GDPR Compliance

1. Our Commitment

Bydand Systems Ltd (Company No. SC886008, registered in Scotland) is committed to protecting the privacy and rights of individuals in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we meet our obligations as a data controller.

2. Data Controller

Bydand Systems Ltd acts as the data controller for all personal data collected through this website and in the course of providing our services.

Contact: hello@bydandsystems.co.uk | +44 7418 316161

3. Lawful Basis for Processing

We only process personal data where we have a valid lawful basis. The bases we rely on are:

• Legitimate Interests — responding to enquiries, managing client relationships, improving our services
• Consent — for optional cookies and marketing communications
• Contractual Necessity — when processing data to deliver a service you have engaged us for
• Legal Obligation — where required by law (e.g. financial records)

4. Data We Collect

• Contact details (name, email address, phone number)
• Project and enquiry information submitted via our contact form
• Technical data (IP address, browser type, pages visited) via cookies
• Business information provided during project engagements

5. How We Store & Protect Data

Personal data is stored securely on UK or EU-based infrastructure. We apply appropriate technical and organisational measures to prevent unauthorised access, disclosure, or loss. Access to personal data is restricted to those who need it to perform their role.

6. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected:

• Contact form submissions: up to 12 months
• Client project records: up to 6 years (for legal and financial compliance)
• Cookie data: as defined by the cookie duration (typically session or up to 12 months)

7. Third-Party Processors

We may use trusted third-party services to help deliver our website and services (e.g. hosting, analytics). These processors act under our instruction and are bound by data processing agreements. We do not sell personal data to any third party.

8. International Transfers

Where data is processed outside the UK, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or an adequacy decision from the UK government.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — request deletion of your data where no longer necessary
• Right to restriction — ask us to limit how we use your data
• Right to portability — receive your data in a structured, commonly used format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — at any time, where consent is the basis for processing

To exercise any right, email hello@bydandsystems.co.uk. We will respond within one calendar month.

10. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
ico.org.uk | 0303 123 1113

11. Updates to This Page

We review our GDPR compliance regularly. Any significant changes will be reflected on this page with an updated date.