Privacy Notice
Last updated 25 July 2026
The Gibraltar Catering Association (“the Association”, “we”, “us”) is committed to protecting your personal information. This notice explains what we hold, why we hold it, and the rights you have under the Data Protection Act 2004 and the Gibraltar GDPR.
Who we are
The Association is the data controller for the information described here. You can contact us about this notice, or to exercise any of your rights, by writing to the Association at Unit 17a Ragged Staff Wharf, Queensway Quay, Gibraltar GX11 1AA.
What we collect
- Membership records — your business name, the name and role of your contact(s), email address, telephone number, and the premises you operate.
- Enquiries — anything you send us through the contact form or by email.
- Members’ area sign-in — your email address, used only to send you a one-time sign-in link.
We do not use advertising or tracking cookies.
Why we use it, and our lawful basis
- To administer your membership, collect subscriptions and provide member benefits — necessary to perform our membership agreement with you, and in our legitimate interests in running the Association.
- To send you Association news, offers and trade information — our legitimate interests; you can opt out at any time.
- To respond to enquiries — our legitimate interests in dealing with people who contact us.
- To control access to the members’ area and keep minutes private to members — our legitimate interests in protecting member material.
Who can see it
Your information is accessible to the Association’s committee, all of whom are volunteers, for the purposes above. We use trusted providers to host the website and send email on our behalf; they process data only on our instructions. We do not sell your information or share it for marketing.
Where it is held
Membership records and website data are held on secure servers provided by our hosting partner. Where information is transferred outside Gibraltar, we rely on the safeguards required by the Gibraltar GDPR.
How long we keep it
We keep membership records for as long as you are a member and for two years afterwards, in case of later queries. Enquiries are kept only as long as needed to deal with them.
Your rights
Under the Gibraltar GDPR you have the right to ask for a copy of the information we hold about you, to have it corrected if it is wrong, to ask us to delete it, to ask us to restrict or stop using it, to object to our use of it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To exercise any of these, write to the Association — we will respond within one month.
Complaints
If you are unhappy with how we handle your information, please tell us first so we can put it right. You also have the right to complain to the Gibraltar Regulatory Authority (GRA), the supervisory authority for data protection in Gibraltar, at gra.gi.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it last changed.