Privacy Policy.

Who we are

This website is operated by Bentlebury Limited, a company registered in England and Wales (company number 13706629). Bentlebury is a data and technology assurance company, providing services through Inquilion, our suite of independent assurance products for Microsoft 365.

For the purposes of UK data protection law, Bentlebury Limited is the data controller for personal data collected through this website.

What data we collect

We collect limited personal data in the course of operating this website and delivering our services:

• Contact information: name, email address, organisation, phone number and any details you provide through our contact form or direct correspondence.
• Technical data: IP address, browser type, operating system and general location data collected automatically when you visit this website.
• Usage data: pages visited, time spent and navigation patterns, collected through server logs.

We do not use personal data for advertising, profiling or automated decision-making.

How we use your data

We use personal data for the following purposes:

• Responding to enquiries submitted through our contact form
• Delivering and supporting our services
• Maintaining the security and performance of this website, including protecting the contact form against spam and abuse
• Meeting our legal and regulatory obligations

Legal basis for processing

We process personal data on the following legal bases under UK GDPR:

• Legitimate interests: responding to enquiries, operating and securing our website (including protecting the contact form from spam and abuse) and improving our services.
• Consent: where you have actively submitted your details through a contact form.
• Legal obligation: where we are required to retain or disclose data by law.

Sharing your data

We do not sell or trade personal data. We share personal information only with the service providers that operate this website and deliver our services, and we disclose it where required by law or regulation. The providers that handle data from this website are:

• Microsoft: contact form enquiries are sent by email through Microsoft 365 and delivered to our Microsoft 365 mailbox.
• Cloudflare: the contact page uses Cloudflare Turnstile to tell people from automated bots. Cloudflare receives your IP address and browser details when the check runs in your browser, and receives the result of the check and your IP address again when our server confirms it. We use Cloudflare for this check only: this website is not otherwise served through Cloudflare.
• Adobe Fonts and Google Fonts: your browser fetches this website's typefaces from Adobe and Google, so they receive your IP address and browser details. We do not use this to identify you.
• Our web hosting provider: hosts this website and keeps the server logs described above.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards for the transfer.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are retained for the duration of the business relationship plus a reasonable period afterwards. The website itself does not store enquiries: they reach us as email. To limit repeated submissions, a one-way hash of your IP address and the times of recent submissions is held in temporary server storage. It is not linked to your enquiry.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us. You can also complain to the Information Commissioner's Office at ico.org.uk, although we would welcome the chance to put things right first.

Contact

Bentlebury Limited120 Regent’s Pavilion4 Summerhouse RoadMoulton ParkNorthampton NN3 6BJ+44 1604 346046Contact Bentlebury