1. Who we are
This Data Protection & GDPR Statement explains how BIVORAHQ LTD (“we”, “us”, “our”) protects personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
BIVORAHQ LTD
61 Bridge Street, Kington, HR5 3DJ, United Kingdom
Company number: 16861148
Email: support@bivorahq.co.uk
We act as a data controller for personal data we collect about our own customers, prospects and website users, and as a data processor where we handle data on behalf of our clients.
For detailed information about what data we collect and how we use it, please see our Privacy Policy.
2. Legal bases for processing
We only process personal data where we have a lawful basis, including:
- Contract performance – to provide our Power BI, analytics and consulting services.
- Legitimate interests – to manage our business, improve our services and communicate with existing customers.
- Consent – for optional marketing communications or cookies where consent is required.
- Legal obligations – to comply with accounting, tax, fraud-prevention and regulatory requirements.
3. Personal data we process
Depending on our relationship with you, we may process:
- Identity and contact details (name, job title, company, email address, phone number, billing details).
- Usage and technical data (website logs, analytics data, support interactions).
- Project-related data provided by clients for BI and reporting services (for example, data extracts from CRM, ERP, finance or operations systems).
When acting as a processor, we only process client data in accordance with the client’s written instructions and our Data Processing Agreement (DPA).
4. Data sharing and international transfers
We may share personal data with:
- Trusted service providers (hosting, email, project management and analytics tools).
- Professional advisers (legal, accounting, compliance).
- Authorities or regulators where required by law.
Some providers may be located outside the UK. Where this occurs, we ensure appropriate safeguards, such as Standard Contractual Clauses or equivalent lawful transfer mechanisms, are in place.
5. Data retention
We keep personal data only for as long as necessary for the purpose collected, including to:
- Deliver and support services.
- Meet legal, tax and accounting requirements.
- Resolve disputes and enforce our agreements.
Retention periods are set in line with our internal Data Retention Policy. Where we act as a processor, we follow the retention and deletion instructions agreed with each client.
6. Your data protection rights
Subject to certain conditions, individuals located in the UK or EEA have the right to:
- Access their personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion in certain circumstances.
- Restrict or object to processing.
- Request data portability.
- Withdraw consent where processing is based on consent.
Requests can be made at any time by emailing support@bivorahq.co.uk. We may need to verify your identity before responding.
If you are not satisfied with our response, you can lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.
7. Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Role-based access controls and least-privilege access.
- Strong authentication and password policies.
- Encryption where appropriate.
- Regular updates and security monitoring of our systems.
- Confidentiality obligations for our staff and contractors.
8. Updates
We may update this Data Protection & GDPR Statement from time to time. The latest version will always be available on our website. Significant changes will be notified where appropriate.