Privacy Policy

Effective Date: 30 March 2026

Company: Bacsoft Limited

Introduction

Bacsoft Limited (“Bacsoft”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect personal data when you use our website, software, and services.

We process personal data in accordance with:

• UK General Data Protection Regulation (UK GDPR).
• Data Protection Act 2018.
• Privacy and Electronic Communications Regulations (PECR).

Data Controller

Bacsoft Limited is the data controller for the purposes of applicable data protection laws.

Contact: enquiry@bacsoft.co.uk

Information We Collect

We may collect and process the following types of personal data:

Information you provide

• Name, email address, phone number.
• Business details (e.g. company name, VAT/EORI numbers).
• Account/profile information.

Information collected automatically

• IP address and device information.
• Browser type and operating system.
• Usage data (pages visited, actions taken).
• Login and authentication data.

Service-generated data

• Application settings and preferences.
• System logs and audit data.
• Cached data for performance and offline use.

How We Use Your Information

We use personal data for the following purposes:

• To provide and maintain our services.
• To perform contractual obligations.
• To improve and develop our systems.
• To communicate with you regarding services.
• To comply with legal and regulatory obligations.
• To maintain security, prevent fraud, and monitor system integrity.

Where required, we rely on lawful bases including:

• Contractual necessity.
• Legitimate interests.
• Legal obligation.
• Consent (for marketing communications).

Data Sharing and Third Parties

We do not sell or rent personal data.

We may share personal data with trusted third parties where necessary to deliver our services, including:

• Cloud hosting and infrastructure providers (e.g. Microsoft Azure, Microsoft 365).
• IT service providers and support partners.
• Contracted personnel working under our direction.

All third parties are subject to appropriate contractual obligations, including confidentiality and data protection requirements, and access is restricted on a least-privilege basis.

Data Hosting and Transfers

Our services are hosted using secure cloud platforms, primarily Microsoft Azure and Microsoft 365.

Data is stored within the UK or European Economic Area (EEA) where applicable.

Where data is transferred outside the UK/EEA, appropriate safeguards are applied in accordance with UK GDPR.

Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Encryption in transit (TLS 1.2 or higher).
• Access control and least privilege.
• Secure authentication and identity management.
• Regular backups and disaster recovery procedures.
• System monitoring and vulnerability management.

Access to personal data is restricted to authorised personnel only.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including the provision of our services, maintaining system integrity, and complying with legal and regulatory obligations.

Due to the nature of our services, certain data forms part of operational business records and may be retained for the lifetime of the system or customer relationship.

Where data is no longer required, it will be securely deleted or anonymised where appropriate.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to processing.
• Restrict processing.
• Withdraw consent (where applicable).
• Lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise your rights, contact: enquiry@bacsoft.co.uk

Cookies

We use cookies to improve user experience and analyse website usage.

You can control or disable cookies through your browser settings.

Disabling cookies may affect site functionality.

Third-Party Services

Our services may integrate with or rely on third-party providers. These providers operate under their own privacy policies and are selected based on their security and compliance standards.

Children’s Data

Our services are not intended for individuals under the age of 18.

We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time.

Any significant changes will be communicated via our website or other appropriate channels.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Bacsoft Limited

Email: enquiry@bacsoft.co.uk