Privacy Policy

Introduction

Business As Unusual (a trading name of Bright Citrus Limited, Company No. 08458708) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or engage with our services.

We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

1.1 Information You Provide

When you contact us through our website or engage our services, we may collect:

• Name (first and last name)
• Email address
• Telephone number
• Company name and business details
• Information about your business needs and challenges
• Newsletter subscription preferences
• Any other information you choose to provide in correspondence with us

1.2 Information Automatically Collected

When you visit our website, we may automatically collect:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website
• Cookie data (see our Cookie Policy section below)

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 To Respond to Your Inquiries

When you contact us through our website or by email, we use your information to respond to your questions, provide information about our services, and schedule consultations.

2.2 To Provide Our Services

If you engage our consulting services, we use your information to deliver those services, communicate with you, and manage our business relationship.

2.3 Marketing Communications

With your consent, we may send you:

• Business tips and advice
• Information about our services
• Industry insights and updates
• Newsletter content
• Invitations to events or webinars

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly.

2.4 Website Improvement

We use analytics data to understand how visitors use our website, helping us improve user experience and content.

2.5 Legal Obligations

We may process your information to comply with legal obligations, including tax, accounting, and regulatory requirements.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide consent for marketing communications or cookies
• Contract: To fulfill our obligations when you engage our services
• Legitimate Interests: To respond to inquiries and improve our services
• Legal Obligation: To comply with applicable laws and regulations

4. Third-Party Services and Data Sharing

4.1 Third-Party Service Providers

We may use third-party services to help us operate our business, including:

• Email Marketing Services: Such as Mailchimp or similar platforms to send newsletters and marketing emails
• Customer Relationship Management (CRM) Systems: To manage client relationships and communications
• Website Hosting: To host our website and store data
• Analytics Services: Such as Google Analytics to understand website usage
• Form Processing: FormSubmit.co to process contact form submissions

These third parties have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information and use it only for the purposes we specify.

4.2 We Will Never Sell Your Data

Important: We will never sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is yours, and we respect that.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our legal rights.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences and improve your experience.

5.2 Types of Cookies We Use

Essential Cookies:

• Required for the website to function properly
• Remember your cookie preferences
• Enable basic website features
• These cookies cannot be disabled

Analytics Cookies: (With your consent)

• Google Analytics to understand how visitors use our site
• Help us improve website content and user experience
• Provide anonymized usage statistics

Marketing Cookies: (With your consent)

• Social media pixels (Facebook, LinkedIn, etc.)
• Advertising pixels for remarketing
• Help us measure the effectiveness of our marketing campaigns

5.3 Managing Cookies

When you first visit our website, you'll see a cookie banner asking for your consent. You can choose to:

• Accept All Cookies: Allows all cookies including analytics and marketing
• Essential Only: Only allows essential cookies needed for the website to function

Your choice is stored for 30 days. You can also manage cookies through your browser settings at any time.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Inquiry Data: Retained for up to 3 years after last contact
• Client Data: Retained for up to 7 years after the end of our business relationship (for tax and legal purposes)
• Marketing Data: Retained until you unsubscribe or request deletion
• Website Analytics: Aggregated data retained indefinitely (anonymized)

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing of your data for certain purposes
• Right to Withdraw Consent: Withdraw consent for processing at any time

To exercise any of these rights, please contact us at hello@businessasunusual.co.uk

8. Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include:

• Secure SSL encryption for data transmission
• Secure hosting and storage systems
• Limited access to personal data (need-to-know basis)
• Regular security assessments
• Secure password policies

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the UK Information Commissioner's Office
• Transfers to countries with adequate data protection laws
• Other approved transfer mechanisms under UK GDPR

10. Children's Privacy

Our website and services are not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification if you are on our mailing list
• Displaying a notice on our website

We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority: