Six specialised e-commerce brands.
One operating group.
How we handle the information you provide through this website.
Last updated: 19 August 2026
Applies to: bircatagroup.com
Drafted against current US federal and state privacy requirements and, where relevant, UK and EU rules.
This Privacy Policy explains how Bircata Group (“Bircata Group”, “we”, “us”, “our”) collects, uses, discloses and protects personal information in connection with the website at bircatagroup.com (the “Site”).
Bircata Group is a multi-brand e-commerce company. This Site is a corporate website; it does not sell products directly. Purchases made through our individual brand websites are governed by the privacy policy published on each of those websites.
The data controller for information collected through this Site is:
When you submit a supplier application or contact us, we collect the information you choose to give us. For supplier applications this typically includes:
Business contact information of this kind is generally treated as commercial rather than consumer information. Where it identifies an individual — for example a named contact person and their direct email — we treat it as personal information under this policy.
When you visit the Site, our hosting provider and analytics tools may automatically collect technical information including IP address, browser type and version, device type, operating system, referring page, pages viewed, and the date and time of your visit. See the Cookie Policy for detail on cookies and similar technologies.
We do not ask for and do not want sensitive personal information through this Site — including government identification numbers, financial account details, health information, biometric data, precise geolocation, or information revealing racial or ethnic origin, religious beliefs, or union membership. Please do not include such information in free-text fields or uploaded files.
We use the information described above to:
We do not use the information submitted through this Site to build advertising profiles, and we do not sell it.
If you are located in the United Kingdom or the European Economic Area, we rely on the following legal bases under the UK GDPR and EU GDPR:
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
We disclose information only in the following circumstances:
We keep supplier application data for as long as necessary to evaluate the application and, where a relationship begins, for the duration of that relationship plus a reasonable period afterwards for record-keeping, tax and legal purposes.
Where an application does not proceed, we retain the record so that we can recognise repeat applications and maintain an accurate history of who we have assessed, unless you ask us to delete it. Uploaded catalogues and price lists are retained on the same basis.
Analytics data is retained according to the retention period configured in our analytics platform.
The Site is served over HTTPS. We apply administrative, technical and physical safeguards appropriate to the nature of the information we hold, including restricted administrative access, authentication controls on our systems, and controls on how uploaded files are stored and accessed.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you submit information to us at your own risk. If you believe your interaction with us is no longer secure, please contact us immediately.
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) gives you the following rights:
In the twelve months preceding the date of this policy, we have collected the categories of personal information described in Section 2 for the business purposes described in Section 3, and disclosed them to the categories of recipients described in Section 5.
To exercise a right, contact us at info@bircatagroup.com. We will verify your request by asking you to confirm details matching our records. You may use an authorised agent, in which case we may require proof of authorisation.
Residents of states including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana have comparable rights under their state privacy laws, generally including the right to confirm whether we process their personal data, to access it, to correct it, to delete it, to obtain a portable copy, and to opt out of targeted advertising, sale, or certain profiling.
We do not conduct targeted advertising, sell personal data, or carry out profiling that produces legal or similarly significant effects.
To exercise a right, contact info@bircatagroup.com. If we decline a request, you may appeal by replying to our decision; we will respond to the appeal within the timeframe required by your state's law.
If you are located in the UK or EEA, you have the right to request access to, correction of, or deletion of your personal data; to object to or request restriction of processing; to data portability; and to withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).
We are based in the United States and our service providers may process information in the United States and other countries. Where personal data is transferred from the UK or EEA to a country that has not received an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where applicable.
This Site is intended for business use by adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 16, or under 13 as defined by the US Children's Online Privacy Protection Act. If you believe a child has provided us with personal information, contact us and we will delete it.
This Site links to the websites of the brands we operate and may link to other third-party sites. Those sites are governed by their own privacy policies, and we are not responsible for their content or practices. We encourage you to read the privacy policy of any site you visit.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Where changes are material, we will take reasonable steps to notify you. Your continued use of the Site after an update constitutes acceptance of the revised policy.
Questions, requests or complaints about this policy or our handling of personal information:
We aim to respond to all privacy requests within the timeframe required by applicable law, and in any event within 45 days.