GDPR & Data Handling

GDPR Compliance and Data Protection

Beffer is committed to protecting your personal data and complying with UK GDPR regulations.

What Data We Collect

We collect only the data necessary to provide our services:

• Contact Information: Name, email, phone number
• Project Details: Location, sector, specifications, budget
• Communication Records: Messages between you and suppliers
• Payment Information: Processed securely by Stripe (we never store card details)
• Usage Data: How you interact with our platform

How We Use Your Data

We use your data to:

• Connect you with relevant suppliers
• Process payments securely
• Provide customer support
• Improve our services
• Comply with legal obligations

Data Sharing

We share your data only with:

• Suppliers: When you request a quote, we share your contact details and project specifications
• Service Providers: Stripe (payments), Resend (emails), Supabase (database)
• Legal Requirements: When required by law or to protect our rights

Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing for marketing purposes

Data Retention

We retain your data for as long as necessary:

• Active Accounts: Until you close your account
• Transaction Records: 7 years (UK tax law requirement)
• Marketing Data: Until you unsubscribe
• Call Center Emails: Raw content purged after 30 days

Data Security

We protect your data with:

• Encryption in transit and at rest
• Regular security audits
• Access controls and monitoring
• Secure data centers (UK/EU)

Contact Us

For data protection questions or to exercise your rights:

• Email: privacy@beffer.co.uk
• Phone: 0333 444 1098
• ICO: www.ico.org.uk