{"id":3,"date":"2026-07-13T11:00:04","date_gmt":"2026-07-13T11:00:04","guid":{"rendered":"https:\/\/www.cathive.co.uk\/?page_id=3"},"modified":"2026-10-27T18:11:41","modified_gmt":"2026-10-27T18:11:41","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.cathive.co.uk\/de\/privacy-policy\/","title":{"rendered":"Datenschutzerkl\u00e4rung"},"content":{"rendered":"<p><em>Last updated: 27 October 2026<\/em><\/p>\n<p>This policy explains what personal data we collect when you use cathive.co.uk, why we collect it, who we share it with and the rights you have over it. We keep it in plain English deliberately.<\/p>\n<h2>1. Who is responsible for your data<\/h2>\n<p>The data controller is <strong>PLEXPAD LTD T\/A CatHive<\/strong> (PLEXPAD LTD, registered in England and Wales, company number 14156842; registered office 124 City Road, London, EC1V 2NX). Contact: <a href=\"mailto:info@cathive.co.uk\">info@cathive.co.uk<\/a>, 0207&nbsp;870&nbsp;3694.<\/p>\n<p id=\"eu-representative\"><strong>Our representative in the European Union<\/strong> (Article 27 of the EU General Data Protection Regulation, because we are based in the UK and sell to customers in the EU): Lech Madrzyk, Cyrilsk\u00e1 508\/7, 602 00 Brno, Czech Republic, <a href=\"mailto:gdpr@cathive.co.uk\">gdpr@cathive.co.uk<\/a>. If you are in the EU you may contact our representative instead of us about anything to do with your personal data, and data protection authorities in the EU may contact them too.<\/p>\n<h2>2. What we collect and why<\/h2>\n<table>\n<thead>\n<tr>\n<th>What<\/th>\n<th>When<\/th>\n<th>Why we use it<\/th>\n<th>Legal basis<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Name, billing and delivery address, email address, phone number, order details<\/td>\n<td>When you place an order<\/td>\n<td>To process, deliver and provide support for your order, including order and delivery emails; to keep the records we are legally required to keep<\/td>\n<td>Performance of a contract; legal obligation (tax and accounting records)<\/td>\n<\/tr>\n<tr>\n<td>Account email address, the details you save to your account, and when you last signed in<\/td>\n<td>When you create an account<\/td>\n<td>To operate your account: saved addresses, order history, faster checkout. When we open a Trade Account for a business over the phone, we first check that the email address given can receive email (no message is sent to check it), and may correct it from the business&rsquo;s own website<\/td>\n<td>Performance of a contract<\/td>\n<\/tr>\n<tr id=\"sign-in-data\">\n<td>If you sign in with Google, Apple, Microsoft or Facebook: your name and email address as that service gives them to us, whether it has confirmed the email address, and the identifier it uses for you with our site<\/td>\n<td>When you choose to sign in, create an account, fill in a Trade Account application, or activate a Trade Account with one of these services<\/td>\n<td>To sign you in without a password and recognise you the next time; to link the sign-in to your existing account when the service confirms it is your email address (see <a href=\"#sign-in-providers\">Sign-in services<\/a>)<\/td>\n<td>Performance of a contract<\/td>\n<\/tr>\n<tr id=\"trade-mobile\">\n<td>The mobile number of the person we speak to when we open a Trade Account by phone, and a record of the texts we send to it (when sent, whether delivered, when the link in it was opened)<\/td>\n<td>When we open a Trade Account for your business over the phone and you agree to receive the link by text<\/td>\n<td>To text you a personal link to activate the account, and at most one reminder text if it is not activated; to check that the texts arrived; and to recognise a reply you text back. These texts are about your account only, never marketing<\/td>\n<td>Performance of a contract (steps you asked us to take)<\/td>\n<\/tr>\n<tr>\n<td>Vehicle details you enter (make, model, engine, registration number)<\/td>\n<td>When you use the part finder or ask us to check fitment<\/td>\n<td>To identify the correct parts for your vehicle<\/td>\n<td>Legitimate interest (helping you find the right part); steps prior to a contract<\/td>\n<\/tr>\n<tr>\n<td>Payment card details<\/td>\n<td>At checkout<\/td>\n<td>Taken and processed directly by our payment provider, Stripe \u2014 <strong>we never see or store your full card number<\/strong><\/td>\n<td>Performance of a contract<\/td>\n<\/tr>\n<tr>\n<td>Technical data (IP address, browser)<\/td>\n<td>When you browse or submit forms<\/td>\n<td>Security, fraud prevention and keeping the site working (server logs, bot protection on forms)<\/td>\n<td>Legitimate interest (security)<\/td>\n<\/tr>\n<tr id=\"site-statistics\">\n<td>Site statistics: the pages you view and when, how you arrived (the referring site, search engine or advert, including any campaign tags in the link), your approximate location (town and region, looked up from your IP address on our own server), the network you use, your device, browser, screen size and language, what is in your basket, what you search for on the site and in the part finder (the vehicle, never the registration number), and whether you started a live chat or placed an order. For each vehicle look-up we also record what it found: the checks it went through, the parts shown and how each was judged to fit, and whether you then opened, added or ordered one of them (with a scrambled form of the registration, never the registration itself). Our staff can see the registration you looked up during a visit only while we still hold it from the look-up (up to 7 days, section 3), to check the results we gave you; it is not copied into the statistics<\/td>\n<td>When you browse the site<\/td>\n<td>To run and improve the shop: to see which pages, searches and adverts work, to spot problems, to notice when a customer may need help (for example a basket left at checkout), and to keep the site secure. Recorded by our own server; not shared with anyone and not used for advertising<\/td>\n<td>Legitimate interest (running, improving and securing the shop)<\/td>\n<\/tr>\n<tr id=\"sale-source\">\n<td>How an order came about: the visits that led to it, taken from our server logs (IP address, browser, the pages opened and when, and the referring site, search engine or advert, including any campaign tags or click identifier in the link) and from the order-attribution cookies described in section 5. What we keep with the order is the result: the source (for example a search engine, a shared link, or which of our adverts and search keywords), the times of those visits and a shortened IP address<\/td>\n<td>When you place an order<\/td>\n<td>To know which adverts and searches lead to orders, so that we spend on advertising that works and stop what does not. Done on our own server; not shared with advertisers or anyone else (see section 3 for the rare case where our AI assistant helps)<\/td>\n<td>Legitimate interest (measuring and managing our advertising)<\/td>\n<\/tr>\n<tr id=\"live-chat\">\n<td>Live chat messages; while a chat is open, the pages you view on our site (with the details of any product or vehicle shown, and your basket) and whether you are signed in, including to a Trade Account; a vehicle registration number if you give one<\/td>\n<td>When you use the live chat<\/td>\n<td>To answer your questions and help you find the right part for your vehicle; if the chat is passed to our team, to follow it up (by email if you give us your address)<\/td>\n<td>Legitimate interest (customer service); steps prior to a contract<\/td>\n<\/tr>\n<tr>\n<td>Your answer to our &ldquo;How did it go?&rdquo; email (all good, a problem, or not yet arrived) and whether we have invited you to review us<\/td>\n<td>After your order is dispatched<\/td>\n<td>To check your order arrived and fitted, to help quickly if it did not, and to invite you once to review us on Trustpilot<\/td>\n<td>Legitimate interest (customer service, and collecting genuine reviews from all our customers)<\/td>\n<\/tr>\n<tr>\n<td>Correspondence<\/td>\n<td>When you contact us<\/td>\n<td>To answer you and keep a record of what was agreed<\/td>\n<td>Legitimate interest (customer service)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>We do not send marketing emails \u2014 the only emails you will receive from us relate to your orders, your account or your enquiries. After delivery that includes one &ldquo;How did it go?&rdquo; email and one invitation to review us; every customer is invited, whatever they answered (if you tell us about a problem, we invite you once it has been dealt with). If we ever introduce a newsletter it will be strictly opt-in. We do not sell personal data, and we do not use automated decision-making that produces legal effects about you.<\/p>\n<h2>3. Who we share data with<\/h2>\n<p>We share personal data only with the service providers needed to run the shop, and only what each needs:<\/p>\n<ul>\n<li><strong>Payment processing \u2014 Stripe.<\/strong> Your payment is handled by Stripe Payments Europe Ltd\/Stripe Payments UK Ltd. Stripe acts as an independent controller of payment data for purposes such as fraud prevention; see the <a href=\"https:\/\/stripe.com\/gb\/privacy\" target=\"_blank\" rel=\"noopener\">Stripe Privacy Policy<\/a>.<\/li>\n<li><strong>Fulfilment and delivery.<\/strong> Your name, delivery address and contact phone number are shared with the distribution and carrier partners who pick, dispatch and deliver your order. For deliveries outside the UK, your email address is shared too, so that the carrier can contact you about any import duty, VAT or clearance charges.<\/li>\n<li><strong>Email delivery \u2014 Google.<\/strong> Our business email and outbound order emails are handled through Google Workspace (Google Ireland Ltd \/ Google LLC).<\/li>\n<li><strong>Bot protection \u2014 Google reCAPTCHA.<\/strong> Our account-registration and contact forms are protected by reCAPTCHA, which sends technical data about your browser and interaction to Google to distinguish people from bots. The <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener\">Google Privacy Policy<\/a> and <a href=\"https:\/\/policies.google.com\/terms\" target=\"_blank\" rel=\"noopener\">Terms of Service<\/a> apply.<\/li>\n<li><strong>Address suggestions \u2014 Google Maps Platform.<\/strong> When you start typing an address at checkout or in your account, the characters you type are sent to Google&#8217;s Places service (Google Ireland Ltd \/ Google LLC) so it can suggest matching addresses, and the address you pick is returned to fill in the form. The suggestions are optional: you can ignore them and type your address in full. This uses no cookies and is not used for advertising. The <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener\">Google Privacy Policy<\/a> applies.<\/li>\n<li><strong>Sign-in services \u2014 Google, Apple, Microsoft and Meta (Facebook).<\/strong> If you choose to sign in with one of them, you sign in on that service&rsquo;s own page, and it tells us your name, your email address and an identifier for you; Apple may give us a private relay address (ending @privaterelay.appleid.com) that forwards to your own. We never see your password for that service, your contacts or anything else in that account, and we tell the service nothing about your orders; the service does know that you signed in to CatHive. Each service is an independent controller of its own sign-in data: see the <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener\">Google<\/a>, <a href=\"https:\/\/www.apple.com\/legal\/privacy\/\" target=\"_blank\" rel=\"noopener\">Apple<\/a>, <a href=\"https:\/\/privacy.microsoft.com\/privacystatement\" target=\"_blank\" rel=\"noopener\">Microsoft<\/a> and <a href=\"https:\/\/www.facebook.com\/privacy\/policy\/\" target=\"_blank\" rel=\"noopener\">Meta<\/a> privacy policies.<\/li>\n<li><strong>Phone calls and text messages \u2014 Twilio.<\/strong> Our phone line and text messages run through Twilio (Twilio Ireland Ltd \/ Twilio Inc.). When you call us, Twilio connects the call; a voicemail message you leave is recorded and transcribed so that it can be emailed to our team. When we text you (for example a link to activate your Trade Account), Twilio receives your mobile number and the message and tells us whether it was delivered; a text you send to our number reaches us through Twilio. The <a href=\"https:\/\/www.twilio.com\/en-us\/legal\/privacy\" target=\"_blank\" rel=\"noopener\">Twilio Privacy Notice<\/a> applies.<\/li>\n<li><strong>Live chat assistant \u2014 Anthropic.<\/strong> The live chat on our site is answered by an AI assistant (Claude, provided by Anthropic PBC), and a member of our team can read any chat and take over. Your chat messages, and the details of the pages you view on our site while the chat is open, are sent to Anthropic so the assistant can reply. To check which part fits your vehicle, the assistant may search the web and read or search approved vehicle-data, manufacturer and parts websites on your behalf; it sends them only vehicle details, registration numbers and part numbers, never your name or contact details. Please do not share card details, passwords or other sensitive information in the chat. The <a href=\"https:\/\/www.anthropic.com\/legal\/privacy\" target=\"_blank\" rel=\"noopener\">Anthropic Privacy Policy<\/a> applies to their processing.<\/li>\n<li><strong>Vehicle look-ups \u2014 DVSA, Vehicle Data Global, RegCheck, RDW and partslink24.<\/strong> When you enter a registration number in our part finder, or give one in the live chat, it is checked with the DVSA&#8217;s MOT history service and, where needed to tell similar vehicles apart, with Vehicle Data Global. An Irish or French registration is checked instead with RegCheck, a service of Infinite Loop Development Ltd (Ireland, EU), which looks it up in the official vehicle records; only the registration is sent to it. On our Dutch shop, a Dutch registration is checked instead in the open vehicle data published by the RDW (Dienst Wegverkeer, the Netherlands\u2019 vehicle authority); only the registration is sent to it. If more than one of our parts could still fit, an automated research assistant (Claude, provided by Anthropic PBC) may check the registration on other vehicle-data, manufacturer and parts websites to confirm which part fits; it sends them only the registration, vehicle details and part numbers, never your name or contact details, and the registration it was given is deleted as soon as it finishes. Where that still leaves more than one part, the vehicle identification number (VIN) in the Vehicle Data Global record, or the VIN you give our live chat, may be checked in partslink24, the manufacturers\u2019 parts catalogue operated by LexCom Informationssysteme GmbH (Germany, EU), to read the manufacturer\u2019s own part numbers for your vehicle; only the VIN is entered there (never the registration, your name or contact details), and we keep the part numbers found, not the VIN (a VIN you give the live chat is kept, encrypted, with your registration&#8217;s look-up for 7 days). In the live chat the registration may likewise be checked on other vehicle-data and parts websites; the chat keeps it, encrypted, for 2 days so that our checks apply when you add a part to your basket. We keep the registration, with the vehicle details returned and the research findings, for 7 days after the most recent look-up of that registration (so a repeat look-up does not have to be checked again, and so we can check the results again if you ask us about a part), then delete them; they are not included in our backups. A record of each research check (with a scrambled form of the registration only) is kept for 30 days. While you shop, the last registration you looked up (on our site, or gave in the live chat) is also kept, encrypted, in your shop session, with the vehicle and the parts it matched (after a search by make, model and engine, the vehicle and its parts only), so that we can tell you when a part you look at, add to your basket or order is not listed for that vehicle, and check a part against your vehicle when you add it to your basket, which may need a Vehicle Data Global look-up; they are removed when the session ends (within 2 days), or at once if you choose \u201cNot this vehicle? Forget it\u201d. If you order a part we told you was not listed for, or unlikely to fit, the vehicle you searched for, we keep that vehicle, its registration and your confirmation with your order, as part of the order record. If you order by phone, we keep the registration and the details of the vehicle you are ordering for with your order, as part of the order record. A record of each look-up&#8217;s checks and results (section 2, Site statistics) is kept with your visit for 30 days, then without any link to you (no registration, visit or account) for up to 25 months, so we can measure how well the part finder works.<\/li>\n<li><strong>Sale-source checks \u2014 Anthropic.<\/strong> For the few orders our server cannot link automatically to the visit or advert that led to them, an AI assistant (Claude, provided by Anthropic PBC) reviews the server-log entries for that order (IP addresses, browser, pages and times) and records the result with the order. Nothing else about you is sent, and it is not used for any other purpose.<\/li>\n<li><strong>Trade Account email checks \u2014 Verifalia and Anthropic.<\/strong> When we open a Trade Account for a business over the phone, we check that the email address given can receive email before we send the welcome email; no message is sent to check it. If our own check cannot confirm it, the address (and nothing else) is sent to Verifalia (Cobisi Research S.r.l., Italy, EU) for the same check, and deleted from Verifalia within 10 minutes. If the address still cannot be confirmed, an AI assistant (Claude, provided by Anthropic PBC) is given the business&rsquo;s name, town, telephone number, website and the address given, and looks on the business&rsquo;s own website for the right one.<\/li>\n<li><strong>Reviews \u2014 Trustpilot and Google Customer Reviews.<\/strong> When your order has arrived and you have told us all is well (or not replied to our check-in), we send your name, email address and order number to Trustpilot A\/S (Denmark), which emails you once to invite a review of CatHive. Trustpilot handles that data under its own <a href=\"https:\/\/legal.trustpilot.com\/for-everyone\/end-user-privacy-terms\" rel=\"noopener\">privacy policy<\/a>. You can ignore the invitation; if you write a review, you do so on Trustpilot&rsquo;s site under its own terms. If you have accepted either optional purpose on our cookie notice (section 5), the order confirmation page also shows Google&rsquo;s offer of an optional survey (Google Customer Reviews); Google receives information about the order only if you opt in there, in which case we pass your email address, order number, delivery country, estimated delivery date and the barcodes (GTINs) of the parts ordered to Google (Google Ireland Ltd \/ Google LLC), which emails you a short survey about your experience. The <a href=\"https:\/\/policies.google.com\/privacy\" rel=\"noopener\">Google Privacy Policy<\/a> applies.<\/li>\n<li><strong>Site analytics \u2014 Google Analytics.<\/strong> Only if you consent on our cookie notice, usage statistics (pages viewed, searches, approximate location from IP, device type) are processed by Google Analytics (Google Ireland Ltd \/ Google LLC). Data is retained for 14 months and is not used to build advertising profiles.<\/li>\n<li><strong>Advertising measurement \u2014 Microsoft.<\/strong> Only if you consent on our cookie notice, Microsoft&#8217;s Universal Event Tracking tag (Microsoft Ireland Operations Limited) records that a visit, basket or order followed one of our Microsoft adverts. We use it only to measure whether our advertising pays for itself, not to build advertising profiles.<\/li>\n<li><strong>Website hosting.<\/strong> The site and its database are hosted on infrastructure operated for us by our hosting provider.<\/li>\n<\/ul>\n<p>We may also disclose data where the law requires it (for example to HMRC, or in response to a lawful request by authorities), or to professional advisers under confidentiality.<\/p>\n<h2>4. International transfers<\/h2>\n<p>Some of the providers above (Stripe, Google, Anthropic, Twilio, and the sign-in services Apple, Microsoft and Meta) process data in the United States and elsewhere. Where personal data leaves the UK, it is protected by recognised safeguards: the UK&#8217;s adequacy arrangements \u2014 including the UK Extension to the EU\u2013US Data Privacy Framework \u2014 or the UK International Data Transfer Agreement\/Addendum, as applicable to the provider.<\/p>\n<h2 id=\"cookies\">5. Cookies<\/h2>\n<p>We use cookies sparingly. These are needed for the site to work:<\/p>\n<ul>\n<li><strong>Shop cookies<\/strong> \u2014 remember your basket and session while you shop, and keep you logged in to your account if you have one. Set only when you interact with the shop (adding to basket, logging in).<\/li>\n<li><strong>Live chat cookie<\/strong> \u2014 while you have a chat open, a cookie (<code>ch_chat_stream<\/code>, sent only to our chat service, for up to two hours) lets our server send you replies the moment they are ready.<\/li>\n<li><strong>Sign-in cookies<\/strong> \u2014 while you sign in with Google, Apple, Microsoft or Facebook, a cookie (<code>cathive_sso_b<\/code>, for up to 10 minutes, sent only to our sign-in pages) makes sure the sign-in finishes in the same browser that started it. If the service has not confirmed your email address, a cookie (<code>cathive_sso_pend<\/code>, for up to 1 hour) holds the sign-in while we email you a link to confirm it. When you open a Trade Account activation link, a cookie (<code>cathive_act<\/code>, for up to 2 hours) holds the link while you choose how to activate.<\/li>\n<li><strong>Security cookies<\/strong> \u2014 set by Stripe (fraud prevention on payments) and by Google reCAPTCHA (bot protection, on the registration and contact pages).<\/li>\n<\/ul>\n<p>The cookies above are strictly necessary for services you request, so they do not need your consent.<\/p>\n<p id=\"order-attribution\"><strong>Order-attribution cookies.<\/strong> Our shop software (WooCommerce) sets first-party cookies named <code>sbjs_\u2026<\/code> that record how you first and most recently arrived at our site (the referring site, search engine or advert, including any campaign tags or click identifier in the link), the first page you opened and when, and how many visits you have made. They are set for every visitor, whatever you choose on the cookie notice, kept for up to 3 months, read only by our own site, and used only to record with an order which visit or advert led to it (section 2). You can delete or block them in your browser settings; the shop works without them.<\/p>\n<p id=\"remembered-registrations\"><strong>Registrations you searched (kept in your browser only).<\/strong> When a registration look-up on our site finds the vehicle, your browser keeps that registration, the vehicle we found (for example &ldquo;Ford Focus, 1.0 petrol, 2015&rdquo;) and the time of the search in its local storage (not a cookie), so that on a later visit you can search it again with one tap instead of typing it. It keeps the last two registrations you searched, each for 90 days from the last time you searched it; an older one is deleted the next time you open our site. They stay on your device: nothing about them is sent to us unless you tap one to search again, and they are not used for statistics or advertising. Because this only makes the site work the way you prefer, it does not depend on your choice on the cookie notice, but you can object to it at any time, free of charge: tap &times; beside a registration under the registration box to forget it, then choose &ldquo;Stop remembering plates on this device&rdquo;, and we will not keep any registration you search on that device again. Choosing &ldquo;Not this vehicle? Forget it&rdquo; also forgets that registration. You can also clear this site&rsquo;s data in your browser settings.<\/p>\n<p>To bring your results back when you return to the page, your browser also keeps your last search (the registration, the vehicle and the parts found) for 30 minutes; after that it is deleted the next time you open our site, or at once if you forget that registration.<\/p>\n<p><strong>Optional cookies (only with your consent).<\/strong> Our cookie notice offers two optional purposes, which you can accept or refuse separately using <em>Manage<\/em>. If you choose <em>Essential only<\/em>, or make no choice, no analytics or advertising tags are loaded from Google or Microsoft and none of the optional cookies below are set (the address suggestions described in section 3 use Google&#8217;s Places service without cookies, and only if you type an address). Your choice is remembered in your browser (not in a cookie) and you can change it at any time using the <em>Cookie settings<\/em> link in the footer.<\/p>\n<ul>\n<li><strong>Analytics<\/strong> \u2014 Google Analytics 4 sets cookies (<code>_ga<\/code> and <code>_ga_\u2026<\/code>, kept for up to 2 years) so we can see how the site is used: which pages are visited, how visitors arrive, and which parts and vehicles are searched for. We use it to improve the site and the parts finder. IP addresses are not stored by Google Analytics, we do not enable Google Signals or cross-device linking, and reports are kept for 14 months. No advertising profile is built from it. With this consent we also keep a random visitor number in your browser&#8217;s local storage (<code>ch_vid<\/code>, not a cookie) so that our own site statistics (section 2) can recognise a later visit; it is removed if you withdraw consent. Without it, our statistics group your page views within the same day only, using a code made from your IP address and browser that changes every day, cannot link one day to the next and is not stored on your device.<\/li>\n<li><strong>Advertising measurement<\/strong> \u2014 we advertise on Google and on Microsoft (Bing). With this consent we load Google&#8217;s advertising tag, which sets Google cookies (for example <code>_gcl_aw<\/code>), and Microsoft&#8217;s Universal Event Tracking tag, which sets Microsoft cookies (<code>_uetsid<\/code> and <code>_uetvid<\/code>), so that each provider can tell us whether one of our adverts led to an order. We use this only to measure whether our advertising pays for itself; we do not use it for personalised advertising.<\/li>\n<li><strong>Google Customer Reviews<\/strong> \u2014 if you have accepted either purpose above, the order confirmation page loads Google&rsquo;s survey opt-in (section 3), which may set or read Google cookies. Whether or not you opt in to the survey, you can delete or block these cookies in your browser settings.<\/li>\n<\/ul>\n<p>Google&#8217;s handling of this data is described in its <a href=\"https:\/\/policies.google.com\/privacy\" rel=\"noopener\">privacy policy<\/a>; for both purposes the data controller is Google Ireland Limited jointly with us. Microsoft&#8217;s handling of advertising-measurement data is described in the <a href=\"https:\/\/privacy.microsoft.com\/privacystatement\" target=\"_blank\" rel=\"noopener\">Microsoft Privacy Statement<\/a>; for that purpose Microsoft Ireland Operations Limited is a joint controller with us.<\/p>\n<p>You can also delete or block cookies in your browser settings, though the basket and checkout will not work without the shop cookies.<\/p>\n<h2>6. How long we keep data<\/h2>\n<ul>\n<li><strong>Order records:<\/strong> at least six full financial years after the year of the order, as required for tax and accounting.<\/li>\n<li><strong>Account data:<\/strong> for as long as your account exists. You can ask us to delete your account at any time; we will keep only what the retention rule above obliges us to keep.<\/li>\n<li><strong>Sign-in services:<\/strong> the identifier a sign-in service gives us is kept until you remove that sign-in method or your account is deleted.<\/li>\n<li><strong>Trade Account mobile number and activation texts:<\/strong> for as long as the Trade Account exists. Activation links stop working after 14 days, or once used.<\/li>\n<li><strong>Live chat:<\/strong> transcripts are deleted automatically 90 days after the last message. The assistant&#8217;s own working copy of a chat is deleted 7 days after the chat ends, and our record of the web pages it looked up for a chat (the addresses only) after 30 days.<\/li>\n<li><strong>Site statistics:<\/strong> the pages viewed and events of each visit for 30 days; visits (without the list of pages) for 90 days; full IP addresses for 7 days, after which only the network part is kept (for example 81.2.69.0); daily totals, which contain no personal data, for 25 months. Vehicle look-ups: the checks and results of each look-up, with a scrambled form of the registration and a link to your visit, for 30 days; after that the checks are deleted and only a summary with no link to you (the vehicle, its year, the results, timings and costs) is kept for 25 months.<\/li>\n<li><strong>Server logs:<\/strong> 30 days. <strong>How an order came about<\/strong> (section 2): kept with the order record, as above.<\/li>\n<li><strong>Order-attribution cookies:<\/strong> up to 3 months in your browser (the record of your first visit is not renewed).<\/li>\n<li><strong>Registrations remembered in your browser:<\/strong> the last two you searched, each for 90 days from its last search, on your device only (section 5).<\/li>\n<li><strong>Your &ldquo;How did it go?&rdquo; answer and review invitation:<\/strong> kept with the order record, as above.<\/li>\n<li><strong>Enquiries:<\/strong> for as long as needed to deal with the enquiry and a reasonable period afterwards.<\/li>\n<\/ul>\n<h2>7. How we protect data<\/h2>\n<p>The site is served over HTTPS; payment details go directly to Stripe and never touch our servers; access to order data is limited to those who need it; and our systems are kept updated and backed up. No system is perfectly secure, but we take the protection of your data seriously and will inform you and the ICO of any breach where the law requires it.<\/p>\n<h2>8. Your rights<\/h2>\n<p>You have the right to ask us for:<\/p>\n<ul>\n<li><strong>Access<\/strong> \u2014 a copy of the personal data we hold about you;<\/li>\n<li><strong>Rectification<\/strong> \u2014 correction of inaccurate data;<\/li>\n<li><strong>Erasure<\/strong> \u2014 deletion of your data, where no legal obligation requires us to keep it;<\/li>\n<li><strong>Restriction<\/strong> or <strong>objection<\/strong> \u2014 limits on how we use it, including objecting to any processing based on legitimate interests;<\/li>\n<li><strong>Portability<\/strong> \u2014 your data in a machine-readable format.<\/li>\n<\/ul>\n<p>To exercise any of these, email <a href=\"mailto:info@cathive.co.uk\">info@cathive.co.uk<\/a>. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner&#8217;s Office at <a href=\"https:\/\/ico.org.uk\" target=\"_blank\" rel=\"noopener\">ico.org.uk<\/a> or on 0303&nbsp;123&nbsp;1113 \u2014 though we&#8217;d welcome the chance to resolve any concern first.<\/p>\n<p>If you are in the European Union you can also complain to the data protection authority where you live or work: in Ireland, the Data Protection Commission at <a href=\"https:\/\/www.dataprotection.ie\" target=\"_blank\" rel=\"noopener\">dataprotection.ie<\/a>.<\/p>\n<h3 id=\"sign-in-providers\">Sign-in services: removing them and deleting your data<\/h3>\n<p>If you signed in with Google, Apple, Microsoft or Facebook, we hold your name, your email address, whether that service confirmed the address, the identifier it uses for you with our site, and when you last signed in with it. To have it deleted:<\/p>\n<ol>\n<li>Email <a href=\"mailto:info@cathive.co.uk\">info@cathive.co.uk<\/a> from the address on your account (or tell us which account it is), saying which sign-in method to remove, or that you want your account deleted.<\/li>\n<li>We remove that sign-in method, or delete your account and everything linked to it, within one month, and confirm by email. Order records we must keep by law (section 6) are kept.<\/li>\n<\/ol>\n<p>You can also stop a service signing you in to our site from that service&rsquo;s own settings: Google (<a href=\"https:\/\/myaccount.google.com\/connections\" target=\"_blank\" rel=\"noopener\">Third-party apps and services<\/a>), Apple (your Apple Account settings, <em>Sign-In and Security<\/em>, <em>Sign in with Apple<\/em>), Microsoft (<a href=\"https:\/\/account.live.com\/consent\/Manage\" target=\"_blank\" rel=\"noopener\">apps and services you have given access<\/a>) or Facebook (<em>Settings and privacy<\/em>, <em>Settings<\/em>, <em>Apps and websites<\/em>). That stops future sign-ins but does not delete what we already hold: email us for that.<\/p>\n<h2>9. Changes to this policy<\/h2>\n<p>We will update this page when our data practices change and revise the date at the top. Significant changes affecting existing customers will be flagged more prominently.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Last updated: 27 October 2026 This policy explains what personal data we collect when you use cathive.co.uk, why we collect it, who we share it with and the rights you have over it. We keep it in plain English deliberately. 1. Who is responsible for your data The data controller is PLEXPAD LTD T\/A CatHive [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.cathive.co.uk\/de\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cathive.co.uk\/de\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.cathive.co.uk\/de\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.cathive.co.uk\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cathive.co.uk\/de\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":35,"href":"https:\/\/www.cathive.co.uk\/de\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":27676,"href":"https:\/\/www.cathive.co.uk\/de\/wp-json\/wp\/v2\/pages\/3\/revisions\/27676"}],"wp:attachment":[{"href":"https:\/\/www.cathive.co.uk\/de\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}