Privacy policy
Last updated: 2 November 2026
Who we are
This website is operated by Pastoro Trading Ltd (“we”, “us”). Pastoro Trading Ltd is registered in England and Wales under company number 14020166, with its registered office at Old School House, Langwathby, Penrith, England, CA10 1NB.
Contact: team@pastorotrading.co.uk.
We are the controller of the personal information described in this policy. We collect personal information mainly from business contacts: people enquiring on behalf of suppliers, manufacturers, distributors and other businesses.
Information we collect
Information you give us
When you complete one of our forms we collect the details you enter. Depending on the form this includes your name, job title, company name, email address, telephone number, website, product categories, details of your product range and trade pricing, and the content of your message.
Information collected automatically
Our website is hosted by Cloudflare. When you visit, Cloudflare processes technical information such as your IP address, browser type and the pages requested, to deliver the website and protect it from attacks. Our forms may use Cloudflare Turnstile, which processes signals such as your IP address and browser information to distinguish people from automated spam.
Our website loads its typefaces from Google Fonts. When a page loads, your browser connects to Google’s servers, which receive your IP address.
We do not use analytics or advertising cookies, and we do not track you across other websites.
How and why we use your information
| Purpose | Lawful basis |
|---|---|
| Responding to trade applications and general enquiries | Steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries |
| Reviewing supplier applications and managing trade relationships | Contract, and our legitimate interest in running our business |
| Protecting our website and forms from spam and abuse | Our legitimate interest in keeping our services secure |
| Keeping business and accounting records | Legal obligation |
We do not add form submissions to marketing mailing lists. If we ever send you marketing, we will do so only where the law allows, and you can opt out at any time.
Who we share it with
We do not sell personal information. We share it only with service providers that help us run the website and handle enquiries, under contracts that require them to protect it:
- Cloudflare, Inc. (website hosting, form processing and spam protection)
- Google (storage of enquiry records in Google Workspace, email notifications and web fonts)
We may also share information where required by law or to protect our legal rights.
International transfers
Our service providers may process information outside the UK, including in the United States. Where they do, we rely on safeguards recognised under UK data protection law, such as the UK–US data bridge or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep it
Enquiries that do not lead to a trading relationship are kept for up to 24 months from our last contact and then deleted. Records relating to customers and suppliers are kept for as long as the relationship continues and then for six years, to meet accounting and legal requirements.
Your rights
You have the right to request access to your personal information, and to ask us to correct, delete or restrict it. You can object to processing based on our legitimate interests and, in some cases, ask for a copy of your information in a portable format. To make a request, contact us using the details above.
If you are unhappy with how we have handled your information, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.