Data Protection

Privacy Policy

This Privacy Policy explains how UKBCCI handles personal information in line with UK data protection principles.

This page is provided for transparency and information purposes. If you need legal advice specific to your organisation or circumstances, you should consult a qualified legal professional.

1. Who We Are

UK Bangladesh Catalysts of Commerce & Industry (UKBCCI) is the data controller for personal data processed through this website, except where otherwise stated.

If you have any privacy questions, please contact us using the details in Section 14.

2. Scope of This Policy

This policy explains how we collect, use, store, and share personal data when you use our website, submit forms, contact us, apply for membership, register interest in services or events, and interact with UKBCCI communications.

It does not apply to third-party websites or services that are linked or embedded on our pages. Those services have their own privacy policies.

3. Personal Data We Collect

We may collect identity and contact information such as your name, email address, phone number, organisation name, and business details when you submit contact or membership-related forms.

We may collect communication details you provide in messages, enquiry forms, or event-related requests.

We may collect technical and usage data such as IP address, browser/device information, pages visited, referral source, and timestamps through server logs and site technologies.

If you use restricted/admin services, we may process login and account-related information required for secure authentication and administration.

4. How We Collect Personal Data

Directly from you: when you fill in forms, email us, call us, or otherwise contact us.

Automatically: when you browse the website, through cookies and similar technologies where applicable.

From trusted partners or public sources: where relevant to UKBCCI services, events, and operations and where lawful to do so.

5. How and Why We Use Your Data

To respond to enquiries and provide requested information or support.

To assess and administer membership or service-related requests.

To manage events, programmes, and business networking activities.

To publish and maintain website content and improve website performance and security.

To meet legal, regulatory, and governance obligations.

To send relevant organisational updates where we have a lawful basis to do so.

6. Lawful Bases for Processing (UK GDPR)

Depending on context, we rely on one or more lawful bases under UK GDPR, including: consent, contract, legal obligation, and legitimate interests.

Where consent is used, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully before withdrawal.

7. Cookies and Similar Technologies

We use cookies or similar technologies to operate, secure, and improve the website. Some cookies may be strictly necessary for core functionality.

Where non-essential cookies are used, they should only be set with appropriate consent in line with PECR and UK GDPR requirements.

You can manage cookies via your browser settings. Blocking some cookies may affect website functionality.

8. Sharing of Personal Data

We may share personal data with trusted service providers who support website hosting, security, communications, form processing, and technical operations, under appropriate contractual safeguards.

We may disclose personal data where required by law, regulation, court order, or to protect legal rights and safety.

We do not sell personal data.

9. International Transfers

Some service providers may process data outside the UK. Where this happens, we apply appropriate transfer safeguards required by UK data protection law.

10. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, including legal, regulatory, accounting, and operational requirements.

Retention periods may vary based on data type and business need. When data is no longer required, we securely delete or anonymise it where appropriate.

11. Data Security

We apply reasonable technical and organisational security measures to protect personal data from unauthorised access, loss, misuse, or alteration.

No online system is completely risk-free, but we continuously aim to maintain appropriate safeguards.

12. Your Rights

Subject to applicable law, you may have rights to access, rectify, erase, restrict, object, and request portability of your personal data, and rights related to automated decision-making where applicable.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.

13. Children's Privacy

This website is not intended for children, and we do not knowingly collect personal data from children without appropriate legal basis or consent where required.

14. Contact for Privacy Matters

For any privacy or data protection query, including rights requests, please contact UKBCCI using the contact details below.

15. Changes to This Privacy Policy

We may update this policy from time to time to reflect legal, technical, or operational changes. Any updates will be published on this page with a revised effective date.

UKBCCI Contact Details

You can also submit a complaint to the UK Information Commissioner\'s Office (ICO): ico.org.uk/make-a-complaint/