BM Supplier Ltd ("BM Supplier", "we", "us" or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it and your rights under applicable data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (EU GDPR).
1. Who We Are
The data controller for your personal data is:
- BM Supplier Ltd
- Registered in England and Wales
- Contact: contact@bmsupplier.co.uk
2. Data We Collect
We may collect and process the following categories of personal data:
Information you provide directly
- Name, email address, phone number and company name when you submit an enquiry via our contact form or by email
- Business details (country, role, nature of enquiry) when requesting a catalogue or partnership discussion
- Any other information you choose to include in your message to us
Information collected automatically
- Browser type, operating system and device information
- IP address and approximate geographic location
- Pages visited, time on site, referring URLs and other standard web analytics data
- Cookies and similar tracking technologies (see our Cookie section below)
3. How We Use Your Data
We use your personal data for the following purposes and on the following legal bases:
- To respond to enquiries — Legitimate interests (responding to your direct request)
- To manage partnership conversations and commercial discussions — Legitimate interests (pre-contractual negotiations)
- To send transactional emails (e.g. confirmation that we received your message) — Legitimate interests
- To analyse site usage and improve our website — Legitimate interests
- To comply with legal obligations — Legal obligation
We do not engage in automated decision-making or profiling that has a significant effect on individuals.
4. Third-Party Services
We use a limited number of trusted third-party services to operate our website and communications:
- Resend (resend.com) — transactional email delivery. When you submit a contact form, your name, email and message content are transmitted to Resend to deliver your enquiry to our team. Resend is SOC 2 Type II certified. Their privacy policy is available at resend.com/legal/privacy-policy.
- Vercel — website hosting and edge network. Vercel may process your IP address and request metadata as part of normal hosting operations. See vercel.com/legal/privacy-policy.
- Google Fonts — font delivery. Your browser makes a request to Google's servers to load fonts used on this site. See Google's privacy policy.
We do not sell, rent or share your personal data with third parties for marketing purposes.
5. Data Retention
We retain enquiry and communication data for as long as reasonably necessary to respond to your request and maintain a record of our correspondence — typically no longer than 3 years unless a commercial relationship is established, in which case standard business record-keeping periods apply (up to 7 years for financial records).
You may request deletion of your data at any time (see Your Rights below).
6. International Transfers
BM Supplier operates from the United Kingdom. Some of our third-party processors (including Resend and Vercel) may transfer data to servers located outside the UK or EU. Where this occurs, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs) as applicable.
7. Cookies
Our website uses a small number of cookies:
- Strictly necessary cookies — required for the site to function (e.g. session state). These cannot be disabled.
- Analytics cookies — we may use privacy-respecting analytics to understand traffic patterns. No personal identifying data is stored in these cookies.
You can control cookies via your browser settings. Disabling analytics cookies will not affect your ability to use the site.
8. Your Rights
Under UK GDPR (and EU GDPR where applicable), you have the following rights in relation to your personal data:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion of your data where there is no legitimate reason for us to continue processing it
- Right to restrict processing — to request that we limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests
To exercise any of these rights, please contact us at contact@bmsupplier.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. These include HTTPS encryption, access controls and regular security reviews. No method of transmission over the internet is 100% secure, but we take our responsibilities seriously and continuously work to improve our practices.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. For significant changes, we will take reasonable steps to notify affected individuals.
11. Contact Us
For any questions about this Privacy Policy or how we handle your personal data, please contact:
- Email: contact@bmsupplier.co.uk
- Web: bmsupplier.co.uk/contact/