Privacy Policy

1. Introduction

Byte Bridges Solutions Ltd ("we," "our," "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are registered in England and Wales under company number 17186662. We are the data controller responsible for your personal data.

2. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract Performance: Processing necessary to perform our contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, unless your interests override ours
• Legal Obligation: Processing required to comply with UK laws and regulations
• Consent: Where you have given explicit consent for specific processing activities

3. Information We Collect

3.1 Information You Provide

We collect information you provide directly, including:

• Contact Information: Name, email address, phone number, company name
• Project Information: Requirements, specifications, feedback
• Payment Information: Billing address, invoice details (payment card data is processed by third-party payment processors, not stored by us)
• Communication Records: Emails, messages, meeting notes

3.2 Automatically Collected Information

When you visit our website, we automatically collect:

• Usage Data: Pages visited, time spent, navigation paths
• Device Information: Browser type, device type, operating system
• Location Data: IP address, approximate geographic location
• Cookies: See our Cookie Policy for details

4. How We Use Your Information

We use your personal data to:

• Provide and deliver our software development services
• Communicate with you about projects, updates, and support
• Process payments and maintain billing records
• Improve our website and services
• Send marketing communications (with your consent)
• Comply with legal obligations and protect our legal rights
• Prevent fraud and ensure website security

5. Information Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors who assist us (hosting, analytics, payment processing, email delivery) under strict confidentiality agreements
• Professional Advisers: Lawyers, accountants, insurers who provide professional services
• Legal Requirements: When required by UK law, court order, or to protect our legal rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified of any change in control)

All third-party service providers are required to protect your data in accordance with UK GDPR.

6. International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by the UK Information Commissioner's Office (ICO)
• Other legally approved transfer mechanisms

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Client Data: For the duration of our engagement and 7 years after project completion (UK tax and accounting requirements)
• Marketing Data: Until you withdraw consent or request deletion
• Website Analytics: Typically 26 months
• Legal Records: As required by UK law (up to 7 years for contracts and financial records)

After the retention period, we securely delete or anonymise your data.

8. Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data in certain circumstances
• Right to Restriction: Request limitation of processing in certain situations
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact us using the details in Section 12. We will respond within one month.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit and at rest
• We penetration-test what we build before launch, in house. We are not an accredited testing firm; an independent test can be arranged.
• Access controls and authentication procedures

While we strive to protect your data, no method of transmission or storage is 100% secure. Please contact us immediately if you suspect any unauthorised access to your data.

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending you an email notification (for material changes)

Your continued use of our services after changes take effect constitutes acceptance.

12. Contact Us and Complaints

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Right to Lodge a Complaint:

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Last Updated: 26 December 2025