Privacy Policy

1. Introduction

• This Privacy Policy outlines how Biz-Datas (a trading name of Sasvat Ltd.) collects, uses, processes, retains, shares, and protects your personal data in compliance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant UK data protection and privacy laws.

• By visiting our website, using our services, or engaging with us in any commercial, contractual, or informational capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.
   

2. Legal Basis for Processing Data

Biz-Datas processes your personal data under the following legal bases, as outlined in Article 6 of the UK GDPR:

• Consent: Where you have given clear and unambiguous consent for us to process your personal data.

• Contractual Necessity: Where processing is necessary for the performance of a contract with you.

• Legal Obligation: Where we are legally required to process the data (e.g., for tax or accounting purposes).

• Legitimate Interests: Where processing is necessary for our legitimate interests, provided your rights do not override these.
   

3. Categories of Personal Data Collected

We may collect the following categories of personal data:

• Identity Data: Full name, job title, date of birth, national ID (where applicable)

• Contact Data: Email address, postal address, telephone number

• Business Information: Company name, registration number, business sector

• Technical Data: IP address, browser type, device ID, operating system

• Usage Data: Website interactions, pages viewed, time spent on pages

• Marketing Data: Preferences for receiving marketing communications

• Transactional Data: Service history, invoice details, payment records

We do not collect sensitive personal data (special category data) unless specifically required and processed with explicit consent.
 

4. Methods of Data Collection

We collect your personal data using the following means:

• Direct interactions: when you submit forms on our website, request services, or communicate with us.

• Automated technologies: such as cookies, server logs, analytics tools.

• Third-party sources: such as public directories, LinkedIn, or referrals.
   

5. Purposes for Processing Personal Data

We use your data for the following business and operational purposes:

• To deliver services you have requested or contracted

• To issue invoices, process payments, and manage billing

• To communicate with you, including responding to enquiries

• To manage user accounts and subscriptions

• To provide updates, marketing materials, and newsletters (where consented)

• To improve our services and enhance user experience

• To comply with legal and regulatory obligations
   

6. Sharing and Disclosure of Personal Data

We do not sell your personal data. However, we may disclose your data to third parties in the following circumstances:

• Service Providers: such as cloud hosting, payment gateways, and marketing platforms under strict contractual obligations.

• Legal Authorities: where we are required to do so by law, subpoena, court order, or governmental regulation.

• Business Transfers: if part of our business is sold, transferred, or merged.

All third parties are required to respect the confidentiality and security of your personal data and must process it in accordance with UK GDPR.
 

7. Data Security

We implement industry-standard technical and organisational security measures to protect your data. These include:

• Encrypted communication (SSL/TLS)

• Secure data storage and restricted access

• Antivirus, firewall, and intrusion detection systems

• Data minimisation and retention procedures

Despite our best efforts, no method of data transmission over the Internet is 100% secure. Therefore, we cannot guarantee the absolute security of your data.
 

8. Data Retention Policy

We retain personal data only for as long as necessary for the purposes stated above, or as required under applicable laws.

• Contractual data is retained for six (6) years for tax and audit purposes.

• Marketing consent data is retained until revoked.

• Technical and analytics data is stored for up to 24 months.

Data is securely disposed of when it is no longer required.
 

9. International Data Transfers

Biz-Datas primarily stores and processes data within the United Kingdom. Where international transfers are necessary (e.g., for use of international service providers), we ensure appropriate safeguards are in place such as:

• Standard Contractual Clauses approved by the UK ICO

• Certification schemes such as UK-US Data Bridge (where applicable)
   

10. Your Rights as a Data Subject

Under the UK GDPR, you have the following rights:

• Right to Access – to obtain a copy of your personal data

• Right to Rectification – to correct inaccurate or incomplete data

• Right to Erasure – to request deletion where data is no longer necessary

• Right to Restrict Processing – to pause processing in certain circumstances

• Right to Data Portability – to request data in a structured, machine-readable format

• Right to Object – to object to processing based on legitimate interests or direct marketing

• Right to Withdraw Consent – where processing is based on consent

To exercise your rights, please contact us at [Insert Email Address]. We will respond within 30 days in accordance with ICO guidelines.
 

11. Children's Privacy

We do not knowingly collect or process data relating to individuals under the age of 16. If we learn we have collected such data, we will delete it immediately.
 

12. Changes to This Policy

We may update this Privacy Policy from time to time in response to legal or operational changes. The latest version will always be available on our website, and material changes will be communicated to affected individuals.
 

13. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact:

Data Protection Officer (DPO)
Sasvat Ltd. (Trading as Biz-Datas)
Email: info@bizdatas.com
Registered Office:
Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
 

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) via www.ico.org.uk.