Caskello
Privacy notice
Last updated 28 September 2026. Version 3.
This notice explains what personal data Caskello collects, why, how long we keep it, who we share it with, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The short version. We use the details you send us to reply to your enquiry, and nothing else. If you go on to place an order, we keep the normal records needed to invoice and deliver it. We don't sell data, don't use advertising or analytics cookies, don't track you, and load nothing from third parties when you visit this site. You can ask us to see or delete your data at any time by emailing contact@caskello.com.
1. Who we are
The controller of your personal data is Caskello Wholesale Limited, a company registered in England and Wales, company no. 16656106. Registered office: Highland House, 165 The Broadway, Wimbledon, London, SW19 1NE.
For anything about your data, email contact@caskello.com or write to us at our registered office. We're a small business and haven't appointed a Data Protection Officer, as the law doesn't require one for us. Our directors are responsible for data protection.
2. What we collect
When you send an enquiry through the website form
- Your name, company name and email address.
- If you choose to give them: phone number, country and delivery location.
- The products, quantities and area of interest you tell us about.
- The time you sent it and your IP address, which we use only to stop spam and repeat submissions.
When you email, phone or message us on WhatsApp
Your name, contact details and whatever you choose to tell us, including any files you send.
When you become a customer or supplier
Business contact details of the people we deal with, order and delivery details, invoices and payment records, and the shipping and compliance documents needed to move goods (for example delivery addresses and consignee details on export paperwork). We deal with businesses, so this is usually work contact information rather than personal information about your private life.
When you visit the website
The website doesn't use cookies, analytics or tracking. Like every web server, our hosting provider automatically records technical logs (IP address, browser type, date and time, pages requested) to keep the site secure and working. We don't use these logs to identify you.
We don't collect special category data (such as health, religion or ethnicity), and we ask you not to send it.
3. Why we use it and our lawful basis
UK GDPR requires a lawful basis for each use of personal data. Ours are:
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry, send samples, prepare quotes | Steps you've asked us to take before entering a contract (Article 6(1)(b)), and our legitimate interest in answering trade enquiries (Article 6(1)(f)) |
| Process and deliver orders, invoice, arrange shipping and export documents | Performing our contract with you or your company (Article 6(1)(b)) |
| Keep accounting, tax, customs and food-safety records | Legal obligation (Article 6(1)(c)) |
| Stop spam and abuse of the enquiry form, keep the website secure | Legitimate interest in protecting our systems (Article 6(1)(f)) |
| Manage our relationship with business contacts, customers and suppliers | Legitimate interest in running our business (Article 6(1)(f)) |
| Deal with legal claims or disputes | Legitimate interest in establishing or defending legal claims (Article 6(1)(f)) |
Where we rely on legitimate interests, we've weighed them against your rights and expectations. You can object at any time (see your rights). The tick box on our form confirms you've read this notice. It isn't the lawful basis we rely on.
4. Trade updates and marketing
Sending an enquiry doesn't put you on a mailing list. If we'd like to send you trade updates, such as new lines or stock offers, we'll follow the Privacy and Electronic Communications Regulations (PECR). We'll ask for your consent where the law requires it, identify ourselves clearly, and include an easy way to unsubscribe in every message. You can opt out at any time by replying or emailing contact@caskello.com.
5. Who we share it with
We never sell or rent personal data. We share it only when needed, and only with:
- Our web and email hosting provider (Hostinger), which runs the website and hosts our contact@caskello.com mailbox, acting as our processor under its data processing agreement.
- Google (Gmail), which we use to deliver website enquiries to our inbox. Your enquiry is sent through a Gmail account we control, and a copy is kept in that account. Google acts as our processor under its data processing terms.
- Carriers, hauliers, freight forwarders, customs agents and cold-store operators, to deliver or export your order.
- Producers and suppliers, where we need to share specification, delivery or labelling details to source your goods. For white-label work this can include your brand and artwork.
- Our accountants, banks, payment providers, insurers and professional advisers, to run the business and meet our obligations.
- Authorities such as HMRC, the Food Standards Agency, Port Health or the police, where the law requires it.
- WhatsApp (Meta), only if you choose to contact us on WhatsApp. WhatsApp handles those messages under its own privacy policy.
If the business is ever sold or restructured, data may transfer to the new owner, who'd have to respect this notice.
6. International transfers
We trade internationally, so shipping and supplier details may go to parties outside the UK when you ask us to import or export goods. Where that's necessary to carry out your contract, we rely on that necessity. Otherwise, we only transfer data where the destination has UK adequacy status, or with safeguards approved by the Information Commissioner, such as the International Data Transfer Agreement or Addendum. Some of our service providers may process data outside the UK under the same safeguards. In particular, Google may process enquiry emails in the United States. Transfers to Google LLC are covered by the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge) and Google's standard data protection clauses. Ask us for details.
7. How long we keep it
| Data | How long |
|---|---|
| Enquiries that don't lead to an order, including the copy in our Gmail account | Up to 24 months after our last contact, then deleted |
| Customer and supplier records, orders, invoices, customs and shipping documents | 6 years after the end of the financial year they relate to, as UK tax and company law requires |
| General business email correspondence | Up to 6 years, where it relates to orders or contracts. Otherwise up to 24 months |
| Anti-spam record of your IP address (stored as a one-way hash) | Up to 1 hour |
| Web server logs held by our host | A limited period set by our hosting provider for security |
| Marketing preferences and opt-outs | Kept for as long as needed to respect your choice |
8. How we protect it
The website is served only over encrypted HTTPS. Form submissions are checked and filtered before they're emailed to us, and our mailbox is password-protected. Access to business records is limited to the people who need it. No system is perfectly secure. If a breach is likely to put your rights at risk, we'll tell you and the ICO as the law requires.
9. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you and get a copy.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: have your data deleted where we no longer have a reason to keep it.
- Restriction: ask us to pause using your data while a concern is looked into.
- Object to our use of your data based on legitimate interests, and to direct marketing at any time.
- Data portability: receive data you gave us in a common machine-readable format, or have it sent to another organisation.
- Withdraw consent at any time, where we rely on consent.
To use any of these rights, email contact@caskello.com. It's free, and we'll reply within one month. We may need to confirm your identity first. Some rights have legal limits, for example we must keep tax records even if you ask us to delete them. If so, we'll explain why.
10. Cookies
This website doesn't set cookies and loads no third-party services (our fonts are hosted on our own server). It keeps two small settings in your browser. See the cookie policy for details.
11. Children and automated decisions
Our services are for businesses and aren't aimed at children. We don't make decisions about you by automated means or profiling.
12. Complaints
If you're unhappy with how we've handled your data, please tell us first at contact@caskello.com and we'll try to put it right. You also have the right to complain to the UK regulator:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline 0303 123 1113
ico.org.uk/make-a-complaint
13. Changes to this notice
We'll update this notice when the way we use data changes, and show the date at the top. Significant changes will also be flagged on the website.