At BCP Media Group Ltd, we take your privacy seriously. This policy explains how we handle your personal data in line with the UK General Data Protection Regulation (GDPR) and the Privacy and Electronic Communications Regulations (PECR).

What this means for you

• Your personal data will only ever be used lawfully and fairly.

• We will not use or share your data without a valid reason and, where required, your explicit consent.

• You can ask for your data to be corrected or removed at any time.

• You always have the right to unsubscribe from marketing communications.

Our obligations under GDPR and PECR

Data collection and storage

• We collect your personal data (such as name, email, telephone number, address) as part of the order process or when you enquire about our services.

• Order details are stored securely for accounting purposes for seven years, as required by law.

• You can request removal of your data from our systems at any time by emailing sales@bcp.co.uk or calling 01202 717535. Requests are actioned within 48 hours, except where we must retain records for legal or accounting purposes.

Marketing and communications

• We will never add you to a marketing list without your consent.

• Under PECR, marketing emails and SMS are only sent if:

  • You have opted in, or

  • You are an existing customer and we are contacting you about similar products or services, and you were given the option to opt out (soft opt-in).

• Every marketing message we send will include a clear unsubscribe link.

• We do not buy or sell marketing lists.

Social media

• We will not add you to any social media groups without your action. If you follow or ‘like’ us, you are free to unfollow at any time.

Security measures

• All staff have unique logins to our systems, and access is removed immediately when employment ends.

• Passwords are changed at least every six months.

• We never store payment details.

• We will never cold call you, or ask for bank details or passwords by phone. Any telephone transactions are always initiated by you.

Data breach policy

• If a breach of our systems occurs, we will investigate and report it to the ICO within 72 hours, as required by law.

• We will notify you if your data may be at risk, and immediately reset all access credentials and take remedial action.

Your rights

Under GDPR and PECR you have the right to:

• Access the personal data we hold about you.

• Request correction of inaccurate data.

• Request deletion of your data (the right to be forgotten).

• Object to or restrict certain types of processing, including marketing.

• Withdraw consent at any time.

For more information about your rights, visit the Information Commissioner’s Office (ICO) website: ico.org.uk/for-the-public.