BBI Consultants
Privacy Policy

1. Who we are (data controller)

BBI Consultants Limited ("BBI", "we", "us" or "our") is the data controller for personal data collected via our website and in the course of providing our services.
Contact: info@bbiconsult.com
Registered office: 27 High Street, Graig, Pontypridd, Wales CF37 1QX, United Kingdom.
Company registration number: 16668793.

2. What this notice covers
This Privacy & Data Protection notice explains how we collect, use, share and protect personal data, and the rights you have in relation to your personal data.

This notice applies to visitors to our website and to individuals who contact us, subscribe to updates, or engage us for services (including representatives of corporate clients, suppliers and partners).

3. Personal data we collect

We may collect and process the following categories of personal data:

• Identity data: name, job title, employer/organisation and relationship to the business.
• Contact data: email address, telephone number, postal address.
• Business and engagement data: correspondence, meeting notes, service preferences, instructions, and information needed to provide services.
• Due diligence data (KYC/AML): identification documents and verification information as required by law or by third-party providers.
• Technical and usage data: IP address, device information, browser type/version, time zone setting, operating system, and how you use our website (where collected through cookies or similar technologies).
• Marketing preferences: your preferences in receiving marketing from us and your communication preferences.

4. How we collect personal data

• Directly from you when you contact us, request information, engage our services, or provide documents.
• From your organisation (for example, where you are a representative of a client or supplier).
• From third parties involved in delivering services (for example, registered agents, lawyers, accountants, banks) where necessary and lawful.
• Automatically via cookies and similar technologies when you browse our website (where enabled).

5. How we use your personal data (purposes and lawful bases)

We will only use personal data where we have a lawful basis under UK data protection law. Common lawful bases include:

• Performance of a contract: to provide services you request or to take steps at your request before entering into a contract.
• Legal obligation: to comply with legal and regulatory requirements (including KYC/AML and sanctions screening).
• Legitimate interests: to run our business, respond to enquiries, improve our services, prevent fraud, and ensure network and information security.
• Consent: where required (for example, certain marketing communications or non-essential cookies). You can withdraw consent at any time.

6. Marketing communications

We may send you marketing communications where permitted by law, including where you have requested information or where we have a legitimate interest in promoting our services to business contacts.

You can opt out of marketing at any time by using the unsubscribe link (where provided) or by contacting us at info@bbiconsult.com.

7. Sharing your personal data

We may share personal data with:

• Our professional advisers (for example, legal, tax, accounting or compliance advisers).
• Service providers who help us operate our business (for example, IT and email hosting providers such as Google Workspace).
• Third-party providers involved in delivering services you request (for example, company formation agents, registered agents, banks, notaries, lawyers, accountants and auditors).
• Authorities, regulators or law enforcement where we are required to do so by law.

Where we use processors, we require them to protect personal data and to use it only for specified purposes.

8. International transfers

Because we operate internationally, your personal data may be transferred to and processed in countries outside the UK. Where required, we will take appropriate safeguards (for example, using recognised transfer mechanisms and contractual protections) to ensure your personal data is protected.

9. Data security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage.
However, no method of transmission over the internet is completely secure. You should take care when sending sensitive information to us.

10. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

Retention periods vary depending on the nature of the information and the context in which it is collected. Where relevant, KYC/AML and engagement records may need to be retained for several years after an engagement ends.

11. Your rights

Under UK data protection law, you may have the right to:

• Request access to your personal data (a "subject access request").
• Request correction of inaccurate or incomplete personal data.
• Request erasure of your personal data in certain circumstances.
• Object to processing based on legitimate interests or direct marketing.
• Request restriction of processing in certain circumstances.
• Request the transfer of your personal data to you or to a third party (data portability) where applicable.
• Withdraw consent where we rely on consent (without affecting the lawfulness of processing before withdrawal).

To exercise your rights, contact us at info@bbiconsult.com. We may need to verify your identity before responding.

12. Cookies and analytics

Our website may use cookies and similar technologies. Cookies can be essential (necessary for the website to function) or non-essential (for example, analytics or advertising).

We currently operate without customer relationship management (CRM) software. If we implement analytics or advertising technologies (such as Google Analytics or Google Ads) in the future, we will provide (or update) cookie information and, where required, obtain your consent before placing non-essential cookies on your device.

You can also control cookies through your browser settings.

13. Children

Our website and services are not directed at children and we do not knowingly collect personal data relating to children.

14. Changes to this notice

We may update this notice from time to time. We encourage you to review it periodically for the latest information about our privacy practices.

15. How to complain

If you have concerns about how we use your personal data, please contact us at info@bbiconsult.com and we will try to resolve the issue.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).