Our Commitment to GDPR

Beffer is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We respect your privacy and protect your personal data.

Your Rights Under UK GDPR

1. Right to Be Informed

You have the right to know:

• What data we collect
• Why we collect it
• How we use it
• Who we share it with
• How long we keep it

See our Privacy Policy for full details.

2. Right of Access

You can request a copy of your personal data. We'll provide:

• All personal data we hold about you
• How we're using it
• Who we've shared it with
• How long we'll keep it

Response time: Within 30 days
Cost: Free for the first request

3. Right to Rectification

You can correct inaccurate or incomplete data:

• Update your profile in dashboard settings
• Or email us at privacy@beffer.co.uk

4. Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data if:

• It's no longer necessary for our services
• You withdraw consent
• You object to processing
• Data was unlawfully processed

Note: We may retain some data for legal/tax requirements (7 years for financial records).

5. Right to Restrict Processing

You can ask us to stop processing your data while:

• Verifying the accuracy of your data
• Investigating a complaint
• Determining the lawfulness of processing

6. Right to Data Portability

You can receive your data in a machine-readable format (JSON, CSV) to transfer to another service.

7. Right to Object

You can object to:

• Marketing communications (opt out anytime)
• Profiling or automated decision-making
• Processing based on legitimate interests

Legal Basis for Processing

We process your data based on:

1. Contract

• Providing the platform service
• Processing quotes and payments
• Managing your account

2. Consent

• Marketing emails (opt-in only)
• Optional analytics cookies

3. Legitimate Interest

• Platform security and fraud prevention
• Service improvement and analytics
• Customer support

4. Legal Obligation

• Tax and accounting records (7 years)
• Compliance with UK law

Data Protection Officer

For GDPR-related questions, contact our Data Protection Officer:

• Email: dpo@beffer.co.uk
• Response time: Within 5 working days

How to Exercise Your Rights

Via Dashboard

• Update profile information
• Download your data
• Delete your account
• Manage notification preferences

Via Email

Send requests to: privacy@beffer.co.uk

Include:

• Your full name
• Your email address (registered with Beffer)
• Specific request (access, deletion, etc.)
• Proof of identity (for security)

Data Breaches

In the event of a data breach:

• We'll notify the ICO within 72 hours
• We'll notify affected users without undue delay
• We'll provide details of the breach and our response

Complaints

If you're not satisfied with our response, you can complain to:

Information Commissioner's Office (ICO)

• Website: ico.org.uk
• Phone: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

International Data Transfers

We primarily use UK-based services. If we transfer data outside the UK:

• Only to countries with adequate data protection
• Using standard contractual clauses
• With your explicit consent where required

Children's Data

Beffer is a B2B platform for businesses. We do not knowingly process data from anyone under 18 years old.

Updates to This Page

We may update this information to reflect changes in GDPR compliance. Check back regularly or sign up for email notifications.

Contact

For GDPR questions:

• Data Protection Officer: dpo@beffer.co.uk
• General Privacy: privacy@beffer.co.uk
• Phone: 0333 444 1098