Last updated: Friday, February 24th, 2023

BPW.Design respects your data and privacy. This Privacy Notice will inform you as to how we look after your personal data when you visit our site and when you contact us. This Notice will also notify you about your privacy rights.

Throughout this Notice, we may refer to Data Protection Legislation, which means:

• the Data Protection Act 2018 (DPA 2018), United Kingdom General Data Protection Regulation (UK GDPR), The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) and any other legislation implemented within regulation or statutes; and 
• where any personal data is processed by a controller or processor established in the European Union and is governed by EU General Data Protection Regulation (EU GDPR).

This Privacy Notice covers the specific areas set out below:

1. Important information
2. What data do we collect and how do we use it
3. Purposes and change of purpose
4. Disclosures and sharing of your personal data
5. International Transfers
6. Data Security
7. Data Retention
8. Your data protection rights

1. Important information

Changes to this Notice:

• February 2023
  Reformat of previous documents into a new website Notice.

Purpose of this Privacy Notice:

This Privacy Notice aims to inform you on how BPW.Design collects and processes personal data which also includes any data we collect if you contact BPW.Design in respect of our services.

Controller & More Information:

BPW.Design is the data controller, and we are responsible for your personal data in relation to this Notice. We may collectively refer to BPW.Design as “we”, “us” or “our” in this Notice.

If you have any questions about this Privacy Notice, including any requests to exercise your legal rights, please contact us using the details set out below.

Contact Details:

For all enquiries, please use our contact form located here.

Making A Complaint:
We would always appreciate the opportunity to deal with any concerns that you have regarding data privacy, but you are within your rights to make a complaint directly at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

Their contact details are:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

Changes to this Privacy Notice and your own personal details:

If at any time we update this Notice, we will inform you via email (if we hold such details) and advise that you regularly review this Notice when you visit our website.

If we do hold any personal data about you, it is important that you keep us up to date if there are any changes, so we ensure that the data is accurate and current.

2. What data do we collect and how do we use it

a) Visiting our website:

When you visit a website, small data files are stored on your device to assist in its functionality to you as the user. These small data files are called cookies. They not only assist in its functionality but can also assist in the website’s security and provide marketing information to the website host; alongside visitor usage data.

The regulation around cookies states that we can store them on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we will need your permission.

Our website uses various types of cookies and some of them are placed on our pages by third-party providers.

You can alter or withdraw your consent from non-essential cookies by clicking Accept or Reject All on the cookie banner when you visit www.bpw.design, or, you can alter your preferences by clicking the icon at the bottom of each page at any time. More information can be found in our Cookie Notice here.

Legitimate Interests:

There are no legitimate interests in this section and our cookies and your consent to those cookies (excluding non-essential) are governed under Regulation 6 of PECR (The Privacy and Electronic Communications (EC Directive) Regulations 2003).

b) Contacting and communicating with us:

When you contact or engage us (either through our website, via email, our newsletter or by phone) we may store and use this data to provide you with communications to fulfil your query or request, or, to provide you with more information in relation to our services.

The information we may collect and use:

• Your full name
• Company name
• Company address, phone and other contact points
• Mobile phone number
• Email address

Legitimate Interests:

This processing is necessary to provide you with the information to fulfil your request about our work and mission or for the delivery and performance of any contract under Article 6(1)(a) and 6(1)(b) of the UK GDPR where applicable.

3. Purposes and change of purpose

We will only ever use your data for the purposes described in Section 2 unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose, or:

1. where national, federal, state or city regulations are of a higher requirement than UK GDPR; or
2. where national, federal, state or city regulations require a separate control or processing of personal data not covered in UK GDPR guidelines.

If we wish to process your personal data for an unrelated purpose not detailed in Section 2, we will request your explicit consent on the reason why we wish to perform this processing and the legal basis for that processing.

4. Disclosures and sharing of your data

We keep your information confidential but may disclose it to our personnel, suppliers or subcontractors (including payment service providers) insofar as it is reasonably necessary for the purposes set out in this Privacy Notice, provided that they do not make independent use of the information.

You may also disclose your personal data to other third-party organisations that are used by us:

• BARONCOURT:
  • Professional services and consultancy partner who provide various, third-party services to our clients. Their Privacy Notice can be found here.

We may also disclose your personal data without your knowledge or consent when required to do so by an Order in law, for example, disclosure to an authority such as the police.

5. International Transfers

We do not actively transfer your data outside of the UK or the wider EEA for any processing.

6. Data Security

We take the security of your data seriously and we work hard to ensure your data is not lost, accidentally destroyed, misused or disclosed and is not accessed except by its employees or subcontractors in the performance of their duties.

7. Data Retention

We will only retain your personal data for as long as is lawfully necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your data protection rights

Under data protection law, you have rights including:

• Your right to access
  You have the right to ask us for copies of your personal information.
  
• Your right to rectification
  You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure
  You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing
  You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing
  You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability
  You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights, however, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

If you make a request for any of the above data protection rights, we have one month to respond to you.