privacy Policy.
  • Fulfilment and delivery. Your name, delivery address and contact phone number are shared with the distribution and carrier partners who pick, dispatch and deliver your order.
  • Email delivery — Google. Our business email and outbound order emails are handled through Google Workspace (Google Ireland Ltd / Google LLC).
  • Bot protection — Google reCAPTCHA. Our account-registration and contact forms are protected by reCAPTCHA, which sends technical data about your browser and interaction to Google to distinguish people from bots. The Google Privacy Policy and Terms of Service apply.
  • Site analytics — Google Analytics. Only if you consent on our cookie notice, usage statistics (pages viewed, searches, approximate location from IP, device type) are processed by Google Analytics (Google Ireland Ltd / Google LLC). Data is retained for 14 months and is not used to build advertising profiles.
  • Website hosting. The site and its database are hosted on infrastructure operated for us by our hosting provider.

We may also disclose data where the law requires it (for example to HMRC, or in response to a lawful request by authorities), or to professional advisers under confidentiality.

4. International transfers

Some of the providers above (Stripe, Google) process data in the United States and elsewhere. Where personal data leaves the UK, it is protected by recognised safeguards: the UK’s adequacy arrangements — including the UK Extension to the EU–US Data Privacy Framework — or the UK International Data Transfer Agreement/Addendum, as applicable to the provider.

5. Cookies

We use cookies sparingly, and only for things the site genuinely needs to function:

  • Shop cookies — remember your basket and session while you shop, and keep you logged in to your account if you have one. Set only when you interact with the shop (adding to basket, logging in).
  • Security cookies — set by Stripe (fraud prevention on payments) and by Google reCAPTCHA (bot protection, on the registration and contact pages).

The cookies above are strictly necessary for services you request, so they do not need your consent.

Optional cookies (only with your consent). Our cookie notice offers two optional purposes, which you can accept or refuse separately using Manage. If you choose Essential only, or make no choice, nothing is loaded from Google and no optional cookies are set. Your choice is remembered in your browser (not in a cookie) and you can change it at any time using the Cookie settings link in the footer.

  • Analytics — Google Analytics 4 sets cookies (_ga and _ga_…, kept for up to 2 years) so we can see how the site is used: which pages are visited, how visitors arrive, and which parts and vehicles are searched for. We use it to improve the site and the parts finder. IP addresses are not stored by Google Analytics, we do not enable Google Signals or cross-device linking, and reports are kept for 14 months. No advertising profile is built from it.
  • Advertising measurement — we advertise on Google. With this consent we load Google’s advertising tag, which sets Google cookies (for example _gcl_aw) so that Google can tell us whether one of our adverts led to an order. We use this only to measure whether our advertising pays for itself; we do not use it for personalised advertising.

Google’s handling of this data is described in its privacy policy; for both purposes the data controller is Google Ireland Limited jointly with us.

You can also delete or block cookies in your browser settings, though the basket and checkout will not work without the shop cookies.

6. How long we keep data

  • Order records: at least six full financial years after the year of the order, as required for tax and accounting.
  • Account data: for as long as your account exists. You can ask us to delete your account at any time; we will keep only what the retention rule above obliges us to keep.
  • Enquiries: for as long as needed to deal with the enquiry and a reasonable period afterwards.

7. How we protect data

The site is served over HTTPS; payment details go directly to Stripe and never touch our servers; access to order data is limited to those who need it; and our systems are kept updated and backed up. No system is perfectly secure, but we take the protection of your data seriously and will inform you and the ICO of any breach where the law requires it.

8. Your rights

You have the right to ask us for:

  • Access — a copy of the personal data we hold about you;
  • Rectification — correction of inaccurate data;
  • Erasure — deletion of your data, where no legal obligation requires us to keep it;
  • Restriction or objection — limits on how we use it, including objecting to any processing based on legitimate interests;
  • Portability — your data in a machine-readable format.

To exercise any of these, email info@cathive.co.uk. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113 — though we’d welcome the chance to resolve any concern first.

9. Changes to this policy

We will update this page when our data practices change and revise the date at the top. Significant changes affecting existing customers will be flagged more prominently.