Privacy Policy

This notice explains how BMS Cyber Defence Ltd collects and uses personal data when you visit this website or contact us.

Who we are

BMS Cyber Defence Ltd (company no. 14975379) is the controller of the personal data described in this notice. BMS Cyber Defence Ltd, 254 Holyhead Road, Wellington, Telford, Shropshire, TF1 2EB. Email: admin@bmscyberdefence.co.uk.

What we collect

When you use our contact form we collect your name, email address, and anything else you choose to give us: company name, phone number and the details of your enquiry.

When you use our live chat we collect the messages you send and any contact details you give us.

When you email us we collect your email address and whatever you include in your message.

Our hosting provider automatically processes technical data such as your IP address and browser details to deliver the website and protect it from attack. We do not use analytics or advertising trackers.

How we use it and our lawful basis

• To reply to your enquiry and discuss our services. Lawful basis: legitimate interests, or steps taken at your request before entering into a contract.
• To deliver services you have engaged us for. Lawful basis: performance of a contract.
• To keep the website secure and available. Lawful basis: legitimate interests.
• To meet legal and accounting obligations. Lawful basis: legal obligation.

We do not sell your personal data and we do not use it for automated decision-making.

Who we share it with

• Cloudflare hosts this website and protects it from attack.
• Web3Forms receives contact form submissions and forwards them to our mailbox.
• Zoho provides our email and live chat (Zoho SalesIQ).
• YouTube (Google) plays embedded videos if you press play.
• Radware provides the live threat map on our World Attack Map page, which shows its own cookie choices.
• Facebook: our server fetches our own public Facebook posts to show on this site. Post images are delivered through our server, so your browser does not contact Facebook to display them.
• Termly provides our data subject access request form.
• Professional advisers, and authorities where the law requires it.

Some of these providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Addendum.

Cookies

This website does not set cookies of its own. Our live chat (Zoho SalesIQ) uses cookies and only loads if you choose "Allow chat" in our cookie banner. YouTube videos only load, and may set cookies, when you press play. Our hosting provider may set strictly necessary security cookies. You can change your chat choice at any time by clearing this site's data in your browser.

How long we keep it

We keep enquiries that don't lead to work for up to 12 months, then delete them. Client records are kept for as long as needed to provide our services and meet legal and accounting requirements.

How we protect it

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls and multi-factor authentication.

Your rights

Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where we rely on it.

To exercise any of these rights, email us or use our data subject access request form. We will respond within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).

Children

Our services are aimed at businesses. We do not knowingly collect personal data from anyone under 18.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed.