PRIVACY POLICY

Last updated 14 March 2024

This privacy notice for Bridgeworks LTD (‘we‘, ‘us‘, or ‘our‘), describes how and why we might collect, store, share and otherwise use (‘process‘) your personal information when you use our services (‘Services‘), such as when you:

• Visit our website at http://www.4bridgeworks.com, or any website of ours that links to this privacy notice;
• Purchase our Services; and/or
• Engage with us in other related ways, including any sales, marketing, or events.

In legal terms, Bridgeworks Ltd is the ‘data controller’ and responsible under UK and EU data protection laws for the personal information described in this privacy notice, since we determine the means and/or purposes of the data processing we perform. This privacy notice does not apply to the personal information we process as a ‘data processor’ on behalf of our customers. In those situations, the customer that we provide services to and with whom we have entered into a data processing agreement is the ‘data controller’ responsible for your personal information, and we merely process your information on their behalf in accordance with their/your instructions. If you want to know more about our customers’ privacy practices, please read their privacy policies and direct any questions you have to them.

Questions or concerns? We have written this privacy notice to help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@4bridgeworks.com.

 

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? We may process personal information when you use our Services depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? We do not process sensitive personal information on our own behalf (although if the data customers ask us to process on your behalf as part of our Services contains sensitive personal information then we will process this as a data processor).

Do we receive any personal information from third parties? We do not receive any personal information from third parties.

How do we process your personal information? We process your personal information for many reasons, including to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.

In what situations and with which types of parties do we share personal information? We may share personal information in specific situations and with specific categories of third parties.

How do we keep your personal information safe? We have organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request (in the case of your right to access personal information), or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

 

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR PERSONAL INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
6. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
7. HOW DO WE KEEP YOUR PERSONAL INFORMATION SAFE?
8. DO WE COLLECT PERSONAL INFORMATION FROM MINORS?
9. WHAT ARE YOUR PRIVACY RIGHTS?
10. CONTROLS FOR DO-NOT-TRACK FEATURES
11. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?
12. DO WE MAKE UPDATES TO THIS NOTICE?
13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

 

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect the personal information that you provide to us. Some personal information is also automatically collected when you visit our website or use our Services.

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Identity Data including first name, last name, any previous names, marital status, title, gender and date of birth.
• Contact Data including contact address, email address and telephone numbers.
• Financial Data including bank account and payment card details.
• Transaction Data including details about payments to and from you and other details of products and services you have purchased from us.
• Marketing and Communications Data including your preferences in receiving marketing from us and our third parties and your communication preferences.

 

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect personal information through cookies and similar technologies. For further information about how we use cookies please see Section 5.

The personal information we collect automatically includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your internet protocol (IP) address, login data, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called ‘crash dumps’), and hardware settings).

• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

• Location Data. We collect location data such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

Sensitive Information. We do not process sensitive information on our own behalf (although if the data customers ask us to process on your behalf as part of our Services contains sensitive personal information then we will process this as a data processor).

Accuracy of Personal Information. It is important that the personal information that you provide is true, complete, and current. Please contact us if your personal information changes during your relationship with us, for example if you wish to use a new email address to be contacted.

 

2. HOW DO WE PROCESS YOUR PERSONAL INFORMATION?

In Short: We process your personal information for many reasons including to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your personal information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including the following (please see Section 3 for further information regarding the legal basis we rely on for each reason):

Purpose	Type of data	Legal basis
To deliver and facilitate delivery of services to the user. We may process your personal information to provide you with the requested service.	Identity, contact, financial and transaction data	Performance of a contract with you
To respond to user inquiries/offer support to users. We may process your personal information to respond to your inquiries and solve any potential issues you might have with the requested service.	Identity, contact, financial and transaction data	Performance of a contract with you
To send administrative information to you. We may process your personal information to send you details about our products and services, changes to our terms and policies, and other similar information.	Identity, contact and marketing and communication data	Performance of a contract with you   Necessary to comply with a legal obligations   Legitimate interests (to keep our records updated and manage our relationship with you)
To fulfil and manage your orders. We may process your personal information to fulfil and manage your orders, payments, returns, and exchanges made through the Services.	Identity, contact, financial and transaction data	Performance of a contract with you Legitimate interest (to recover debts due to us)
To enable user-to-user communications. We may process your personal information if you choose to use any of our offerings that allow for communication with another user.	Identity and transaction data	Performance of a contract with you
To request feedback. We may process your personal information when necessary to request feedback and to contact you about your use of our Services.	Identity, financial and transaction data	Legitimate interest (to manage and improve our services)
To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if you have requested information from us or purchased services from us and you have not opted out of receiving the marketing. You can opt out of our marketing emails at any time.	Marketing and communication data	Legitimate interest (to develop and grow our business) or consent where required
To deliver targeted advertising to you. We may process your personal information to develop and display personalised content and advertising tailored to your interests, location, and more.	Marketing and communication data	Legitimate interest (to develop and grow our business)
To protect our Services. We may process your personal information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.	Identity, transaction, log and usage, device and location data	Legitimate interest (to manage and improve our services and to protect our business)   Necessary to comply with a legal obligation
To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.	Identity, transaction, log and usage, device and location data	Legitimate interest (to improve our services)
To determine the effectiveness of our marketing and promotional campaigns. We may process your personal information to better understand how to provide marketing and promotional campaigns that are most relevant to you.	Marketing and communication data	Legitimate interest (to develop and grow our business)

 

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfil our contractual obligations, to protect your rights, or to fulfil our legitimate business interests.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your personal information if you have given us permission (i.e. consent) to use your personal information for a specific purpose. You can withdraw your consent at any time
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
• Legitimate Interests. We may process your personal information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms.
• Legal Obligations. We may process your personal information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share your personal information in specific situations described in this section and/or with the following categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your personal information with third-party vendors, service providers, contractors, or agents (‘third parties‘) who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct. The categories of third parties we may share personal information with are as follows:

• Data Analytics Services

We also may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal information in the same way as set out in this privacy policy.

• When we use Google Analytics. We may share your information with Google Analytics to track and analyze the use of the Services. The Google Analytics Advertising Features that we may use include: Google Analytics Demographics and Interests Reporting. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt out means include http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

 

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your personal information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store personal information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

 

6. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

In Short: We keep your personal information for as long as necessary to fulfil the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.  We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.

In some circumstances you can ask us to delete your data: see Section 9 below for further information.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

 

7. HOW DO WE KEEP YOUR PERSONAL INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality. However, despite our safeguards and efforts to secure your personal information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your personal information.  Please only access the Services within a secure environment.

We do not transfer your personal information outside the UK/EEA/Switzerland.

 

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect personal information from or market to children under 18 years of age.

We do not knowingly solicit personal information from or market to children under 18 years of age. By using the Services, you confirm that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such personal information from our records. If you become aware of any personal information we may have collected from children under age 18, please contact us at dpo@4bridgeworks.com.

 

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), and Switzerland, you have rights that allow you greater access to and control over your personal information. You may also review, change, or terminate your account at any time.

You have the right to:

• Request access to your personal information (commonly known as a “subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate personal information we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure of your personal information in certain circumstances. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have successfully exercised your right to object to processing (see below), where we may have processed your personal information unlawfully or where we are required to erase your personal information to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your personal information (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal information which override your right to object.
• You also have the absolute right to object any time to the processing of your personal information for direct marketing purposes..
• Request the transfer of your personal information to you or to a third party. We will provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format. Note that this right only applies to automated personal information which you initially provided consent for us to use or where we used the personal information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
• Request restriction of processing of your personal information. This enables you to ask us to suspend the processing of your personal information in one of the following scenarios:
  • If you want us to establish the personal information’s accuracy
  • Where our use of the personal information is unlawful but you do not want us to erase it;
  • Where you need us to hold the personal information even if we no longer require it as you need it to establish, exercise or defend legal claims; or
  • You have objected to our use of your personal information but we need to verify whether we have overriding legitimate grounds to use it.

You can make such a request by contacting us by using the contact details provided in the section ‘HOW CAN YOU CONTACT US ABOUT THIS NOTICE?’ below.

We will consider and act upon any request in accordance with applicable data protection laws. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or (in the UK) the Information Commissioner’s Office UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

We would, however, appreciate the chance to deal with your concerns before you approach the relevant data protection authority so please contact us in the first instance.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

If you have questions or comments about your privacy rights, you may email us at support@4bridgeworks.com.

 

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (‘DNT’) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

 

11. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: You may have additional rights based on the country you reside in.

Australia

We collect and process your personal information under the obligations and conditions set by Australia’s Privacy Act 1988 (Privacy Act).

This privacy notice satisfies the notice requirements defined in the Privacy Act, in particular: what personal information we collect from you, from which sources, for which purposes, and other recipients of your personal information.

If you do not wish to provide the personal information necessary to fulfill their applicable purpose, it may affect our ability to provide our services, in particular:

• offer you the products or services that you want

• respond to or help with your requests

At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us by using the contact details provided in the section ‘HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?’

If you believe we are unlawfully processing your personal information, you have the right to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner.

 

12. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated ‘Revised’ date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

 

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice or the use of your personal information, you may contact our Data Protection Officer (DPO), davidt@4bridgeworks.com, by email at dpo@4bridgeworks.com, by phone at +44 1590 615 444, or contact us by post at:

Bridgeworks LTD
Unit 1 Aero Centre
Ampress Park
Lymington SO41 8QFUnited Kingdom

 

14. THIRD PARTY LINKS

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share personal information about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.