Privacy Policy

1. Who we are

BECKFORGE LTD (company number 17509832), 23-27 Maidenhead Street, Hertford, SG14 1DW, United Kingdom, is the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact: partner@beckforge.co.

2. What this Policy covers

This Policy covers personal data we use for our own purposes: running the website, handling enquiries, managing clients and suppliers, client due diligence under our AML Policy, recruitment and meeting legal duties. Our services are for businesses only. When we build or support software for a client, the client owns and is responsible for the data its business processes, including personal data of its customers and users. We handle that data only as the client's processor, under the data processing terms of our agreement with the client. Clients must not share health, payment card, biometric or other sensitive data with us unless that agreement covers it.

3. What we collect

• Contact details: name, job title, company, business email, phone and address, including of suppliers and contractors.
• Messages and project information you send us, including meeting notes.
• Due diligence information about client directors, beneficial owners and signatories: name, date of birth, nationality, address, identity documents, politically exposed person status, and sanctions and adverse media screening results, as our AML Policy requires.
• Contract and payment details: invoices, payment history and bank details.
• Website data: IP address, browser and device type, pages visited, referring site and cookie identifiers.
• Job application details: CV, work history, references and interview notes, and sanctions screening results for people we engage.

We do not collect biometric data, such as facial scans, without first assessing the risk and obtaining your explicit consent. Please do not send us sensitive data such as health information.

4. Where we get it

From you; from the company you work for, for example when it names you as a contact, director or owner; automatically through the website; and from public registers such as Companies House, sanctions and screening databases, identity verification providers, recruiters and referees.

5. Why we use it and our legal basis

From you; from the company you work for, for example when it names you as a contact, director or owner; automatically through the website; and from public registers such as Companies House, sanctions and screening databases, identity verification providers, recruiters and referees.

6. Cookies

We use strictly necessary cookies to run and secure the website, and analytics cookies only with your consent. We do not use cookies for targeted advertising. You can change your choice at any time in the website's cookie settings or in your browser.

7. Marketing

We send business marketing emails only where the law allows. Every email includes an unsubscribe link.

8. Who we share it with

We share personal data only with:

• service providers acting on our instructions, such as hosting, email, accounting, identity verification and sanctions screening providers;
• subcontractors helping deliver our services, under confidentiality obligations;
• professional advisers, such as lawyers, accountants and auditors;
• banks and payment providers, to send and receive payments;
• authorities, including regulators, the National Crime Agency, law enforcement and sanctions authorities, where the law requires or permits, including reports described in our AML Policy; and
• a buyer or investor in a business sale, under confidentiality.

We do not sell personal data or share it for targeted advertising.

9. International transfers

Some service providers are outside the UK. Where personal data leaves the UK, we rely on UK adequacy regulations or approved safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for a copy of these safeguards.

10. Why we use it and our legal basis

From you; from the company you work for, for example when it names you as a contact, director or owner; automatically through the website; and from public registers such as Companies House, sanctions and screening databases, identity verification providers, recruiters and referees.

11. Security

We protect personal data with need-to-know access controls, encryption in transit, multi-factor authentication, logging and checks on our suppliers. Identity documents are kept in restricted systems. If a breach affects your data, we will notify you and the ICO where the law requires.

12. Your rights

You can ask us to:

• give you a copy of your personal data;
• correct inaccurate data;
• delete your data;
• restrict or object to its use, including for direct marketing;
• transfer your data to you or another organisation; and
• withdraw your consent at any time.

Some rights are limited by law. For example, we must keep due diligence and sanctions records for set periods, and we may not be able to tell you about certain reports to authorities. We respond within one month, extendable by two months for complex requests. Email partner@beckforge.co.

13. Children

Our website and services are for businesses and not directed at anyone under 18.

14. Complaints

Send complaints to partner@beckforge.co. We acknowledge them within 30 days and respond without undue delay. You can also complain to the Information Commissioner's Office at ico.org.uk.

15. Changes

We may update this Policy and will publish the new version on this website, with notice of significant changes.