Privacy Policy
How we collect, use, and protect your personal data
This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018. We will never sell your data to third parties.
1. Who We Are
Bille Advisory and Consultancy Services Ltd ("BACS", "we", "us", "our") is a company registered in England and Wales (Company No. 14679426). We are the data controller responsible for your personal data.
Contact: info@bacs-uk.com | bacs-uk.com
2. Data We Collect
Information you provide directly
- Name, email address, and telephone number (via contact forms)
- Organisation name and job title
- The content of messages or enquiries you send us
- Any documents or attachments you voluntarily submit
Information collected automatically
- IP address and browser type
- Pages visited and time spent on site (analytics, only with your consent)
- Referring website or search query
- Device and operating system information
3. How We Use Your Data
We process your personal data for the following purposes:
- To respond to enquiries — when you contact us via our website form or email
- To provide our services — fulfilling contractual obligations to clients
- To improve our website — using anonymised analytics data (with consent)
- To comply with legal obligations — including tax, anti-money laundering, and regulatory requirements
- Legitimate interests — protecting our business, preventing fraud
4. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Consent — for non-essential cookies and marketing communications
- Contract — to fulfil services you have engaged us for
- Legal obligation — to comply with UK law
- Legitimate interests — for business operations and security, where your interests do not override ours
5. How Long We Keep Your Data
- Enquiry data — 2 years from last contact, unless a contract arises
- Client data — 7 years from end of engagement (legal/tax requirements)
- Analytics data — anonymised; retained for up to 26 months
- Cookie preferences — 12 months
6. Sharing Your Data
We do not sell your personal data. We may share data with:
- Service providers — hosting, email, and analytics partners who process data on our behalf under strict data processing agreements
- Legal authorities — where required by law or to protect legal rights
- Professional advisers — solicitors, accountants, where necessary
Any third parties we use are required to keep your data secure and use it only as instructed by us.
7. International Transfers
We are a UK-based company and process data primarily within the UK. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V, including adequacy decisions or standard contractual clauses.
8. Your Rights
Under UK GDPR, you have the following rights:
- Right of access — to request a copy of your personal data
- Right to rectification — to correct inaccurate or incomplete data
- Right to erasure — to request deletion of your data in certain circumstances
- Right to restrict processing — to limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests or direct marketing
- Rights related to automated decision-making — we do not use automated decision-making or profiling
To exercise any of these rights, contact us at info@bacs-uk.com. We will respond within one calendar month.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data in transit.
10. Cookies
Our website uses cookies. For full details on what cookies we use and how to manage your preferences, please see our Cookie Policy.
11. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority:
Website: ico.org.uk | Helpline: 0303 123 1113
We would, however, welcome the opportunity to address your concerns directly before you approach the ICO — please contact us first at info@bacs-uk.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of our website following any update constitutes acceptance of the revised policy.