Privacy Policy
Last updated: 19 August 2026 · BSD MGMT LTD · bsdmgmt.agency
Contents
1. Who we are
BSD MGMT LTD ("BSD MGMT", "we", "us") is a private limited company registered in England and Wales under company number 17048142, with its registered office at 162 Burghley Court Kingsquarter, Maidenhead, SL6 1AW, United Kingdom.
We operate the website bsdmgmt.agency and provide digital marketing and management services to business clients. For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018 we are the data controller of the personal data described in this policy, except where section 12 states otherwise.
You can reach us at info@bsdmgmt.agency.
2. Scope
This policy explains what personal data we collect when you visit our website, contact us, or engage us as a client, how we use it, who we share it with, and what rights you have. It does not apply to third-party websites or platforms we link to, which have their own policies.
3. What we collect
3.1 Information you give us
- Enquiry details — your name, brand or company name, email address, platform handles, indicated audience size, current income sources, and anything you write in the message field.
- Client onboarding details — billing contact, company registration details, VAT number where applicable, invoicing address, and the names and email addresses of people at your organisation we work with.
- Correspondence — emails, meeting notes, shared documents and messages exchanged during an engagement.
3.2 Information collected automatically
- Technical data — IP address, browser type and version, device type, operating system, referring URL and the pages you view on bsdmgmt.agency.
- Cookie data — as described in our Cookie Policy. Non-essential cookies are only set after you consent.
3.3 Information we receive from third parties
When you engage us you may grant us access to platform, analytics, community and commerce accounts you control — for example Instagram, YouTube Studio, TikTok, Discord, a membership platform or an email service. We access that data to deliver our services. We do not export, copy or repurpose your audience's personal data for our own purposes.
4. How we use it
| Purpose | Data used |
|---|---|
| Responding to enquiries and preparing proposals | Enquiry details, correspondence |
| Delivering contracted services | Onboarding details, correspondence, account access |
| Invoicing, payment collection and accounting | Billing and company details |
| Meeting legal, tax and record-keeping obligations | Contract and billing records |
| Website operation, security and abuse prevention | Technical data, essential cookies |
| Understanding website usage | Analytics cookie data (consent only) |
| Occasional updates to existing clients | Business email address (opt-out available) |
We do not sell personal data, and we do not use it to build advertising profiles of website visitors.
5. Legal bases
- Performance of a contract — to deliver the services you engaged us for and to invoice you.
- Legitimate interests — to respond to business enquiries, secure our website and communicate with existing clients, balanced against your rights and freedoms.
- Consent — for non-essential cookies and optional marketing communications, withdrawable at any time.
- Legal obligation — to retain accounting and tax records as required by UK law.
6. Who we share it with
We share personal data only with service providers who help us operate, and only as far as needed. Categories include:
- Hosting and infrastructure — our website host and domain provider.
- Email and productivity — our email provider and document storage.
- Payment and accounting — our bank, payment processors and accountants.
- Platforms and tools — the social, community, email and commerce platforms used in your engagement, on accounts you own.
- Professional advisers — legal and tax advisers, where necessary.
We may also disclose data where required by law, court order or lawful request from a public authority, or to establish, exercise or defend legal claims. We will tell you about such a request unless legally prevented. A current list of our providers is available on request.
7. International transfers
Some of our providers are located outside the United Kingdom, including in the United States and the European Economic Area. Where personal data is transferred out of the UK we rely on appropriate safeguards, including UK adequacy regulations where they apply, the International Data Transfer Agreement, or the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, plus any additional measures required. A copy of the relevant safeguards is available on request.
8. How long we keep it
| Category | Retention |
|---|---|
| Enquiries that do not become clients | 12 months from last contact |
| Client contract and correspondence records | Engagement plus 3 years |
| Invoices and accounting records | 6 years, as required by UK company and tax law |
| Website analytics data | Up to 14 months |
| Cookie consent record | 12 months from the choice |
When a retention period ends we delete the data or irreversibly anonymise it.
9. Security
We apply technical and organisational measures appropriate to the risk, including encrypted connections across the website, access control and multi-factor authentication on business systems, least-privilege access to client accounts, and periodic review of who holds access. No method of transmission or storage is completely secure, but we will notify you and the Information Commissioner's Office of a personal data breach where the law requires it.
10. Your rights
Under UK data protection law you have the right to:
- Be informed about how your data is used
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data
- Request restriction of processing
- Object to processing based on legitimate interests
- Request a portable copy of data you provided to us
- Withdraw consent at any time, without affecting processing carried out before withdrawal
Email info@bsdmgmt.agency to exercise any of these. We respond within one month and do not charge for a reasonable request. We may ask you to verify your identity first.
11. Complaints to the ICO
If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.
12. Community and audience data
Where we handle personal data belonging to a client's audience or community — for example while moderating comments, replying to messages, or administering a membership on the client's own accounts — we act as a data processor on that client's documented instructions. The client remains the controller and is responsible for its own privacy notice and lawful basis. We will enter into a data processing agreement covering that work on request.
13. Children
Our website and services are directed at businesses and are not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it. Where a client's audience is likely to include minors, we agree additional handling and safeguarding rules during onboarding.
14. Changes
We may update this policy to reflect changes in our practices or the law. The date at the top of the page shows the current version. Material changes affecting existing clients will be notified by email.
15. Contact
BSD MGMT LTD
Company No. 17048142
162 Burghley Court Kingsquarter
Maidenhead, SL6 1AW
United Kingdom
Email: info@bsdmgmt.agency