Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Catch (catch.com.au) is a major Australian e-commerce marketplace. When integrated via embed widgets, affiliate tracking, or marketplace seller tools on European websites, it sets tracking cookies and processes customer data on Australian infrastructure. Australia does not have an EU adequacy decision, requiring Standard Contractual Clauses for transfers. Marketing cookies and non-essential tracking require prior consent.
Catch (catch.com.au) is one of Australia''s largest e-commerce marketplaces, owned by Wesfarmers. It offers a wide range of consumer products and provides a marketplace platform for third-party sellers. When integrated into European websites through affiliate widgets, product feed embeds, or seller tools, it introduces Australian data processing into the EU website''s data flow.
When a Catch widget or affiliate link is loaded on a European website, Catch collects visitor IP addresses, browser and device information, click and referral data, and any product interaction events. For purchases made through Catch, it processes customer name, address, payment information, and order history on its Australian infrastructure.
Australia does not have an EU adequacy decision under GDPR. Transfers of EU personal data to Australian infrastructure require Standard Contractual Clauses under GDPR Article 46. This applies when European visitor data (including IP addresses from widget loading) is sent to Catch''s Australian servers.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Consent is required before Catch tracking scripts or widgets load under the ePrivacy Directive. For purchase data, contract performance provides the legal basis for processing customer order data. Marketing cookies and affiliate tracking require prior consent. Privacy notices must disclose the Australian data transfer.
All Catch data is processed in Australia, which requires SCCs. Catch is regulated by the Australian Privacy Act. Sign a DPA or data transfer agreement with Catch and document the Australia transfer in your RoPA.
Block Catch widgets until consent is obtained. Disclose the Australia transfer in your privacy policy. Sign a DPA or transfer agreement with Catch. Update your cookie policy. Document the Australia transfer in your RoPA. For affiliate integrations, verify the transfer mechanism with Catch directly.
Websites using Catch must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is advisable when Catch marketplace integrations process large volumes of European customer data, particularly if combined with behavioural profiling or retargeting integrations that build individual customer profiles.
Sample consent text
This site integrates with Catch (catch.com.au), an Australian e-commerce marketplace. Catch may set tracking cookies and process interaction data on servers in Australia. Please accept to enable marketplace features and product listings.
Third-party domains contacted
catch.com.aus.catch.com.auapi.catch.com.auCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| catch_uid | persistent | 1 year | Visitor identifier used by Catch for affiliate tracking and product interaction attribution |
| catch_ref | session | Session | Referral attribution cookie tracking the affiliate source of the current visitor session |
Catch uses cookies for user preferences — inform visitors with a consent banner.
When Catch widgets or affiliate links load on a website, Catch sets tracking cookies to identify visitors, attribute referrals, and track product interactions. These are non-essential cookies requiring ePrivacy consent before they load.
Yes for tracking cookies and affiliate tracking scripts. For purchase data, contract performance applies. All Catch widget or affiliate link implementations that load JavaScript tracking require prior consent and disclosure of the Australian data transfer.
Contract performance (Art. 6(1)(b)) for customer order data. Consent (Art. 6(1)(a)) for marketing tracking cookies and affiliate attribution scripts. The Australian data transfer requires Standard Contractual Clauses.
Yes, to Australia. Australia does not have an EU adequacy decision. Standard Contractual Clauses are required. Contact Catch to confirm transfer mechanisms and sign a data transfer agreement covering EU personal data.
A DPIA is advisable for large-scale Australian marketplace integrations processing EU customer data, particularly when combined with behavioural tracking or retargeting systems.
Block Catch tracking scripts until consent is obtained. Disclose the Australia transfer in your privacy policy. Sign a data transfer agreement with Catch. Update your cookie policy. Document the Australia transfer in your RoPA.
For EU-based marketplaces, Zalando, Otto, and Fnac provide EU-hosted alternatives. For affiliate marketing specifically, EU-based affiliate networks like Awin and Tradedoubler process affiliate data within the EU, eliminating Australian transfer concerns.
State that Catch.com.au is an Australian marketplace integrated for product listings or affiliate tracking, that Catch processes interaction and referral data in Australia, that Australia does not have an EU adequacy decision, that Standard Contractual Clauses are the applicable transfer mechanism, and provide a link to Catch's privacy policy.