Privacy Notice

This privacy notice explains how IBP Ventures Ltd ("we", "our", "us") collects, uses, and protects your personal data when you visit our website (ibpventures.co.uk) or communicate with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

IBP Ventures Ltd is the data controller responsible for your personal data.
Company Number: 14605472
Registered Location: York, United Kingdom
Contact Email: darren@ibpventures.co.uk

2. The Data We Collect

We strictly limit the data we collect to what is necessary for our commercial operations. We do not use invasive tracking cookies or analytics pixels on our website.

If you use our Contact Form, we collect:

• Identity Data: First name and last name.
• Contact Data: Work email address.
• Professional Data: Company/Institution name.
• Message Data: Any information you choose to provide regarding your commercial or technical inquiries.

3. How We Use Your Data & Legal Basis

Under the UK GDPR, we must have a lawful basis to process your data. We use your data for the following purposes:

• To respond to your commercial inquiries: When you submit a form, we process this data to contact you and discuss potential feasibility pilots. Legal Basis: Pre-contractual steps (Article 6(1)(b)) and Legitimate Interests (Article 6(1)(f)).
• To manage our business relationship: Maintaining records of our communications with you. Legal Basis: Legitimate Interests (Article 6(1)(f)).

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We only share your data with trusted third-party processors who facilitate our operations:

• FormSubmit: We use FormSubmit to securely route contact form submissions from our website to our email inbox.
• Google Cloud (Firebase): Our website is hosted on Google Firebase, which processes standard, anonymised server logs necessary for security and uptime.

Where these providers process data outside the UK/EEA, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including the purposes of satisfying any legal, accounting, or commercial reporting requirements. If a commercial discussion does not lead to a partnership, your contact data is routinely deleted.

6. Your Legal Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Request access: You can ask for a copy of the personal data we hold about you.
• Request correction: You can ask us to correct any incomplete or inaccurate data.
• Request erasure: You can ask us to delete your personal data where there is no good reason for us continuing to process it.
• Object to processing: You can object to us processing your data based on legitimate interests.

If you wish to exercise any of these rights, please email us at darren@ibpventures.co.uk.

7. Complaints

If you have any concerns about how we handle your data, we would appreciate the chance to deal with your concerns in the first instance. However, you also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk).