Privacy Notice

1. Who we are and how to contact us

This notice explains how Bayseian Ltd (“Bayseian”, “we”, “our”, “us”) collects and uses personal data, in line with the UK GDPR and the Data Protection Act 2018. Bayseian Ltd is the data controller for the personal data described here.

2. The personal data we collect

We collect only what we need for the purposes below. Depending on how you interact with us, this may include:

• Identity and contact data — name, business email, phone number, employer and role.
• Enquiry and meeting data — the message, interests, and scheduling details you submit through our contact form or booking flow.
• Recruitment data — CV, work history and application details, where you apply to work with us.
• Technical and usage data — IP address, device and browser type, and pages visited, collected through cookies and analytics (see our Cookie Notice).
• Contract and correspondence data — records generated while we deliver services to your organisation.

3. Purposes and lawful bases

We only process personal data where we have a lawful basis under the UK GDPR:

Our legitimate interests. Where we rely on legitimate interests, those interests are running and growing a business-to-business services firm: responding to people who contact us, delivering client work, keeping our systems secure, and reaching relevant business contacts. We balance these against your rights and only rely on this basis where the impact on you is limited and expected. You can object at any time (see section 7).

4. Where we obtain data and recipients

Most data is provided directly by you. We may also obtain limited business-contact data from public professional profiles (such as LinkedIn) and from business referrals and introductions, where relevant to a potential engagement.

We share personal data only with service providers who process it on our behalf under contract, and with professional advisers or authorities where required. Categories of recipient include:

• Cloud hosting and infrastructure providers
• Website analytics providers
• Email, calendar and scheduling providers
• Customer-relationship and enquiry-management tools
• Professional advisers (legal, accounting) and, where legally required, regulators or authorities

We do not sell personal data.

5. International transfers

Some of our providers process data outside the UK. Where that happens, we rely on appropriate safeguards: transfers to countries covered by UK adequacy regulations, or contractual protections such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures needed. You can request more detail on the safeguards for a specific transfer using the contact above.

6. Retention

We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it. As a general guide:

• Enquiries that do not progress — up to 24 months from last contact.
• Client contract and correspondence records — for the engagement and up to 6 years afterwards, to meet legal and accounting requirements.
• Marketing contacts — until you unsubscribe or object, then removed from active lists.
• Recruitment data — up to 12 months after a decision, unless you ask us to keep it on file.
• Analytics data — retained per the provider's configured period; see our Cookie Notice.

7. Your rights

Under the UK GDPR you have the right to:

• Be informed about how we use your data
• Access a copy of your data
• Rectify inaccurate or incomplete data
• Erase data in certain circumstances
• Restrict or object to processing, including direct marketing and processing based on legitimate interests
• Data portability, where processing is based on consent or contract and is automated
• Withdraw consent at any time, without affecting processing already carried out

To exercise any right, email contact@bayseian.com. We respond within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, though we'd ask you to contact us first so we can try to put things right.

8. Automated decisions and profiling

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing, and we do not carry out profiling of website visitors for such decisions.

9. Children

Our website and services are aimed at businesses and public-sector organisations, not children. We do not knowingly collect personal data from anyone under 18.

10. Cookies

We use necessary cookies to operate the site and, with your consent, analytics cookies to understand performance. You can accept, reject non-essential cookies, or change your choice at any time. See our Cookie Notice for the full inventory and controls.

11. Changes to this notice

We review this notice at least annually and will update the review date above when we make changes. Material changes will be reflected on this page.