Privacy Policy
This page is maintained by BIAV Controls Limited and describes how personal data submitted through this website is handled.
1. Who we are
BIAV Controls Limited (referred to as "BIAV Controls", "we", "us" or "our") is a private limited company registered in England & Wales (Company No. 16344714). Registered address: 52 Selah Drive, Swanley, Sevenoaks, BR8 7WD.
For any privacy-related query, contact us at accounts@biav-controls.co.uk or by phone on 07500 040578.
2. What data we collect
We only collect what we need to respond to a project enquiry or manage an ongoing engagement:
- Name, company, email address and phone number provided via our enquiry form or by direct email/phone;
- Site address or postcode where the enquiry relates to a physical building;
- The content of your message, including any project detail you choose to send;
- Basic technical data (IP address, browser type, referring page) collected automatically by our hosting platform for security and abuse-prevention purposes.
We do not knowingly collect special-category personal data through this website.
3. How we use it
Data is used for the following purposes:
- To respond to your enquiry and, where relevant, provide a quotation;
- To perform pre-contract steps at your request and, if we proceed to work together, to deliver the contracted service;
- To keep the records the law requires us to keep (tax, accounting, insurance);
- To protect the website and prevent misuse.
Our lawful bases under UK GDPR are (a) taking steps at your request prior to entering into a contract, (b) legitimate interest in running our business and communicating with prospective clients, and (c) compliance with legal obligations.
4. Marketing
We do not send marketing emails from this website. If you have engaged us as a client, we may occasionally contact you with project-related updates. You can ask us to stop at any time.
5. Who we share data with
We share personal data only with:
- Trusted service providers who help us run the business (for example our CRM/email provider, cloud hosting and accountant), each bound by contract to process data only on our instructions;
- HMRC, our insurers and professional advisers where legally required;
- Any successor to the business in the event of a corporate transaction.
We do not sell personal data to third parties.
6. International transfers
Where a service provider processes data outside the UK, we use providers that offer appropriate safeguards under UK GDPR — typically UK Adequacy or the ICO's International Data Transfer Agreement.
7. How long we keep data
Enquiry data is kept for up to 24 months from last contact where a project does not proceed. Where we go on to contract with you, we keep contract, project and financial records for the periods required by UK statute — usually six years plus the current tax year for accounting records.
8. Your rights
Under UK GDPR you have the right to access, correct, delete or restrict the processing of your personal data, and to object to processing based on legitimate interest. To exercise any of these rights, contact us at accounts@biav-controls.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).
9. Cookies
This website uses only essential cookies required for the site to function and for basic anonymised traffic measurement. No advertising cookies are set. Your browser settings can be used to block or delete cookies at any time.
10. Security
We take reasonable technical and organisational measures to protect personal data — TLS on the website, access-controlled CRM/email, and role-based access to project files. No online transmission is ever 100% secure, so if you have a serious concern please contact us directly rather than including sensitive detail in a web form.
11. Changes to this policy
We may update this policy from time to time. The version in force is the one published on this page.
