Privacy Policy
Introduction
Bamboo Connect Ltd (Bamboo) is a privately owned Limited Company. This Policy describes our practices and commitment to protecting and respecting your privacy. This policy explains how we collect, use, and protect the personal data we process, with a particular emphasis on data clearing and destruction practices. This policy also outlines how we adhere to the principles and rights provided by the GDPR.
As a business, we need to process information about our clients and suppliers to monitor our performance and achievements, facilitate deliveries, collections, and payments, and administrate accounts whilst keeping our clients informed of our activities.
Because of our commitment to the principles of GDPR, we can give you access to any personal information we have about you. We aim to comply with requests to access personal information within the guidelines from GDPR so you can request your information to be amended, erased, or not used for marketing purposes.
Our Privacy Promise
We promise:
1. To keep your data safe, secure and private.
2. Not to sell your data to any third party.
3. Not to share your data, except where we have a legitimate business interest to do so. For example, carriers. A legitimate interest is when we have a business reason such as a payroll provider to use your information, but even then, it must not unfairly go against what is right and best for you.
How the law protects you
As well as our Privacy Promise, your privacy is protected by law, which says that we are allowed to use personal information only if we have a proper reason to do so. The law states that we must have one or more of these reasons:
1. Consent: the individual has given clear consent for you to process their personal data for a specific purpose.
2. Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
3. Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).
4. Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks.)
Information Collected
Here is a list of information that Bamboo collects that enables Bamboo to fulfil its contractual obligations with you as a customer/supplier:
1. Company address(es), sites, and registered business address.
2. Contact Name(s)
3. Contact Telephone Number (office & mobile)
4. Contact e-mail address(es)
5. VAT Registration number
6. Company Registration Number
7. Bank Account details, or invoice payment details, where applicable.
8. Transaction information – Purchase history, payment details
9. Device Information – IMEI numbers, models, specifications
In addition to the above list, Bamboo can hold the following information, although not all information may be relevant to all customers/suppliers. This is a legitimate business interest that enables Bamboo to provide the service to you and fulfil our contractual obligations:
- Your employee Names.
- Your employee Contact Numbers (office and mobile)
- Your employee e-mail addresses.
Why does Bamboo collect such Information?
Our purpose in collecting this information is to enable Bamboo to fulfil our contractual obligations with you and enable Bamboo to provide customised services and products relevant to your specific needs.
Legal Basis for Processing
Our processing of personal and company data is based on:
1. Contract: To fulfil purchase and service agreements.
2. Legal Obligations: For tax and regulatory purposes.
3. Legitimate Interests: For customer support, fraud prevention, and business operations.
How does Bamboo use such Information?
Your information may be used by Bamboo to carry out our contractual obligations, or authenticate you as a customer/supplier and may be used to:
1. Provide requested information, products, or services.
2. Advertise products, services, promotions, and events relating to the Company.
3. Improve our products and services,
4. Protect against fraud or investigate suspected or actual illegal activity.
5. Respond to a legitimate legal request from law enforcement authorities or other government regulators.
6. 7. Conduct investigations to ensure compliance with, and comply with, legal obligations.
Except where used in support of a contract with you or to fulfil a legal obligation, our use of your Personal Information will be only for legitimate business interests as set out above.
How does Bamboo secure Personal Information?
Bamboo is committed to ensuring the security and integrity of Personal Information. Bamboo has adopted reasonable physical, electronic, and managerial procedures to safeguard your Personal Information. However, due to the nature of Internet communications, we cannot guarantee or warrant that your transmission to us is secure.
Does Bamboo share the information it collects?
Bamboo will not sell your Personal Information. Bamboo will only share your Personal Information outside of our Company, as a legitimate business interest to fulfil our contractual obligations.
The following is a list of legitimate business interests whereby Bamboo may share some, or all of your personal information with a third-party organisation:
- Service providers, dealers, distributors, agents, or contractors that Bamboo has retained to perform services on our behalf.
- Bamboo will only share your Personal Information with third parties whom Bamboo has contractually restricted from using or disclosing the information except as necessary to perform services on our behalf, or to comply with legal requirements.
- Comply with legal obligations, such as in response to a legitimate legal request from law enforcement authorities, courts, or other government regulators or authorities, among other things.
- Investigate suspected or actual illegal activity.
- Prevent physical harm or financial loss; or
- Support the sale or transfer of all or a portion of our business or assets (including through bankruptcy)
How can you correct, change, or delete the information held by Bamboo?
You may request to access, update, correct, change, or delete your Personal Information at any time. Bamboo will use reasonable efforts to timely update and/or remove information. To protect the user’s privacy and security, Bamboo will take steps to verify the user’s identity before making any requested change. To access, change, or delete your Personal.
To report problems with any service, ask questions, or to raise concerns, please send an email to info@bambooconnect.com
How long do we keep your Personal Information?
The Personal Information you provide to Bamboo is only kept for as long as it is reasonably necessary for the purposes for which it was collected, taking into account our need to comply with contractual obligations, resolve customer service issues, comply with legal requirements, and provide new or improved services to users.
We retain personal and company data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. This includes:
- Transaction records: Retained for 7 years for tax and regulatory purposes.
- Customer support records: Retained for 3 years post-resolution.
After this period, your Personal Information will be deleted from all systems of Bamboo without notice.
Data Subject Rights
Individuals have the following rights regarding their personal data:
Right to be informed – Individuals have the right to be informed about the collection and use of their personal data.
Right of access – Individuals have the right to access and receive a copy of their personal data, and other supplementary information.
Right to rectification – Individuals have the right to access and receive a copy of their personal data, and other supplementary information.
Right to erasure – The UK GDPR introduces a right for individuals to have personal data erased.
Right to restrict processing – Individuals have the right to request the restriction or suppression of their personal data.
Right to data portability – The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.
Right to object – The UK GDPR gives individuals the right to object to the processing of their personal data in certain circumstances.
Rights related to automated decision-making including profiling – which includes:
- automated individual decision-making (making a decision solely by automated means without any human involvement); and
- profiling (automated processing of personal data to evaluate certain things about an individual). Profiling can be part of an automated decision-making process
- Requests can be submitted via our Data Protection Officer (DPO) at dpo@bambooconnect.com
GDPR Principles Applied by Bamboo
Bamboo adheres to the following GDPR principles:
1. Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and in a transparent manner.
2. Purpose Limitation: We collect data for specified, explicit, and legitimate purposes.
3. Data Minimization: We ensure data is adequate, relevant, and limited to what is necessary.
4. Accuracy: We take reasonable steps to ensure personal data is accurate and up to date.
5. Storage Limitation: We retain data only as long as necessary.
6. Integrity and Confidentiality: We process data securely to protect against unauthorized access, loss, or damage.
7. Accountability: We take responsibility for and can demonstrate compliance with these principles.
Security Measures
We implement technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include at a minimum:
- Encryption of sensitive data
- Regular security audits
- Access controls and authentication protocols
Data Breach Notification
In the event of a data breach, we will notify affected individuals and relevant authorities within 72 hours, in accordance with GDPR requirements.
How might Bamboo change this Privacy Policy?
As Bamboo expands and improves its products and services, we may need to update this Privacy Policy. This Privacy Policy may be modified from time to time without prior notice. We encourage you to review this Privacy Policy regularly for any changes. Substantive changes will be identified at the bottom of the Privacy Policy.
How can you contact Bamboo?
If you have any comments or questions about this Privacy Policy, or on how we treat your personal information, please e-mail info@bambooconnect.com