Website Privacy Notice
Barbourne Brook Limited
Hop Merchants, 21 Sansome Street, Worcester WR1 1UH
Registered in England and Wales: 09169729
This notice covers this website, cat360.io. It explains what we collect when you visit or get in touch, why, and how to stop us.
1. What this notice covers
Barbourne Brook Limited operates this website and provides CAT360, a customs analytics platform. In this notice, "we" and "us" mean Barbourne Brook Limited, and we are the controller for the data described here.
This notice is for visitors to cat360.io. It applies whether you simply read a page, book a demo, start a trial, download a guide, subscribe to tariff alerts, or send us an enquiry. It also applies if we contacted you about CAT360 before you had heard of us.
What this notice does not cover, and where to look instead.
Using the CAT360 platform. Once you have a login, your account and the data your organisation puts into CAT360 are covered by the CAT360 Privacy Policy and the CAT360 Data Protection Policy, both of which form part of your subscription agreement.
Our consultancy work. Covered by the Barbourne Brook privacy notice and data protection policy.
Cookies, in detail. Every cookie is listed by name, purpose and duration in our cookie policy.
2. What we collect
| Category | What it covers |
|---|---|
| What you tell us | Name, work email, company, job title, phone number where you give it, and whatever you write in the message. Collected through the contact, demo, trial, broker review, guide and newsletter forms. |
| How you use the site | Pages viewed, how you arrived, approximate location from your IP address, device and browser. Only with your consent to analytics cookies. |
| Session recordings | With your consent to analytics, Microsoft Clarity records mouse movement, scrolling and screen content on the pages you visit, so we can see where the site confuses people. |
| Campaign data | With your consent to marketing cookies, which advert, email or campaign brought you here. |
| Business contact details we sourced ourselves | Name, job title, work email, company and sector, where we identified your business as one that might benefit from CAT360 and you had not contacted us first. |
| Special category data | None. We do not ask for and do not want health, biometric, racial, political, religious or similar data. Please do not send it to us. |
| Payment details | None. This website does not take payments and never sees card details. |
3. Where we get it
- From you, when you fill in a form, email us, or talk to us.
- From your device, through cookies and similar technologies, and only where you have consented. See the cookie policy.
- From public business sources, such as company websites, published trade information and professional networking profiles.
- From third-party business contact data providers, which supply verified business contact details for people in relevant roles.
If we contacted you and you want to know exactly where your details came from, ask us and we will tell you.
4. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry, arrange a demo, set up a trial or send you a guide | Steps taken at your request towards a contract, or our legitimate interest in responding to you |
| Send tariff alerts or our newsletter, where you asked for them | Consent, withdrawable in any message |
| Tell existing business contacts about CAT360 and related services | Legitimate interests, with an unsubscribe in every message |
| Contact a business we think CAT360 would help, where you have not approached us | Legitimate interests in marketing a business product to a business audience. You can object at any time and we will stop |
| Measure how the site is used, and improve it | Consent, through the cookie banner |
| Measure whether our adverts and campaigns work | Consent, through the cookie banner |
| Keep the site secure and prevent abuse of our forms | Legitimate interests |
| Keep records of who we dealt with and when | Legitimate interests, and legal obligation where tax or company law applies |
Where we rely on legitimate interests, we have weighed our interest against your rights and concluded ours does not override yours. You can ask us to explain that reasoning, and you can object.
We do not sell your data. Not to data brokers, not to advertisers, not to anyone. We do not share it with third parties for their own marketing, and we do not use anything collected through this website to train AI models.
5. Cookies
No analytics or marketing cookie is set until you opt in, and declining leaves nothing behind. Every cookie we can set is listed by name, provider, purpose and duration in the cookie policy.
6. Who else is involved
These providers handle data on our behalf in running this website. Each is bound by a data processing agreement and none may use your data for its own purposes.
| Provider | What they do |
|---|---|
| HubSpot | Runs our forms, and holds our customer and prospect records |
| Netlify | Hosts this website |
| Analytics, and advertising measurement through Google Ads. Only with consent | |
| Microsoft | Clarity analytics and session recording. Only with consent |
| Advertising measurement, through the Insight Tag that HubSpot loads. Only with consent |
We also share data with our own professional advisers where necessary, and with regulators or authorities where the law requires it.
7. Sending data outside the UK
Some of the providers above operate outside the United Kingdom. Where your data is transferred out, we rely on the safeguards set out in each provider's data processing agreement, which are the UK International Data Transfer Addendum, Standard Contractual Clauses, or an applicable adequacy decision.
8. How long we keep it
| Data | Retained for |
|---|---|
| Enquiries, demo and trial requests, and prospect records in our CRM | 24 months from our last meaningful contact with you, unless you become a client, in which case client retention applies |
| Newsletter and tariff alert subscriptions | Until you unsubscribe, plus a suppression record so we do not contact you again by mistake |
| Records of objections and unsubscribes | Indefinitely, because forgetting them would mean contacting you again |
| Website analytics and session recordings | See the durations in the cookie policy |
| Your cookie choice | Six months, then we ask again |
| Correspondence with tax or accounting relevance | Six years after the end of the financial year it relates to |
9. Your rights
You can ask us to give you a copy of your personal data, correct it, delete it, restrict what we do with it, or send it to someone else. You can object to anything we do on the basis of legitimate interests, including all of our marketing, and you can withdraw consent at any time.
Two easy ones you can do yourself: click unsubscribe in any email, and use Cookie settings in the footer of any page.
For anything else, email sarah@barbournebrook.co.uk. We do not charge, and we will reply within one month. If your data reached us through the CAT360 platform rather than this website, tell us anyway and we will point you to the right document and the right controller.
10. Keeping it safe
This website is served over an encrypted connection and takes no payments. Enquiry data goes to HubSpot, our customer relationship system, where access is restricted to the people who need it. All staff complete annual data protection and security training, and confidentiality obligations are written into their contracts.
11. Contact and complaints
Our Data Representative is Sarah O'Neill.
Email sarah@barbournebrook.co.uk, call +44 (0)1905 975399, or write to Barbourne Brook Limited, Hop Merchants, 21 Sansome Street, Worcester WR1 1UH.
If we do not put things right, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first, and we will not hold it against you either way.
12. Changes to this notice
We update this notice when our practices or the law change. The version and date are below. If a change materially affects how we use your data, we will say so prominently rather than quietly reissuing it.