Privacy Policy
Last updated: 8 October 2026
This policy explains how Bespoke Reporting Services Ltd ("we", "us", "our") collects and uses personal data when you visit bespoke-reporting.com, contact us, or work with us. We are committed to handling your information fairly, lawfully and securely, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Bespoke Reporting Services Ltd is the controller of your personal data. We are a company registered in England & Wales(company number 15773150). Our registered office is 11 Heron Way, Halstead, Essex, CO9 2FT.
If you have any questions about this policy or how we use your data, email us at info@bespoke-reporting.com.
2. The data we collect
When you contact us
If you use our contact form or email us, we collect:
- your name and email address;
- your company name and phone number, if you choose to give them;
- the service you're interested in and the content of your message;
- the date and time of your enquiry.
When you become a client
If we work together, we also hold business contact details for you and your colleagues, along with records of our correspondence, proposals, contracts and invoices.
During a project we may be given access to business data that contains personal data, such as customer or staff records. When we process that data on your behalf we act as your processor, and we handle it only on your documented instructions under a separate data processing agreement.
When you visit our website
Our hosting provider automatically records basic technical information when you visit, such as your IP address, browser type and the pages requested. This is used to deliver the website securely and to protect it from abuse. We do not use analytics or advertising cookies. See our Cookie Policy.
3. How and why we use your data
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and sending an automatic confirmation that we've received it | Legitimate interests (responding to people who contact us), or taking steps at your request before entering into a contract |
| Providing our services, managing projects and invoicing | Performance of a contract |
| Keeping business and accounting records | Legal obligation |
| Keeping our website secure and preventing spam or misuse of our contact form | Legitimate interests (protecting our business and website) |
We will not send you marketing emails unless you have asked to receive them, and you can opt out at any time. We do not sell your personal data, and we do not use it for automated decision-making or profiling.
4. Who we share it with
We only share your data with trusted service providers who help us run our business, and only as far as they need it:
- Netlify, Inc.: website hosting and contact form handling;
- Microsoft (Microsoft 365): business email;
- Resend: sending the automatic confirmation email;
- our accountants and professional advisers, where necessary.
We may also disclose data where the law requires it, for example to HMRC or in response to a valid legal request.
5. International transfers
We are a UK business, but some of the service providers listed above are based in, or may store data in, the United States. Where personal data is transferred outside the UK, it is protected by the safeguards in each provider's data processing terms, such as the UK Extension to the EU–US Data Privacy Framework or the ICO's International Data Transfer Addendum.
6. How long we keep it
- Enquiries that don't lead to work: up to 12 months after our last contact, then deleted.
- Client records, contracts and invoices: six years from the end of the financial year they relate to, as required for tax and accounting purposes.
- Client business data processed during a project: returned or deleted at the end of the engagement, as set out in our agreement with you.
7. How we protect it
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and multi-factor authentication on our business systems, and we only access client data that a project needs.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to our use of your data where we rely on legitimate interests;
- ask us to transfer your data to you or another organisation, where applicable.
To exercise any of these rights, email info@bespoke-reporting.com. We will respond within one month. There is normally no charge.
9. Complaints
If you're unhappy with how we've handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.