Brithaventech

BritHaven Tech Header
Privacy Policy โ€” BritHaven Tech
Legal Documentation

Privacy Policy

This Privacy Policy explains how BritHaven Tech Limited collects, uses, stores, and shares your personal data when you visit our website or engage our services. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

๐Ÿ“… Last Updated: 27 May 2025
๐Ÿ›๏ธ Governing Law: England & Wales
๐Ÿ›ก๏ธ Framework: UK GDPR ยท DPA 2018
โœ… UK GDPR Compliant
โœ… Data Protection Act 2018
โœ… ICO Registered
โœ… No Data Selling
โœ… Your Rights Protected
Data Controller: BritHaven Tech Limited BritHaven Tech Limited is the data controller responsible for your personal data. We process data exclusively in connection with our role as an authorised UK technology reseller. We do not sell personal data to any third party under any circumstances.
01

Who We Are

BritHaven Tech Limited is the data controller responsible for your personal data. We are registered in England and Wales and operate as an authorised UK reseller of technology products and solutions.

Data Controller Contact Details
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at the address above.
๐Ÿ“ง
privacy@brithaven.co.ukData protection enquiries
๐Ÿ“ž
0800 000 0000Monโ€“Fri, 08:30โ€“17:30
๐Ÿข
[Company Address], EnglandRegistered Office
๐Ÿ”ข
Co. No. [00000000]
02

What Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Data You Provide Directly

When you submit a quote request or contact us, we collect: your first and last name, work email address, telephone number, company name, job title, the products or services you are enquiring about, the number of users, and any additional requirements or messages you provide.

2.2 Data Collected Automatically

When you visit our Website, we automatically collect certain technical data, including: your IP address, browser type and version, operating system, pages visited, time and date of your visit, time spent on each page, and referring URLs. This data is collected via cookies and similar tracking technologies (see Section 8).

2.3 Data from Third Parties

We may receive information about you from third parties such as our Vendor partners, marketing data providers, or publicly available sources, where this is relevant to our business relationship with you.

โœ… What We Do Not Collect
We do not collect special category data (such as health, biometric, or racial data), payment card details (all payments are handled by our secure payment processor), or personal data from individuals we know to be under 18 years of age.
03

How We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases under the UK GDPR:

3.1 To Respond to Quote Requests and & Enquiries

Legal basis: Legal basis: Performance of a contract / Pre-contractual steps (Article 6(1)(b) UK GDPR). We use the information you provide in a quote request to prepare and deliver pricing proposals, respond to your enquiries, and communicate with you about the products and services you are interested in.

3.2 To Fulfilling Orders & Managing Your Account

Legal basis: Performance of a contract (Article 6(1)(b) UK GDPR). Where you place an Order with us, we process your data to administer the contract, arrange delivery or provisioning of licences, issue invoices, and manage ongoing account matters.

3.3 To Sending Marketing Communications

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) or consent (Article 6(1)(a) UK GDPR), depending on context. We may send you information about our products, services, promotions, and industry news that we believe may be of interest to you. Where required by law, we will obtain your prior consent. You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or contacting us directly. .

3.4 To Complying with Legal Obligations

Legal basis: Legal obligation (Article 6(1)(c) UK GDPR). We may process your data where necessary to comply with applicable laws and regulations, including tax, accounting, and anti-money laundering obligations.

3.5 To Improving Our Website & Services

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR). We use technical and analytical data to monitor the performance of our Website, identify and resolve technical issues, and improve the user experience. Our legitimate interest is in maintaining a secure and effective online presence.

3.6 To Protecting Our Legal Rights

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR). We may process your data where necessary to establish, exercise, or defend legal claims, or to protect the rights and safety of BritHaven Tech, our staff, or third parties.

04

Who We Share Your Data With

We Do Not Sell Your Data
We do not sell your personal data. We may share your data with the following categories of recipients:
4.1 Vendor Partners

Where you place an Order or request a quote for a specific product, we may share relevant details (such as your company name, number of users, and contact information) with the relevant Vendor in order to obtain accurate pricing, process licences, or provision services. Vendors receiving your data are subject to their own privacy policies.

4.2 Service Providers

We engage trusted third-party service providers to support our business operations, including IT infrastructure providers, CRM platforms, email service providers, and accounting software. These providers process data on our behalf and are bound by contractual data processing agreements.

4.3 Professional Advisers

We may share your data with our legal advisers, accountants, auditors, and insurers where necessary for the conduct of our business or the management of legal proceedings.

4.4 Law Enforcement and Regulatory Authorities

We may disclose your data to the police, courts, regulatory bodies, or other government authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of BritHaven Tech or others.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your personal data may be transferred to the relevant third party as part of that transaction. We will notify you of any such transfer where required by law.

05

International Data Transfers

BritHaven Tech is based in the United Kingdom. Where we transfer personal data outside the UK โ€” for example, to Vendor partners or service providers located in other countries โ€” we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements.

These may include reliance on UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or standard contractual clauses approved by the Information Commissioner's Office (ICO).

06

How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

Data Type Retention Period Reason
Quote request data (no Order placed) 12 months from the date of the request.
Order and contract records 7 years from the end of the contractual relationship, in accordance with our legal and tax obligations.
Marketing contact data Until opt-out Until you withdraw consent or opt out, or until we determine the data is no longer relevant.
Website analytics data 26 months Standard analytics practice
Legal claims data 6 years post-proceedings For the duration of any proceedings and up to 6 years thereafter.
07

Your Data Protection Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

๐Ÿ‘๏ธ
Right of Access
You have the right to request a copy of the personal data we hold about you (a Subject Access Request).
โœ๏ธ
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
๐Ÿ—‘๏ธ
Right to Erasure
You have the right to request that we delete your personal data where there is no longer a lawful basis for us to retain it, subject to certain exceptions.
โธ๏ธ
Right to Restriction processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, for example whilst the accuracy of data is being contested.
๐Ÿ“ค
Right to Portability
Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
๐Ÿšซ
Right to Object
You have the right to object to processing based on legitimate interests, including for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately.
๐Ÿค–
Rights in Relation to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. BritHaven Tech does not currently carry out such processing.
๐Ÿ“ฌ How to Exercise Your Rights
To exercise any of these rights, please contact us at privacy@brithaven.co.uk. We will respond to all valid requests within one (1) calendar month. We do not charge a fee for exercising your rights, except in cases of manifestly unfounded or excessive requests. We may need to verify your identity before processing your request.
08

Cookies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyse Website traffic, and support our marketing activities. Cookies are small text files placed on your device when you visit a website.

You may manage or withdraw your consent to non-essential cookies at any time via our cookie consent banner or your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.

09

Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include encrypted data transmission (SSL/TLS), access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is entirely secure. Whilst we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

10

Third-Party Websites

This Website may contain links to third-party websites, including Vendor websites and partner portals. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party website you visit.

11

Children's Privacy

Our Website and services are directed exclusively at business users and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately and we will take steps to delete it.

12

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. Any updates will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

Where changes are material, we will take reasonable steps to notify you.

13

How to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.