This Privacy Policy describes how BCNC LIMITED ("BCNC", "we", "us", or "our") collects, uses, stores, shares, and protects personal data in connection with our website at bcnc.pro (the "Website"), our business development and marketing activities, and the provision of advertising, public relations, and creative brand strategy services to our clients (together, the "Services").
BCNC LIMITED is the data controller for personal data processed in connection with the Website and our own business operations, unless we expressly state that we act as a data processor on behalf of a client. Our registered office is at 9 Court Farm Road, Hove, BN3 7QR, United Kingdom. For privacy-related enquiries, please contact management@bcnc.pro or telephone +44 7456 789012.
We are committed to protecting personal data and handling it lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003, and applicable guidance from the Information Commissioner's Office ("ICO").
Please read this Privacy Policy carefully. By using the Website, contacting us, engaging our Services, or otherwise interacting with BCNC, you acknowledge that you have read and understood this Privacy Policy. Where we rely on consent, we will seek it separately and you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
This Privacy Policy applies to personal data we process about:
This policy does not apply to third-party websites, platforms, or services that may be linked from the Website or used in client campaigns. Those resources are governed by their own privacy notices. Where BCNC processes personal data on behalf of a client as part of campaign delivery, audience analysis, media buying, influencer engagement, or similar activities, the client's privacy notice will typically apply to the end audience, and BCNC's processing will be governed by our contract with that client and any applicable data processing addendum.
Personal data means any information relating to an identified or identifiable living individual. We may collect and process the following categories of personal data, depending on how you interact with us:
This may include your name, job title, company name, postal address, email address, telephone number, social media handles, and other business contact details you provide through enquiry forms, event registrations, email correspondence, contracts, or meetings.
If you create an account on the Website or use a client portal, we may collect login credentials, account preferences, communication settings, and records of your interactions with account features.
When you visit the Website, we may automatically collect internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device identifiers, pages viewed, time spent on pages, referral URLs, clickstream data, and other diagnostic or analytics information. Some of this information is collected through cookies and similar technologies as described in our Cookie Policy.
We may process the content of emails, messages, call notes, meeting records, support requests, and other communications you send to us, including attachments and metadata such as dates and participants.
This includes your preferences in receiving marketing from us, your communication preferences, survey responses, event attendance records, and engagement data such as email open rates and link clicks where permitted by law.
Where you engage our Services, we may process briefs, brand guidelines, campaign requirements, approval records, stakeholder lists, media contact details, influencer details, creative feedback, performance data, and other information necessary to deliver advertising, public relations, and creative brand strategy work.
For clients and suppliers, we may process billing contacts, purchase order details, invoice records, payment status, bank account details where required for payment, tax identifiers, and credit assessment information obtained lawfully where relevant.
If you apply for a role with BCNC, we may process your curriculum vitae, cover letter, employment history, qualifications, references, interview notes, and right-to-work documentation where applicable.
We do not routinely seek to collect special category personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, or data concerning sex life or sexual orientation) or data about criminal convictions. If such data is incidentally included in materials you provide, or if processing becomes necessary for a specific purpose, we will ensure an appropriate lawful basis and, where required, explicit consent or another permitted condition under UK GDPR.
We collect personal data through various channels, including:
We process personal data only where we have a lawful basis under UK GDPR. The table below describes our main purposes and the legal bases we rely on. More than one basis may apply depending on context.
We process contact and technical data to operate the Website, respond to enquiries, arrange meetings, and provide information about our Services. Legal bases: legitimate interests in operating and promoting our business; steps taken at your request prior to entering a contract; consent where required for non-essential cookies or marketing sign-ups.
We process personal data to negotiate, perform, and administer contracts with clients, including project management, creative development, media relations, campaign delivery, reporting, invoicing, and client support. Legal bases: performance of a contract; legitimate interests in managing our client relationships; compliance with legal obligations.
We process data relating to freelancers, agencies, vendors, and other partners to source services, manage workflows, make payments, and maintain business records. Legal bases: contract; legitimate interests; legal obligation.
We may send newsletters, event invitations, insight content, and service updates to business contacts where permitted. We may also analyse engagement to improve our communications. Legal bases: consent where required; legitimate interests in promoting our Services to relevant business audiences, provided such interests are not overridden by your rights; soft opt-in for existing clients and enquiry contacts where strict PECR conditions are met.
We use analytics to understand how the Website is used and to improve performance, content, and security. Legal bases: consent for non-essential analytics cookies where required; legitimate interests in maintaining an effective online presence.
We may process personal data to establish, exercise, or defend legal claims, comply with court orders, respond to regulators, prevent fraud, and protect our rights, personnel, and systems. Legal bases: legal obligation; legitimate interests; necessary for establishment, exercise, or defence of legal claims.
We process applicant data to assess suitability, communicate about vacancies, and maintain talent pools where agreed. Legal bases: steps prior to contract; legitimate interests; consent where requested for future opportunities.
As an advertising and public relations agency, BCNC may process personal data on behalf of clients in connection with media outreach, influencer programmes, events, competitions, lead generation campaigns, social media management, customer research, analytics, and ad platform integrations. In many of these scenarios, the client is the data controller and BCNC acts as a data processor.
Where we act as a processor, we process personal data only on documented instructions from the client, unless required by law to act otherwise. We implement appropriate technical and organisational measures, assist clients with data subject rights requests where applicable, support data protection impact assessments when required, and enter into data processing terms that reflect Article 28 UK GDPR requirements.
Clients are responsible for ensuring that they have a lawful basis to collect and share personal data with BCNC, that they provide appropriate privacy notices to data subjects, and that any consent or preference mechanisms required for marketing communications are properly obtained and recorded.
We may send marketing communications to business contacts about BCNC's services, capabilities, events, and industry perspectives. We do so in compliance with PECR and UK GDPR. You will receive marketing emails only where:
Every marketing email we send includes an unsubscribe mechanism or instructions for updating your preferences. You may also contact management@bcnc.pro at any time to opt out. Opting out of marketing does not affect transactional or service-related communications necessary to perform a contract or respond to your requests.
We do not sell personal data to third parties for their independent marketing purposes.
We may share personal data with the following categories of recipients where necessary for the purposes described in this policy:
We require third-party service providers to process personal data only in accordance with our instructions and applicable law, and to implement appropriate security measures. A list of key categories of processors may be available on request.
Some recipients of personal data may be located outside the United Kingdom. Where we transfer personal data internationally, we ensure that appropriate safeguards are in place as required by UK data protection law. These safeguards may include:
You may contact us for further information about the safeguards applied to specific transfers.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary depending on the nature of the data and our relationship with you.
Indicative retention practices include:
We may retain anonymised or aggregated data indefinitely for statistical purposes.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. Measures may include access controls, password policies, encryption in transit where supported, secure hosting environments, staff training, confidentiality obligations, and incident response procedures.
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security. You are responsible for keeping any account credentials confidential and for using secure channels when sending sensitive information.
Under UK data protection law, you may have the following rights in relation to your personal data, subject to certain exceptions:
To exercise your rights, contact management@bcnc.pro. We may need to verify your identity before responding. We will respond within one month, subject to permitted extensions for complex requests.
If you are acting on behalf of a client campaign audience and BCNC is processing your data as a processor, we may refer your request to the relevant client as controller.
If you have concerns about our use of personal data, we encourage you to contact us first so that we can seek to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority for data protection issues, at ico.org.uk or by contacting the ICO directly.
Our Website and Services are directed at business users and are not intended for children under sixteen. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take appropriate steps to delete it.
We do not routinely use solely automated decision-making that produces legal or similarly significant effects on individuals. We may use automated tools for analytics, spam filtering, or audience segmentation in client campaigns where permitted by contract and law, but meaningful decisions involving individuals are generally subject to human review.
We may update this Privacy Policy from time to time to reflect changes in law, regulation, technology, or our practices. The updated version will be posted on the Website with a revised effective date. Where changes are material, we may provide additional notice or seek renewed consent where required.
For questions about this Privacy Policy or our data protection practices, please contact:
BCNC LIMITED
Data Protection Enquiries
9 Court Farm Road
Hove, BN3 7QR
United Kingdom
Email: management@bcnc.pro
Telephone: +44 7456 789012
In accordance with UK GDPR, we adhere to the principles that personal data shall be processed lawfully, fairly, and in a transparent manner; collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes; adequate, relevant, and limited to what is necessary; accurate and kept up to date; kept in a form which permits identification for no longer than is necessary; and processed in a manner that ensures appropriate security.
Accountability is central to our approach. We maintain records of processing activities where required, assess high-risk processing through data protection impact assessments when appropriate, and implement privacy by design and default in our systems and project workflows where practicable.
BCNC maintains internal documentation describing our processing activities, including the categories of data subjects, categories of personal data, purposes of processing, categories of recipients, retention schedules, and general description of security measures. This documentation is reviewed periodically and updated when we introduce new services, systems, or processing purposes.
Where we act as a processor for client campaigns, we maintain records that reflect the nature of processing carried out on behalf of each client, including the types of personal data processed, the subject matter and duration of processing, and the obligations and rights of the controller. Clients may request reasonable information about our processing activities where necessary to demonstrate compliance.
Where a type of processing is likely to result in a high risk to the rights and freedoms of individuals, we will carry out a data protection impact assessment before processing begins. This may arise in connection with large-scale profiling, systematic monitoring of publicly accessible areas, or innovative use of data in targeted advertising programmes. Where a DPIA indicates high risk that cannot be mitigated, we will consult the ICO before processing.
Clients engaging BCNC for campaigns involving sensitive audience data, precise geolocation, biometric categorisation, or large-scale data matching should discuss privacy risks during scoping so that appropriate assessments and safeguards can be implemented.
When we receive a request to exercise data protection rights, we will acknowledge receipt promptly and respond within one month. That period may be extended by two further months where necessary, taking into account the complexity and number of requests, and we will inform the individual of any extension within the initial month.
We may request proof of identity where there is reasonable doubt about the person making the request. We do not charge a fee for most requests, but we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive, in accordance with UK GDPR.
Requests relating to data processed on behalf of a client will be forwarded to the relevant client where BCNC is acting as processor, unless we are authorised to respond directly under our contract with the client.
When BCNC processes personal data as a processor, we implement the following measures unless otherwise agreed in writing:
We may appoint sub-processors to support hosting, analytics, email delivery, media platforms, and production workflows. We inform clients of intended changes to sub-processors where required by contract and provide an opportunity to object on reasonable grounds relating to data protection.
We maintain procedures to detect, investigate, and respond to personal data breaches. Where a breach is likely to result in a risk to the rights and freedoms of individuals, we will notify the ICO without undue delay and, where feasible, within seventy-two hours of becoming aware of the breach.
Where BCNC acts as processor and becomes aware of a personal data breach, we will notify the relevant client without undue delay, providing sufficient information to enable the client to meet its obligations. Where we are controller, we will also notify affected individuals without undue delay when the breach is likely to result in a high risk to them.
Breach records are maintained internally regardless of whether notification is required, documenting the facts, effects, and remedial action taken.
BCNC may use software tools, including emerging artificial intelligence and machine learning applications, to support creative development, content drafting, image generation, media monitoring, sentiment analysis, and workflow efficiency. Where such tools process personal data, we assess the privacy implications and configure use in line with client instructions, contractual restrictions, and applicable law.
We do not rely solely on automated processing to make decisions that produce legal or similarly significant effects on individuals without explicit contractual authority and appropriate safeguards. Human oversight remains a core part of our professional service delivery.
In the course of public relations and brand strategy work, we may monitor publicly available social media content, press coverage, and industry commentary. Where this involves personal data, we ensure that processing is relevant to the engagement, proportionate, and supported by an appropriate lawful basis, often legitimate interests assessed against the rights of individuals.
We advise clients on the reputational and legal risks associated with social listening, influencer identification, and user-generated content campaigns. Individuals who interact with BCNC through corporate social media accounts should also review the privacy policies of the relevant platforms.
When you register for BCNC events, webinars, or roundtables, we may collect registration details, dietary or accessibility requirements where voluntarily provided, attendance records, and photography or video footage where notice is given. We use this information to administer the event, facilitate networking where appropriate, and follow up with relevant materials.
Photography and recording at events are conducted with signage or verbal notice where practicable. If you do not wish to appear in promotional materials, please inform event staff or contact management@bcnc.pro.
We may publish client names, logos, quotes, and campaign summaries in our portfolio or marketing materials where we have obtained permission. Client contracts or separate publicity releases may govern the scope of such use. Personal data of client personnel included in testimonials is processed on the basis of consent or legitimate interests, depending on context.
For certain prospective clients, we may conduct proportionate financial due diligence, which can include credit checks through authorised agencies. Where this involves personal data of directors or guarantors, we rely on legitimate interests or legal obligation and use data only for risk assessment and contract administration.
If you raise a complaint or whistleblowing concern with BCNC, we will process the information you provide to investigate the matter, take appropriate action, and maintain records of the outcome. Such processing is based on legitimate interests, legal obligation, or contract as applicable, and information is shared only with those who need it for resolution.
BCNC provides data protection training to personnel who handle personal data regularly. Access to personal data is limited to those with a business need. We review our policies and procedures at least annually and following significant regulatory or operational changes.
Although BCNC is a UK company and primarily subject to UK law, visitors from other jurisdictions may access the Website. We apply UK GDPR standards globally as our baseline framework. If you are located outside the United Kingdom, you may have additional rights under local law. Contact us to discuss how those rights interact with our processing practices.
When you submit an enquiry through our contact form, we collect the information you enter, which typically includes your name, email address, company name, telephone number, and message content. We use this information to respond to your request, qualify whether our services may be suitable, and maintain a record of pre-contract communications. We may also associate your enquiry with technical data such as your IP address and browser type for security and analytics purposes.
If you subscribe to our newsletter, we collect your email address and, where requested, your name and company details. We use an email service provider to deliver messages and track aggregate engagement metrics. You may unsubscribe at any time using the link in each email or by contacting management@bcnc.pro.
When you apply for a role through the Website or by email, we process application materials solely for recruitment purposes. Unsuccessful applicants' data is deleted or retained in a talent pool only with explicit consent or as otherwise permitted by law.
Where we rely on legitimate interests as our lawful basis, we balance our interests against the rights and freedoms of data subjects. For business-to-business marketing to corporate contacts, our interests typically include promoting services relevant to the recipient's professional role. For website security monitoring, our interests include protecting systems and users from abuse. For client reference checks and fraud prevention, our interests include ensuring financial stability and contractual integrity. You may object to processing based on legitimate interests where applicable, and we will consider your request in light of the specific context.
In limited circumstances, BCNC and a client may jointly determine the purposes and means of processing personal data, such as in collaborative lead generation programmes or co-branded events. Where joint controllership arises, we will agree with the client an arrangement that sets out respective responsibilities for providing privacy information to data subjects and responding to rights requests, in line with ICO guidance.
Where appropriate, we apply pseudonymisation or anonymisation techniques to reduce privacy risk in reporting and analytics. Anonymised data that cannot reasonably be used to identify an individual is not personal data and may be retained for trend analysis, campaign benchmarking, and service improvement.
Clients sometimes provide mailing lists, customer databases, CRM exports, event attendee lists, or influencer contact details for campaign execution. Clients warrant that they have established a lawful basis to share such data with BCNC and that their privacy notices adequately describe BCNC's role. We process such data only for the purposes specified in the relevant statement of work or data processing addendum and delete or return it in accordance with contractual terms.
Previous versions of this Privacy Policy may be available on request. We can provide this policy in alternative formats where reasonably practicable to support accessibility requirements. If you need assistance understanding how we process your personal data, our team will explain our practices in clear language on request. We recommend that you review this policy whenever you provide personal data to BCNC or engage us to deliver Services on your behalf.
If you remain dissatisfied with our response to a privacy concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters. The ICO can be contacted at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom, by telephone on 0303 123 1113, or via the ICO website at ico.org.uk. We would appreciate the opportunity to address your concerns before you contact the ICO, and we encourage you to contact us first at management@bcnc.pro so that we can attempt to resolve any issue promptly and fairly.
