Check before launch. This notice describes what the site actually does today. If you add analytics, embedded media or a CRM, update it — and add your registered company details and ICO registration number below.
Who we are
Bespoke Business Solutions (BBS) operates https://bbstech.co.uk. For anything about your data, email hello@bbstech.co.uk.
What we collect
Only what you type into the contact form: your name, company, email address, optional phone number, the nature of your enquiry, an optional budget range, and your message. We also record the IP address the message was sent from, to help us spot automated abuse.
We do not use analytics, advertising or third-party tracking on this site.
If you have a client account, we also hold your name, email address, optional phone number and job title, your company's billing details, and what you do in the client area: bookings, support tickets and replies, invoices and payments, and project progress. For security we keep a record of sign-ins (time, IP address and browser), and a log of important account actions.
Why we collect it
To answer your enquiry and, if it goes further, to discuss and deliver work for you. The lawful basis is our legitimate interest in responding to people who contact us about our services.
Client account data is used to provide the services you have engaged us for, to bill for them and to support you. The lawful basis is the performance of our contract with you, and our legal obligations for financial records. Sign-in and audit records are kept under our legitimate interest in keeping accounts secure.
Cookies
One cookie, set only when you use the contact form. It holds a session identifier used to protect the form against cross-site request forgery. It is not used for tracking and expires when you close your browser.
If you sign in to the client area, a second cookie keeps you signed in. It holds a random identifier, not your details, and ends when you sign out or after a period of inactivity. Neither cookie is used for tracking.
Who sees it
Enquiries are delivered by email to our own inbox. Our email provider processes the message in transit. We do not sell your details or share them for marketing.
Our staff can use an AI assistant (Claude, provided by Anthropic) to help draft replies and summarise work. When they do, the relevant records, such as a support ticket thread, account details or project status, are sent to Anthropic to generate the response. Anthropic processes that data on our behalf and does not use it to train its models. Nothing is sent to you automatically: a person reviews every reply.
How long we keep it
Enquiries that do not lead to work are deleted within 12 months. Correspondence relating to work we carry out is kept for as long as we need it for that engagement and our legal and accounting obligations.
Client account data is kept while your account is open and for up to six years after our last engagement, which is how long UK law requires us to keep financial records. Server performance data is deleted after seven days.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct or delete it, or object to how we use it. Email hello@bbstech.co.uk and we will respond within one month. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
The site is served over HTTPS. Form submissions are rate limited and protected against cross-site request forgery.
Client area passwords are stored only as strong one-way hashes (Argon2id). Our staff accounts require two-factor authentication, and you can turn it on for yours. Your data is stored on our own server, in a database that is not reachable from the internet.