1. Who we are

The data controller for personal information handled through this website is Gareth Daniells (BBIF / BBI Framework). For privacy questions or data-rights requests, contact [email protected]. If the website is later operated by a separate incorporated entity, this notice will be updated before that entity becomes the controller.

2. Information we may receive

• Information you send us: your name, email address, organisation, role, message and any material you choose to include when you contact us.
• Basic technical records: the hosting provider may process information such as IP address, browser/device information, request time, requested page and security logs in order to deliver and protect the website.

The current public website does not provide user accounts, wallet connections, payment processing or an on-site contact form.

3. Why we use personal information

We use information to respond to enquiries, arrange discussions or design-partner activity, maintain business correspondence, operate and secure the website, and meet legal or regulatory obligations. Depending on the circumstances, the lawful basis may be our legitimate interests, steps taken at your request before entering a contract, performance of a contract, or a legal obligation.

4. Cookies and analytics

The website code supplied by BBIF does not intentionally set advertising, behavioural-tracking or non-essential analytics cookies. The live hosting platform may use strictly necessary, security or platform technologies, so the production hosting configuration should be checked at deployment and whenever hosting changes. If analytics, embedded media, forms or other services that use non-essential cookies or similar technologies are added later, this notice will be updated and any required consent mechanism will be implemented before those technologies are activated.

5. Who may receive your information

Information may be handled by service providers used to operate communications or website hosting, and by professional advisers where necessary. We may also disclose information where required by law or a competent authority. We do not sell personal information.

6. International transfers

Some technology or email providers may process information outside the UK. Where that applies, appropriate transfer safeguards should be used in accordance with applicable UK data-protection law. The exact hosting and service-provider position should be reviewed whenever the production hosting stack changes.

7. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was received and for legitimate business, legal, security or record-keeping requirements. The retention period therefore depends on the nature of the enquiry, whether a business relationship develops, and whether the information is needed for a contract, dispute or legal record. Hosting and security logs are retained according to the relevant provider's operational and security requirements.

8. Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct or erase personal data, restrict or object to processing, and request portability. You may also withdraw consent where processing is based on consent. To make a request, email [email protected].

9. Complaints

If you have a concern, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint/.

10. Changes to this notice

This notice will be reviewed when the website adds material new functionality, hosting, analytics, forms, accounts, subscriptions, app services or other processing of personal information.