Home / Privacy policy

Legal

Privacy policy

How BP Solutions Limited collects, uses and protects personal data, and the rights you have under UK data protection law.

Last updated: 6 November 2026

1. Who we are

This website is run by BP Solutions Limited, a private company registered in England and Wales under company number 16202710, with its registered office at 62 Croppath Road, Dagenham, England RM10 8DB ("BP Solutions", "we", "us").

For personal data collected through this website and in the course of our business development, we are the controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Questions about this policy or your data can be sent to hello@bpsolutions.uk.

2. Personal data we collect

  • Enquiries: your name, email address, company, the service you are interested in and anything you write in your message when you use our contact form, email us or message us on WhatsApp.
  • Clients and prospective clients: business contact details, job titles, billing details and the correspondence and records needed to agree and deliver our services.
  • Data we handle for clients: when we provide bookkeeping, payroll, Employer of Record (EOR) or BPO services, we process personal data about our clients' staff, contractors, customers and suppliers. How we handle that data, and whether we act as controller or processor, is set out in the written agreement with each client.
  • Candidates and staff employed through our EOR service: the information needed to recruit, contract, pay and administer employees, as explained in the separate privacy notice we give to those individuals.
  • Technical data: our hosting provider keeps server logs (such as IP address, browser type, pages requested and the date and time) to keep the website running and secure.

We do not use analytics, advertising or tracking tools on this website. See our cookie policy.

3. How we use personal data and our lawful bases

PurposeLawful basis
Replying to your enquiry and preparing a proposalSteps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries
Delivering our services and managing the client relationshipPerformance of a contract
Keeping accounting, tax and company recordsLegal obligation
Keeping our website and systems secureLegitimate interests
Occasional updates about our services to business contactsLegitimate interests or consent, as required by the Privacy and Electronic Communications Regulations. You can opt out at any time.

We do not sell personal data and we do not make decisions about you based solely on automated processing.

4. Who we share personal data with

  • Our website hosting and email providers, who store data on our behalf.
  • WhatsApp (Meta), if you choose to contact us that way. Meta's own privacy terms apply to messages sent through WhatsApp.
  • Google Fonts, which supplies the typefaces on this site. Your browser requests the fonts from Google, which receives your IP address to deliver them.
  • Our delivery team in Pakistan, who provide our services and work under confidentiality obligations.
  • Professional advisers such as accountants, lawyers and insurers, where needed.
  • Government bodies, regulators and law enforcement where the law requires it.

5. International transfers

Some of our suppliers and our delivery team are based outside the UK, including in Pakistan, which is not covered by UK adequacy regulations. When personal data is transferred outside the UK, we put appropriate safeguards in place, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with access controls and confidentiality obligations. You can ask us for more information about these safeguards.

6. How long we keep data

  • Enquiries that do not lead to a contract: up to 24 months after our last contact.
  • Client, contract and financial records: six years after the end of the financial year they relate to, to meet UK tax and company law requirements.
  • Server logs: for the short period set by our hosting provider.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), restricted access on a need-to-know basis and confidentiality commitments from everyone who handles client data.

8. Your rights

Under UK data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to its use, to data portability, and to withdraw consent where we rely on consent. To use any of these rights, email hello@bpsolutions.uk. We will respond within one month.

9. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.