1. Who we are

RECO is the trading name of RECO Exports Ltd, a company registered in England and Wales under company number 10717374, with its registered office at 128 City Road, London EC1V 2NX, United Kingdom. We are the controller of the personal data described in this policy.

RECO works across fourteen markets from six offices: London, Stockholm, Hong Kong, Melbourne, Pune and Thessaloniki. Where this policy refers to “RECO”, “we” or “us”, it means the RECO office handling your information and, where relevant, the wider RECO network.

Our Greek office, RECO Hellas operates from Aristotelous 24, Thessaloniki, Greece.

If you have any question about this policy or about how we use your information, contact us at projects@reco.co.uk or write to the registered office above.

2. Who this policy applies to

This policy covers everyone whose personal data we handle in the ordinary course of business:

• Visitors to our websites including reco.co.uk and our Greek-language presence.
• People who contact us by email, telephone, contact form or social media.
• Client, supplier and partner contacts – the individuals we deal with at the organisations we work with.
• Trade fair, event and trip participants – exhibitors, hosted buyers, travel trade partners, journalists and delegates.
• Subscribers to our newsletters, market briefings and event invitations.
• Job applicants and people who send us speculative applications.

Because we work business to business, most of the information we hold is professional contact information rather than personal or private information. It is still personal data and we treat it as such.

3. What we collect

Information you give us

• Contact and identity details – name, job title, organisation, email address, telephone number, postal address.
• Enquiry content – whatever you choose to tell us in a message, form, brief or call.
• Commercial information – your product range, target markets, distribution requirements, budgets and timelines, where you share them with us.
• Event and travel information – dietary requirements, accessibility needs, passport and travel details where we are arranging trade missions, familiarisation trips or hosted buyer programmes.
• Marketing preferences – what you have asked to receive and what you have opted out of.

Special category information
Where we arrange travel, trade missions or hosted programmes, we may ask for dietary requirements, allergies or accessibility needs. This can reveal information about your health or beliefs. We collect it only to make the arrangements you have asked for, we share it only with the venue, caterer, airline or ground operator who needs it, and we rely on your explicit consent. You can decline to provide it, though we may then be unable to accommodate a particular requirement.

Information we collect automatically
When you visit our website we collect technical information about your device and visit – IP address, browser type, operating system, pages viewed, referring source and time on site. Some of this is collected through cookies and similar technologies, which are covered in our Cookie Policy.

Information from other sources

• Trade fair and event organisers – delegate, exhibitor and hosted buyer lists shared with us as an official representative or participant.
• Publicly available business sources – company websites, trade directories, professional networks and industry press.
• Chambers of commerce and trade bodies – where we are a member or an accredited representative.
• Referrals – where a colleague or partner introduces you to us.

4. Why we use your information

We use personal data only where the law allows. The table below sets out what we do, and on what basis.

Purpose	What we use	Lawful basis
Responding to enquiries	Contact details, enquiry content	Legitimate interests – responding to people who approach us; or steps prior to entering a contract
Delivering our services to clients	Contact details, commercial information	Performance of a contract, or legitimate interests where the contract is with your employer
Organising trade fairs, missions, FAM trips and events	Contact, travel and dietary information	Performance of a contract; explicit consent for dietary, health and accessibility information
Sending market briefings, invitations and newsletters	Contact details, preferences	Consent, or legitimate interests for existing business contacts where we offer an opt-out in every message
Business development and market research	Professional contact details, organisation information	Legitimate interests – identifying organisations that may benefit from our services
Improving our website	Technical and usage data	Consent for analytics cookies; legitimate interests for security and core functionality
Recruitment	Application and CV information	Steps prior to a contract; legitimate interests in assessing suitability
Accounting, tax and record-keeping	Transaction and contact records	Legal obligation
Establishing or defending legal claims	Whatever is relevant to the matter	Legitimate interests, or legal obligation

Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights. You can ask us for a summary of that assessment at any time.

5. Marketing

We send market briefings, event invitations and occasional news to business contacts who have asked for them, and to people at organisations we already work with or have dealt with. Every message carries a one-click unsubscribe and we act on it immediately. We do not sell or rent our mailing list.

6. Who we share it with

• Other RECO offices where your enquiry or project involves more than one market.
• Service providers who work for us – website hosting, email and CRM platforms, IT support, professional advisers, accountants and auditors. They act on our instructions under a written contract.
• Event and travel partners – trade fair organisers, venues, caterers, airlines, hotels and ground operators, where we are making arrangements for you.
• Clients and buyers where the purpose of an event is to introduce you to them, and you have agreed to that introduction.
• Authorities and regulators where we are legally required to disclose.

We do not sell personal data and we do not share it for other organisations’ marketing purposes.

7. Sending information outside the UK and the EEA

RECO operates from six offices in five countries, so information may be accessed by colleagues outside the UK and the European Economic Area – in particular our offices in Hong Kong, Melbourne and Pune.

The European Commission confirmed in December 2025 that the United Kingdom continues to provide an adequate level of protection, so transfers between our UK and European offices need no additional safeguard. For our offices and suppliers in countries without an adequacy decision, we put in place the UK International Data Transfer Agreement or Addendum, or the European Commission’s standard contractual clauses, together with an assessment of the destination country.

You can ask us for a copy of the safeguards we use by writing to [projects@reco.co.uk].

8. How long we keep it

• Enquiries that do not become projects – up to two years from last contact.
• Client and supplier records – for the duration of the relationship and six years afterwards, for tax, accounting and limitation purposes.
• Event and travel records – up to two years after the event; passport and travel document details are deleted once the trip is complete.
• Marketing contacts – until you unsubscribe, or after a sustained period of no engagement.
• Unsuccessful job applications – twelve months, unless you ask us to keep you on file.
• Website analytics – in aggregate, per the retention setting of the tools listed in our Cookie Policy.

9. Keeping it safe

We use appropriate technical and organisational measures to protect personal data, including access controls, encrypted connections, managed devices, supplier due diligence and staff guidance. No system is completely secure, but we take these obligations seriously and we investigate any incident promptly.

10. Your rights

You have the right to:

• Be told how we use your information – that is what this policy is for.
• Access a copy of the personal data we hold about you.
• Correct anything inaccurate or incomplete.
• Erase your data where we no longer have a good reason to keep it.
• Restrict how we use it while a question about it is resolved.
• Object to processing based on legitimate interests, and to direct marketing at any time and without qualification.
• Portability – receive data you gave us in a machine-readable form.
• Withdraw consent where we rely on it, without affecting anything done beforehand.

To exercise any of these, contact [projects@reco.co.uk]. We respond within one month. There is no charge, unless a request is manifestly unfounded or excessive. We may ask you to confirm your identity first. We do not make decisions about you by automated means.

11. Complaints

If you are unhappy with how we have handled your information, please tell us first – we would rather put it right. You also have the right to complain to a supervisory authority.

United Kingdom	Greece
Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF ico.org.uk · 0303 123 1113	Hellenic Data Protection Authority Kifissias 1-3, 115 23 Athens dpa.gr · +30 210 647 5600

If you are in another country where we operate, you may also complain to your local supervisory authority.

12. Children

Our services and our website are directed at businesses and professionals. We do not knowingly collect information about anyone under eighteen.

13. Changes to this policy

We review this policy regularly and will post any updated version on this page with a new date. Where a change materially affects how we use your information, we will tell you directly.