Privacy notice

Who we are

Bidfins Limited · Registered in England & Wales · Company no. 16640626. Bidfins Limited is the data controller for personal data processed through bidfins.com and for correspondence sent to us at bidfinsco@gmail.com. You can reach us about anything in this notice at that address.

What this website collects

This is a static website. It sets no cookies, runs no analytics or advertising scripts, embeds no third-party trackers, and loads no fonts, images or scripts from other companies' servers. We do not build profiles of visitors and we cannot identify you from a visit.

Our hosting provider, Cloudflare, Inc., automatically records standard technical information when a page is requested — including IP address, request time, page requested, browser type and referring page. These logs exist to deliver the site, defend it against attack and diagnose faults. Cloudflare processes this data on our behalf under a data processing agreement, and we do not use it to identify individuals.

What we collect when you contact us

If you email us, we receive your email address, your name where you give it, and whatever else your message contains. Our email is provided by Google (Gmail), which processes and stores that correspondence on our behalf. We ask that you do not send special category data, financial details or other sensitive information by unencrypted email.

We use that information only to:

• read, assess and reply to your enquiry;
• keep a record of what was discussed and agreed;
• meet a legal, contractual or accounting obligation where one applies.

Lawful basis

• Legitimate interests — responding to enquiries, keeping records of business correspondence, and keeping this website secure and available. We have considered your interests and rights and believe this processing is what you would reasonably expect.
• Steps prior to entering a contract — where your enquiry concerns work you are asking us to quote for or carry out.
• Legal obligation — where we have to retain records, for example for tax and company law purposes.

How long we keep it

Enquiries that do not lead to work are deleted within 24 months. Correspondence connected to an engagement is kept for the life of that engagement and for six years afterwards, to meet UK limitation-period and accounting requirements. Hosting logs are retained by Cloudflare for a short period in line with their standard retention.

Who we share it with

We do not sell personal data, share it for advertising, or pass it to third parties for their own purposes. We use a small number of service providers who process data on our instructions:

• Cloudflare, Inc. — website hosting and network security;
• Google LLC — email;
• professional advisers, accountants or authorities where we are required to disclose information by law.

Some of these providers operate outside the United Kingdom. Where personal data is transferred internationally, it is protected by UK adequacy regulations or by the International Data Transfer Agreement or Addendum, together with appropriate technical safeguards.

Security

The site is served over HTTPS. Access to our email and business systems is restricted to the people who need it, protected by strong authentication, and reviewed periodically. No system is perfectly secure, but we take the measures appropriate to the sensitivity of the data we hold.

Your rights

Under the UK GDPR you have the right to:

• ask what personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• ask for data to be erased, where no overriding obligation requires us to keep it;
• ask us to restrict processing, or object to processing based on legitimate interests;
• request portability of data you provided to us;
• withdraw consent at any time, where processing relies on consent.

Email bidfinsco@gmail.com with "Data protection request" in the subject line and we will respond within one month.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18 through this site.

Changes to this notice

We update this notice when our processing changes. The date at the top of the page always shows when it was last revised; material changes will be reflected there.