Privacy Policy

Introduction

This Privacy Policy explains how British Tech Connect Ltd. ("we", "us", "our", or "Company") collects, uses, discloses, and otherwise processes personal data in connection with our websites, services, and operations. We are committed to protecting your privacy and ensuring you understand our practices regarding the information we collect and how we use it.

British Tech Connect Ltd. is established in the United Kingdom and is responsible for personal data you provide to us. We comply fully with the UK General Data Protection Regulation (UK GDPR) and all applicable UK data protection legislation.

1. What Personal Data Do We Collect?

Contact Information

When you contact us via phone, email, contact form, or in person, we collect information you provide including your name, email address, phone number, company name, and any other information you include in your inquiry.

Service Engagement Information

When you engage us to provide services, we collect information about your business including details about your IT infrastructure, business processes, operational requirements, and other information necessary to understand your needs and deliver services.

Website Usage Information

We collect information about how you use our website through cookies and similar technologies, including pages visited, time spent on pages, links clicked, and referral information. This helps us understand how visitors use our site and improve our web presence.

Communications

We retain copies of emails, support tickets, and other communications between you and our team. This information is used to provide support, maintain service records, and improve our services.

Technical Information

When you visit our website, we automatically collect technical information including IP address, browser type, operating system, and device information. This helps us maintain our website security and ensure optimal performance.

2. Legal Basis for Processing Personal Data

We process personal data only where we have a legal basis to do so under UK GDPR. Our primary legal bases are:

• Contract: Processing necessary to provide services you've requested or engage with you regarding a potential engagement.
• Legal Obligation: Processing required to comply with legal obligations including financial record keeping, tax compliance, and professional standards.
• Legitimate Interest: Processing undertaken for legitimate business purposes including security, fraud prevention, responding to inquiries, and improving our services.
• Consent: Where appropriate, we seek your explicit consent before processing personal data, such as for marketing communications.

3. How Do We Use Your Personal Data?

We use the personal data we collect for the following purposes:

• Responding to your inquiries and providing information you request
• Providing IT consulting and technology services
• Administering our services and maintaining your account
• Delivering project deliverables and maintaining service records
• Improving our website, services, and customer experience
• Managing our business operations and internal administration
• Complying with legal obligations and regulatory requirements
• Preventing fraud and ensuring security of our systems and data
• Conducting business analysis and planning
• Communicating with you about our services
• Obtaining feedback and conducting customer satisfaction surveys

We only use your personal data for the purposes stated in this policy. If we wish to use your data for different purposes, we will seek your consent or provide updated privacy information.

4. Who Do We Share Your Data With?

We do not sell, trade, or rent your personal data. We may share your data with the following categories of recipients where necessary to provide our services:

• Service Providers: Third-party providers who assist us in delivering our services, including cloud infrastructure providers, software vendors, and professional consultants. These providers are bound by confidentiality obligations.
• Business Partners: Partners with whom we collaborate to deliver services to you, subject to appropriate data protection agreements.
• Legal Authorities: We may disclose information when required by law, court order, or government request, or when necessary to protect our rights or the rights of others.
• Successor Organisations: If we merge, acquire assets, or transfer our business, personal data may be transferred as part of the transaction.

Any third parties who receive your data are contractually required to maintain appropriate security and confidentiality, and to process data only for specified purposes consistent with this Privacy Policy.

5. How Long Do We Keep Your Data?

We retain personal data for the minimum period necessary to fulfil the purposes outlined in this policy. Retention periods vary depending on the type of information and the legal basis for processing:

• Service Clients: We retain service records during the engagement and for up to 6 years thereafter to comply with financial and professional standards.
• Inquiries: Information from inquiries is retained for 2 years to allow follow-up and maintain business records.
• Website Visitors: Cookie data is retained according to cookie settings, typically 12 months for analytical purposes.
• Communications: Email and support records are retained for at least 3 years.
• Marketing: Information for marketing purposes is retained until you request removal from our mailing list.

If you request deletion of your personal data, we will comply unless we have a legal obligation to retain it or a legitimate reason for retention.

6. International Data Transfers

Our operations are based in the United Kingdom and data is primarily processed within the UK. If we transfer personal data outside the UK, we implement appropriate safeguards including Standard Contractual Clauses or other legal mechanisms recognised under UK GDPR to ensure protection of your data at levels equivalent to UK requirements.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data, subject to legal requirements to retain it.
• Right to Restrict Processing: You can request that we limit how we use your personal data.
• Right to Data Portability: You can request that we provide your data in a machine-readable format.
• Right to Object: You can object to our use of your data for marketing or where processing is based on legitimate interest.
• Rights Related to Automated Decision Making: You have rights if we make decisions about you based solely on automated processing.

To exercise any of these rights, contact us at the address below. We will respond to your request within 30 days in accordance with UK GDPR requirements.

8. Information Security

We maintain rigorous security measures to protect your personal data against unauthorised access, modification, disclosure, or destruction. Our security practices include:

• Encrypted communications and data storage
• Access controls limiting employee access to necessary information only
• Regular security assessments and penetration testing
• Security awareness training for staff
• Incident response procedures for security breaches
• Secure physical facilities and access controls

While we implement comprehensive security measures, no system is completely secure. We encourage you to protect your passwords and notify us immediately of any security concerns.

9. Cookies and Tracking Technologies

Our website uses cookies to enhance your experience. For details about cookies, types of cookies we use, and how to control cookie settings, please refer to our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any sites you visit.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete the information promptly.

12. Data Breach Notification

In the event of a personal data breach that poses a risk to individuals, we will notify affected individuals and the UK Information Commissioner's Office as required by UK GDPR within 72 hours of discovering the breach.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will provide notice of material changes via email or through a prominent notice on our website. Your continued use of our services following publication of updates constitutes acceptance of the updated policy.

14. Contact Information

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have privacy concerns, please contact us:

British Tech Connect Ltd.
Unit 7, Innovation House
210 Piccadilly
Manchester, M1 1AD
Greater Manchester
United Kingdom

Phone:
Email: info@britishtechconnect.co.uk

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we are not processing your data in compliance with UK GDPR. More information is available at www.ico.org.uk.