Privacy Notice
BSSB Consultancy Ltd ("we", "us") is the data controller for personal data collected through this website and in the course of our consultancy work. We are registered with the Information Commissioner's Office under registration number [INSERT ICO REGISTRATION NUMBER].
What we collect: names, job titles, business contact details, enquiry content, identity verification documents for new clients, billing details and correspondence.
Why we use it, and our lawful basis:
- To respond to enquiries – legitimate interests
- To deliver consultancy services – performance of a contract
- To verify client identity and prevent fraud – legal obligation and legitimate interests
- To issue invoices and keep accounting records – legal obligation
- To send service updates you have asked for – consent, which you may withdraw at any time
Sharing: we share data only with service providers who support our business (such as IT, email hosting and accountancy providers), under written agreements, or where required by law. We do not sell personal data.
International transfers: where data is processed outside the UK, we use appropriate safeguards such as the UK International Data Transfer Agreement.
Retention: client and financial records are kept for six years after the end of the engagement. Enquiries that do not lead to work are deleted after 12 months.
Your rights: you may request access to, correction or erasure of your data, restrict or object to its use, or ask for data portability. Contact [INSERT EMAIL ADDRESS]. You can also complain to the Information Commissioner's Office at ico.org.uk.