1. Who is responsible for your data
Barracuda Domestic & Foreign Trade Limited is the data controller for the personal data described in this policy. We are registered in England & Wales under company number 12389616.
- Registered office
- 7 Bell Yard, London WC2A 2JR, England
- Data protection contact
- [email protected]
This policy is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.
2. What we collect
Information you give us
When you complete the enquiry form on this site, we collect the name, email address and message you enter. If you contact us instead by email, telephone or WhatsApp, we hold whatever you choose to tell us — typically your name, contact details, the company you represent and the details of your enquiry.
Information collected automatically
Our hosting provider records standard server log data, such as IP address, browser type and the pages requested, for security and reliability. We also use Google Analytics to understand, in aggregate, how the site is used — see cookies and analytics below.
We do not ask for special category data (such as health or political opinions) and ask that you do not send it to us. We do not knowingly collect data from children.
3. Why we use it, and our lawful basis
- Responding to your enquiry
- To read your message, reply to it, and discuss whether and how we can help. Lawful basis: legitimate interests — answering people who approach us about our services — or, where you are a prospective client, steps taken at your request before entering a contract.
- Providing our services
- To carry out sourcing, vetting, representation and support work, and to manage the relationship. Lawful basis: performance of a contract, or our legitimate interests in running the business.
- Business records and compliance
- To keep accounting records and meet legal, tax and regulatory duties. Lawful basis: legal obligation and legitimate interests.
- Site security and improvement
- To keep the site available and secure, and to understand how it is used. Lawful basis: legitimate interests; for non-essential analytics cookies, your consent.
We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects.
4. Cookies and analytics
This site uses a small number of cookies and similar technologies. Strictly necessary ones keep the site working — for example remembering whether you chose the light or dark theme, which is stored in your browser and never sent to us.
We would also like to use Google Analytics (provided by Google Ireland Limited) to measure traffic and see which pages are useful. It sets cookies that record a pseudonymous identifier, approximate location and the pages you view. We use this only in aggregate; we do not use it to identify you individually.
Analytics cookies are not set unless you accept them. On your first visit we ask, and Google Analytics is not loaded at all until you agree — declining is a single click and leaves nothing stored on your device. Your choice is remembered in your browser’s local storage, which is never sent to us or to anyone else. We also tell Google never to use your data for advertising.
You can change your mind whenever you like — if you withdraw consent, we delete the analytics cookies already set:
The same control sits in the footer of every page, labelled “Cookie settings”. You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. Declining does not affect your ability to use any part of this site.
5. Who we share it with
We do not sell or rent personal data. We share it only with service providers who process it on our instructions, and with professional advisers or authorities where the law requires it. Our main processors are:
- Vercel — hosting and delivery of this website, including server logs.
- Resend — delivery of the email generated when you submit the enquiry form.
- Google — analytics, as described above.
- Our email and office providers — storing and managing correspondence.
We may also disclose personal data if we sell or reorganise the business, or where disclosure is necessary to establish, exercise or defend legal claims.
6. Transfers outside the UK
Some of our providers process data outside the United Kingdom, including in the United States. Where that happens, we rely on the safeguards permitted under UK data protection law — UK adequacy regulations, or standard contractual clauses together with the UK International Data Transfer Addendum. You can ask us for details of the safeguards applied.
7. How long we keep it
- Enquiries that do not lead to work: up to two years from our last contact, then deleted.
- Client records: for the duration of the relationship and for six years after it ends, to cover our legal and accounting obligations and the limitation period for claims.
- Analytics data: retained according to the settings in our Google Analytics property, in aggregated form.
8. Keeping it secure
Data sent through this site travels over an encrypted HTTPS connection. We restrict access to personal data to the people who need it, and we choose providers who maintain appropriate technical and organisational measures. No transmission over the internet can be guaranteed completely secure, so please do not send confidential commercial information through the enquiry form — tell us it exists and we will arrange a secure route.
9. Your rights
Under UK data protection law you have the right to:
- ask what personal data we hold about you, and get a copy of it;
- have inaccurate data corrected;
- ask us to delete data we no longer need;
- ask us to restrict how we use it, or object to our use of it;
- receive data you gave us in a portable format, or have it sent to another controller;
- withdraw consent at any time, where we rely on consent — this does not affect anything done beforehand.
To exercise any of these, email [email protected]. We will respond within one month. There is normally no charge.
If you are unhappy with how we have handled your data, we would like the chance to put it right — but you are entitled to complain to the UK supervisory authority, the Information Commissioner’s Office, at ico.org.uk or on 0303 123 1113.
10. Changes to this policy
We may update this policy as our services or the law change. The date at the top of this page shows when it was last revised. Where a change materially affects how we use your data, we will take reasonable steps to tell you.
Your use of this site is also governed by our Terms of Use.
Questions about this page? Write to [email protected] or to Barracuda Domestic & Foreign Trade Limited, 7 Bell Yard, London WC2A 2JR, England.