top of page

Privacy Policy.

1. Introduction

BM Projects (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect any personal data you provide when you use our website www.bm-projects.co.uk (the “Website”).

We act as a data controller in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

2. What Information We Collect

We may collect and process the following personal data:

  • Name

  • Email address

  • Company name (if provided)

  • Any other personal data you choose to provide via the enquiry/contact form

​

3. How We Collect Your Data

We collect data:

  • When you complete and submit the contact/enquiry form on our Website

  • When you contact us directly by email or phone

  • When you browse the Website (limited technical data, unless you use cookies – see note below*)

Note: If your website uses cookies, tracking tools (e.g. Google Analytics), or embedded third-party services, this policy would need to be updated accordingly.

​

4. How We Use Your Data

We use your personal data to:

  • Respond to your enquiries or requests

  • Provide information about our services

  • Maintain records of communications

  • Comply with our legal obligations

We do not use your data for marketing purposes unless you have explicitly consented.

​

5. Lawful Basis for Processing

We rely on the following lawful bases under the UK GDPR:

  • Consent – when you voluntarily submit an enquiry form

  • Legitimate interests – to respond to your enquiries and operate our business effectively

  • Legal obligation – for compliance with applicable laws and regulations.

​

6. Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share your information with:

  • Service providers or professional advisers who support our business (e.g. IT, hosting, legal)

  • Authorities or regulators, if required by law

Any third parties we engage are subject to data protection obligations.

​

7. Data Security

We take appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. These include secure hosting, encryption where appropriate, and restricted access.

However, please be aware that no method of transmission over the internet is entirely secure.

​

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal or regulatory obligations.

Typically, enquiry data is retained for up to 12 months, unless a business relationship is established.

​

9. Your Rights

Under UK data protection law, you have the following rights:

  • To access the personal data we hold about you

  • To request correction of inaccurate data

  • To request erasure of your data (“the right to be forgotten”)

  • To object to or restrict how we process your data

  • To withdraw your consent at any time, where applicable

  • To lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us using the details below.

​

10. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the content, security, or privacy practices of these sites. You should read the privacy policies of any third-party websites you visit.

​

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

bottom of page