Privacy Policy
How we collect, use, and protect your personal information.
Last updated: January 2024
Introduction
bamboo-echo is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you visit our website or engage our services.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
Information You Provide
When you contact us or request our services, we may collect:
- Name and job title
- Email address
- Company name and address
- Details about your security requirements
- Any other information you choose to share
Automatically Collected Information
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Pages visited and time spent
- Referring website
- Device information
How We Use Your Information
We use the information we collect to:
- Respond to your enquiries and provide requested services
- Prepare and deliver proposals and quotations
- Perform contracted security consulting services
- Send relevant communications about our services
- Improve our website and services
- Comply with legal obligations
Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract: To fulfil our contractual obligations to you
- Legitimate interests: To operate our business and improve our services
- Consent: Where you have given explicit consent for specific processing
- Legal obligation: To comply with applicable laws and regulations
Data Sharing
We do not sell your personal information. We may share data with:
- Service providers who assist our operations (under strict confidentiality agreements)
- Professional advisers such as lawyers and accountants
- Regulatory authorities when required by law
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, typically:
- Enquiry data: 2 years from last contact
- Client data: 7 years after completion of services (for legal and regulatory purposes)
- Website analytics: 26 months
Your Rights
Under UK data protection law, you have rights including:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data in certain circumstances
- Restriction: Request limited processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
To exercise these rights, contact us at [email protected]
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted communications, access controls, and regular security assessments.
International Transfers
Your data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK data protection law.
Changes to This Policy
We may update this privacy policy periodically. Significant changes will be communicated through our website or directly to you where appropriate.
Contact Us
For questions about this privacy policy or our data practices, please contact:
bamboo-echo
47 Thornbury Court
Birmingham, B15 2TH
[email protected]
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk