01Who we are

BVS Digital is a limited company registered in England & Wales (company number 15280722), with its office at Churchill House, 120 Bunns Lane, London NW7 2AS, UK. We are the data controller for the personal information described in this policy, which we handle in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Our website is bvsdigital.co.uk. For any privacy question, email info@bvsdigital.co.uk.

02Information we collect

• Enquiries: when you use our contact form or email us, we collect your name, email address, subject and message, plus anything else you choose to share.
• Clients and business records: When we work together, we collect and hold contact details for you and your colleagues, project and contractual information, and billing or invoicing details. We receive this directly from you or your organisation, separately from our website – for example by email, during client onboarding or through our accounting processes. We use it to deliver our services, manage our relationship with you, issue invoices and keep the business and accounting records the law requires.
• Website usage: pages visited, device and browser type, approximate location, referring site and IP address, collected through analytics and security tools.
• Messaging: if you contact us through WhatsApp or social media, we receive the details you send through that platform.

You do not have to give us your information, but without it we may not be able to reply to your enquiry or provide our services. Our website is not aimed at children and we do not knowingly collect their information. We do not ask for special category data (such as health information) and ask you not to send it.

03How we use it

• To reply to your enquiry and provide quotes or proposals.
• To deliver, manage and invoice the services we provide.
• To understand how our website is used and improve it.
• To protect our website against spam, fraud and security threats.
• To meet our legal, accounting and tax obligations.
• To send occasional marketing emails about our services, insights and offers (see “Marketing emails” below).

04Marketing emails

We sometimes send marketing emails about our services, insights and offers. We only send them where:

• you have given us your consent, for example by asking to receive updates; or
• you are an existing client or have asked us about our services, and we are telling you about similar services of our own (the “soft opt-in” under PECR). We always give you a chance to opt out when we first collect your details.

Every marketing email includes a simple unsubscribe link, or you can email info@bvsdigital.co.uk at any time. We will stop promptly and keep a record so we don’t contact you again. We never sell or share your details with other companies for their own marketing.

05Our lawful bases

We only use your information where the law allows. We rely on:

• Contract – to provide services you have asked for, or to take steps at your request before entering a contract.
• Legitimate interests – to answer enquiries, run and secure our business and improve our website, where these interests are not outweighed by your rights.
• Legal obligation – for example, keeping financial records.
• Consent – for analytics and marketing cookies, and for marketing emails where we do not rely on the soft opt-in. You can withdraw consent at any time.

06Cookies and analytics

Our website uses a small number of cookies and similar technologies:

• Essential: needed for the site to work and stay secure, including caching and security protection. These do not require consent.
• Analytics: Google Analytics and Google Tag Manager help us understand how visitors use the site. We use this information in aggregate and do not use it to identify you.
• Spam protection: Google reCAPTCHA checks that contact form submissions come from people, not bots.
• Third-party content: embedded content such as Trustpilot reviews, WhatsApp chat or social media links may set their own cookies, governed by those providers’ policies.

When you first visit, a cookie banner asks for your choice. Analytics and marketing cookies stay off unless you accept them – “Reject all” is as easy as “Accept all”. We use Google Consent Mode, so Google tags do not set analytics or advertising cookies unless you agree. Your choice is remembered for 6 months in a small essential cookie called bvs_consent. You can change your mind at any time using Cookie settings (also in the website footer), or block and delete cookies in your browser settings.

07Who we share it with

We never sell your personal information. We share it only with trusted providers who help us run our business – such as website hosting, email, analytics, spam protection and accounting services – and only as far as they need it. These providers act on our instructions and must keep your information secure. We may also disclose information where the law requires it, or to protect our rights, property or safety.

08International transfers

Some providers, such as Google, may process data outside the UK. Where this happens we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

09How long we keep it

• Enquiries that do not become projects: up to 24 months after our last contact.
• Client and billing records: 6 years after the end of the financial year they relate to, as UK tax law requires.
• Analytics data: in line with our Google Analytics retention settings.

After these periods we securely delete or anonymise the information.

10Keeping it secure

We use appropriate technical and organisational measures to protect your information, including encrypted connections (HTTPS), security monitoring and firewall protection on our website, and access controls within our team. If a data breach is likely to put your rights at risk, we will tell you and the ICO as the law requires.

11Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you;
• ask us to correct anything that is inaccurate or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it;
• object to us using your information based on legitimate interests, and to stop direct marketing at any time;
• ask for a copy of your information in a portable format;
• withdraw consent at any time, where we rely on consent.

To use any of these rights, email info@bvsdigital.co.uk. There is usually no charge, and we will respond within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113 – though we would appreciate the chance to put things right first.

12Automated decisions

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.

13Other websites

Our website links to other sites, such as Trustpilot, LinkedIn, Facebook and client websites. We are not responsible for their privacy practices, so please read their policies when you visit them.

14Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.

15Contact us

BVS Digital, Churchill House, 120 Bunns Lane, London NW7 2AS, UK
Email: info@bvsdigital.co.uk