Privacy Policy
1 Introduction
1.1 This Privacy & Cookie Policy will apply to all website visitors and service users who interact with the Platform by Bridge GB LP (“BG”) (registered in England and Wales with company number 14401477). BG is committed to safeguarding the privacy of our website visitors and service users.
1.2 This policy applies where we are acting as a data controller concerning the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data.
1.3 By using our website and agreeing to this policy, you consent to our use of cookies following the terms of this policy.
1.4 Our website incorporates privacy controls which affect how we will process your personal data. By using the privacy controls, you can specify how you would like to receive direct marketing communications and limit the publication of your information.
1.5 In this policy, “we” and “us” refer to Bridge GB LP. For more information about us, see Section 15.
2 How BridgeGB uses your personal data
2.1 In this Section 2 we have set out:
(a) the general categories of personal data that we may process;
(b) in the case of personal data that we did not obtain directly from you, the source and specific categories of that data;
(c) the purposes for which we may process personal data; and
(d) the legal bases of the processing.
2.2 We may process data about your use of our website and services (“usage data”). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use.
2.3 We will also use your personal data, such as full name, bank detail information to process your payment .
2.4 Payment data-processing providers are:
Stripe (ADD DETAILS)
We have ensured to the best of our knowledge that their data-handling procedures are GDPR compliant & follow the best data practice approach; we do not accept liability for data mismanagement by any 3rd party provider which the website user has opted in to pass on their details to. The source of the usage data is our analytics tracking system. This usage data may be processed to analyse the use of the website and services. The legal basis for this processing is consent OR our legitimate interests, namely monitoring and improving our website and services OR to fulfil our Contract OR Legal Obligations.
2.5 We may process your account data (“account data”). The account data may include your name and email address. The source of the account data is you or your employer. The account data may be processed to operate our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases & communicating with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and the performance of a contract between you and us or taking steps, at your request, to enter into such a contract.
2.6 We may process your information included in your personal profile on our website (“profile data”). The profile data may include your name, address, telephone number, email address, profile pictures, gender, date of birth, relationship status, interests and hobbies, educational details and employment details. The profile data may be processed to enable and monitor your use of our website and services. The legal basis for this processing is consent OR our legitimate interests, namely the proper administration of our website and business OR the performance of a contract between you and us and taking steps, at your request, to enter into such a contract.
2.7 We may process your personal data that are provided in the course of the use of our services (“service data”). The source of the service data is you or your employer. The service data may be processed to operate our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract OR Legal obligation to store a record OR our legitimate interests, namely the proper administration of our website and business.
2.8 We may process information that you post for publication on our website or through our services (“publication data”). The publication data may be processed to enable such publication and administering our website and services. The legal basis for this processing is consent OR our legitimate interests, namely the proper administration of our website and business OR the performance of a contract between you and us or taking steps, at your request, to enter into such a contract.
2.9 We may process information contained in any enquiry you submit to us regarding goods and/or services (“enquiry data”). The enquiry data may be processed for the purposes of offering, marketing and selling relevant goods and/or services to you. The legal basis for this processing is consent.
2.10 We may process information relating to transactions, including purchases of goods and services, that you enter into with us and/or through our website (“transaction data”). The transaction data may include your contact details and the transaction details, but we do not process your card details – it is done via our 3rd party providers: Stripe. The transaction data may be processed for the purpose of supplying the purchased goods and services and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely our interest in the proper administration of our website and business.
2.11 We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters (“notification data”). The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is consent for marketing newsletters and the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract for non-marketing information.
2.12 We may process information contained in or relating to any communication that you send to us (“correspondence data”). The correspondence data may include the communication content and metadata associated with the communication. Our website will generate the metadata associated with communications made using the website contact forms. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users.
2.13 We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
2.14 We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks.
2.15 In addition to the specific purposes for which we may process your personal data set out in this Section 3, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Please do not supply any other person’s personal data to us, unless we prompt you to do so.
Information obtained by us from third parties in accordance with this Privacy Policy. For example, if you chose to list your business with us, we may collect additional information from credit reference agencies as a supplementary source.
As is true of most websites, we gather specific information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information, to analyse trends, to administer Our Site, to track users’ movements around Our Site and to gather demographic information about our user base as a whole.
For Marketing & admin notification purposes, we may from time to time use your personal information to send you automated email messages or marketing materials regarding our services and the services of third party suppliers, in each case with your prior consent. These email messages may contain features that help us make sure you received and were able to open the message. You may opt out of receiving such marketing email messages at any time, free of charge, by replying to the message with “unsubscribe” in the subject line, or by following the instructions in any marketing communication.
When you contact us, we may intercept, record or monitor any communication(s) (including telephone calls or other electronic communications) between you and us. We may do so to resolve queries in the future and to ensure security, staff training and complying with our regulatory and legal responsibilities. For legitimate interest bases, e.g. for staff training purposes, you will be notified beforehand that the data will be used such way. In the case of communications by email you should note that, as emails are not encrypted outside of BridgeGB (and may, therefore, be intercepted by third parties) and as the identity of the sender cannot be confirmed, you must NOT provide your security details by email and should avoid providing any Personal Data to us by email.
3 Providing your personal data to others
3.1 We may disclose your personal information to companies and individuals who perform business functions and services on our behalf. Such functions may include hosting the Sites, analysing data and providing other support services. All such parties will be required to keep your personal data secure and only process it following our terms of use. Please see our Terms & Conditions.
We may also disclose your personal information if, in our opinion, a disclosure is required by law.
3.2 We may disclose your personal data to our insurers or professional advisers insofar as reasonably necessary to obtain or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or an administrative or out-of-court procedure.
3.3 We may disclose your enquiry data to one or more of those selected third-party suppliers of goods and services identified on our website or in our email communications, for the purpose of enabling them to contact you so that they can offer, market and sell to your relevant goods and/or services – if you give us the consent to do that. Each such third party will act as a data controller about the enquiry data that we supply to it; and upon contacting you, each such third party will supply to you a copy of its privacy policy, which will govern that third party’s use of your personal data.
3.4 In addition to the specific disclosures of personal data set out in this Section 4, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or an administrative or out-of-court procedure.
4 International transfers by BridgeGB of your personal data
4.1 In this Section 4, we provide information about the circumstances in which your personal data may be transferred to countries outside the European Economic Area (EEA).
4.2 Our other group companies and we have offices and facilities in the UK and EU. The European Commission has made an “adequacy decision” concerning the data protection laws of each of these countries. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission, a copy of which can be obtained from info@bridgegb.com.
4.3 The hosting facilities for our website are situated in the EU. The European Commission has made an “adequacy decision” concerning the data protection laws of each of these countries. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission, a copy of which you can obtain from info@bridgegb.com.
5 Retaining and deleting personal data
5.1 This Section 5 sets out our data retention policies and procedure, which are designed to help ensure that BridgeGB complies with our legal obligations concerning the retention and deletion of personal data.
5.2 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
5.3 We will retain your personal data as follows:
personal data category or categories will be retained for a minimum period of 1 year following the date of when you supply us with your personal data, and for a maximum period of 5 years following the end date of commercial engagement with you. That timeframe is mostly made to comply with regulatory obligations we have for record-keeping.
5.4 In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention based on the following criteria:
the period of retention of personal data will be determined based on purchase history
5.5 Notwithstanding the other provisions of this Section 6, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or to protect your vital interests or the vital interests of another natural person.
6 Amendments
6.1 BridgeGB may update this policy from time to time by publishing a new version on our website. You will be notified of any significant changes to this policy via email and website notifications.
6.2 You should check this page occasionally to ensure you are happy with any changes to this policy.
6.3 We may notify you of changes to this policy by email or through the website notifications system for any major changes.
7 Your rights
7.1 You may instruct us to provide you with any personal information we hold about you; provision of such information will be subject to:
the zero-payment fee, which may become £20 per enquiry, if the requests are considered to be manifestly unfounded or excessive, in particular because they are repetitive (see the ICO guidance for the explanation)
7.2 We may withhold personal information that you request to the extent permitted by law.
7.3 You may instruct us at any time not to process your personal information for marketing purposes. This can be done via the subscription centre (accessed via any of our marketing newsletter communications) or in your profile settings & preferences on our website. You can also email info@bridgegb.com with such a request – although using the website or subscription centre would imply more quicker results.
7.4 In practice, you will usually either expressly agree in advance to our use of your personal information for marketing purposes, or we will provide you with an opportunity to opt out of the use of your personal information for marketing purposes. You would have used a positive opt-in to give us consent to contact you for the marketing content you have agreed to, via communication channels you have agreed to.
8 Your rights
8.1 In this Section, BridgeGB has summarized the rights that you have under the GDPR. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights (If you are UK based, you should review the guidance provided by the ICO: https://ico.org.uk).
8.2 Your principal rights under data protection law are, as defined by the ICO:
The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to objectRights in relation to automated decision making and profiling.
8.3 You have the right to confirmation as to whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee. You can access your personal data by visiting bridgegb.com and logging into our website.
8.4 You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.
8.5 In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.
8.6 In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are: you contest the accuracy of the personal data; processing is unlawful, but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defence of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.
8.7 You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
8.8 You have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.
8.9 You have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
8.10 To the extent that the legal basis for our processing of your personal data is:
(a) consent; or
(b) that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.
8.11 BG seeks to avoid complaints by providing good service in a fair and clear way. BG always seek to resolve your queries or dissatisfaction promptly and amicably without recourse to formal complaints and BG respectfully requests to be given a fair opportunity to do so before making any formal complaint to BG and before entering any formal external complaint process. BG would be pleased to meet with you by appointment and at your convenience to discuss your distress, where possible; please contact
info@bridgegb.com
so we can consult you on any issue and resolve it to the best of our ability.
8.12 In making any complaint or raising any matter prior to making a formal complaint, you agree to provide BG with all evidence that we request in support of your claim so that we can try to resolve the matter promptly. You agree to properly consider the agreement between the two parties (including these T&Cs) and relevant regulations.8.13 If having followed the above procedures you remain dissatisfied and would like to make a formal complaint, please write to:
Data Protection Officer, Bridge GB LP, 23-25 Montagu Street, London, W1H 7EZ
or
E-mail: info@bridgegb.com
8.14 BG may contact you directly to discuss the complaint and you accepts that to co-operate and attempt to resolve matters in a reasonable and amicable way.
8.15. Complaints must be made by you only in case you are a client of BG or directly affected by the issue. BG will not accept complaints on your behalf made by a third party or adviser. Full details of our complaints procedures will be made available on request.
8.16 BG will deal with issues raised expeditiously and where necessary, call upon evidence and take such action as it deems appropriate in the circumstances.
8.17 If you are still dissatisfied in the matter in which the complaint is addressed, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection, if you are unsatisfied with how we processed your enquiry. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
More information on the Information Commissioner Officer (ICO) can be found https://ico.org.uk.
8.18 To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
8.19 You may exercise any of your rights in relation to your personal data by written notice to us, sending us an email to info@bridgegb.com , calling our main office number & asking to speak to our Data Security Officer or in person. When using the latter two channels of contact, please ensure that your request has been lodged by our staff member & staff member is acknowledged of your enquiry as a lawful request.
8.20 Your statutory and regulatory rights remain unaffected.
9 About cookies and tracking
9.1 A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
9.2 Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
9.3 Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
10 Cookies and tracking that BridgeGB use
10.1 BridgeGB use cookies for the following purposes:
(a) authentication – we use cookies to identify you when you visit our website and as you navigate our website; it is essential for a proper functionality of some of the website parts.
(b) status – we use cookies to help us to determine if you are logged into our website;
(c) personalization – we use cookies to store information about your preferences and to personalize the website for you;
(d) security – we use cookies as an element of the security measures used to protect user accounts, including preventing fraudulent use of login credentials, and to protect our website and services generally;
(e) advertising – we use cookies to help us to display advertisements that will be relevant to you;
(f) analysis – we use cookies to help us to analyse the use and performance of our website and services; and
(g) cookie consent – we use cookies to store your preferences in relation to the use of cookies more generally.
10.2 Technologies such as: cookies, beacons, tags and scripts are used by Bridge GB LP and our partners, including marketing partners affiliates, or analytics service providers and business process service providers. These technologies are used in analysing trends, administering Our Site, tracking users’ movements around Our Site and to gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.
10.3 We use cookies for to estimate our audience size and usage pattern; to store information about your preferences, and so allow us to customise Our Site according to your individual interests; to speed up your searches, and to recognise you when you return to Our Site. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use Our Site, but your ability to use some features or areas of Our Site may be limited.
10.4 We partner with third-party ad networks to either display advertising on Our Site or to manage our advertising on other sites. Our ad network partner uses cookies and Web beacons to collect non-personal data about your activities on this and other Web sites to provide you targeted advertising based upon your interests. If you wish not to have this information used to serve you targeted ads, you may opt-out by clicking below. Please note this does not opt you out of being helped to advertise. You will continue to receive generic ads.
http://www.networkadvertising.org/managing/opt_out.asp
10.5 Local Storage Objects (Flash/HTML5): Third parties with whom we partner to provide specific features on Our Site or to display advertising based upon your Web browsing activity use LSOs such as HTML 5 or Flash to collect and store information.
Various browsers may offer their management tools for removing HTML5 LSOs. To manage Flash LSOs, please click here:
http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html
11 Cookies used BridgeGBs service providers
11.1 Our service providers use cookies, and those cookies may be stored on your computer when you visit our website.
11.2 We use Google Analytics to analyse the use of our website. Google Analytics gathers information about a website using cookies. The information gathered relating to our website is used to create reports about the use of our website. Google’s privacy policy is available at https://www.google.com/policies/privacy/.
12 Managing cookies
12.1 Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can, however, obtain up-to-date information about blocking and deleting cookies via these links:
(a) https://support.google.com/chrome/answer/95647?hl=en (Chrome);
(b) https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);
(c) http://www.opera.com/help/tutorials/security/cookies/ (Opera);
(d) https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);
(e) https://support.apple.com/kb/PH21411 (Safari); and
(f) https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).
12.2 Blocking all cookies will have a negative impact upon the usability of many websites, including BridgeGB. If you want to opt out of marketing-only & tracking cookies, we suggest that you opt out of non-essential cookies only.
12.3 If you block all cookies, you will not be able to use all the features on our website.
13 Security
13.1 All information you provide to us via email or Our Site is stored on our secure servers.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of Our Site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
13.2 The security of your data is important to us. When you enter sensitive information (such as bank account information) on our order forms, we encrypt the transmission of that information using secure socket layer technology (SSL).
We follow generally accepted standards to protect the personal data submitted to us, both during transmission and once we receive it. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. Our website is scanned on a regular basis for security holes and known vulnerabilities to make your visit to our site as safe as possible. We use regular Malware Scanning. All transactions are processed through a gateway provider and are not stored or processed on our servers. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security. If you have any questions about security on Our Site, you can contact us at info@bridgegb.com.
14 ADDITIONAL PRIVACY INFORMATION
14.1 If you choose to use our referral service to tell a contact about Our Site, we will ask you for your contact’s name and email address. You must have consent from your contact to provide this information to us. We will automatically send your contact a one-time email inviting him or her to visit the site. BridgeGB store this information for the sole purpose of sending this one-time email and tracking the success of our referral program.
Your contact may contact us at info@bridgegb.com to request that we remove this information from our database.
14.2 Our Site may, from time to time, contain links to and from the websites of our suppliers, partner networks, advertisers, affiliates and other third parties. If you follow a link to any of these websites, please note that these websites should have their privacy policies and we do not accept any responsibility or liability for these policies or the content or operation of these websites. Please check these policies and the terms of the websites before you submit any personal data to these websites.
14.3 Our Site includes Social Media Features, such as the Facebook Like button. These Features may collect your IP address, which page you are visiting on Our Site, and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on Our Site. Your interactions with these Features are governed by the privacy policy of the company providing it.
15 Our details:
15.1 This website is owned and operated by Bridge GB LP.
15.2 We are registered in England and Wales under Company Registration Number: LP023251, and our registered office is at 23-25 Montagu Street, London, W1H 7EZ.
15.3 Our principal place of business is at 23-25 Montagu Street, London, W1H 7EZ.
15.4 Questions, comments and requests regarding this privacy policy are welcomed and should be addressed:
(a) by email, using the email address published on our website from time to time: info@bridgegb.com, or
(b) using our website contact form; or
(c) by post, to the principal place of the postal business address given above.