Bossy Business Management (“Bossy”, “we”, “us”) respects your privacy and is committed to protecting personal information. This privacy notice explains how we collect and use personal details when you enquire about, purchase, or receive our services, use our website, join our mailing list, attend an event, or otherwise interact with us.
Who Is Responsible for Your Information?
For personal information collected for Bossy’s own business operations, Bossy Business Management acts as the data controller. If you have questions regarding our data handling procedures, you can contact us directly via email at admin@bossymanagement.co.uk.
Information We May Collect
Depending on how you engage with us, we may collect and process the following categories of information:
- Identity and contact details: Including your name, business name, email address, telephone number, and social media handles.
- Enquiry, client, and contractual information: Covering specific service requirements, written correspondence, proposals, formal agreements, and operational meeting notes.
- Billing and transaction records: Payment card transactions are processed securely through our dedicated payment providers rather than stored on Bossy servers.
- Marketing preferences: Records of your communication preferences and details showing how you engage with our emails, forms, advertisements, or campaigns.
- Website and device identifiers: Including your IP address, browser type, device details, and cookie or analytics metrics where permitted.
- Supplied marketing assets: Content supplied to us for marketing delivery, which may include imagery, video footage, client testimonials, customer enquiries, or other personal information provided by a client.
Why We Use Information and Our Lawful Bases
We only process your personal details when we have a clear lawful basis under UK data protection legislation. The table below outlines how and why your information is handled:
| Purpose for Processing | Typical Lawful Basis |
|---|---|
| Responding to enquiries and taking steps before entering into a contract | Legitimate interests and steps taken at your request prior to entering a contract. |
| Providing and managing contracted marketing and studio services | Performance of a contract, alongside legitimate interests where appropriate. |
| Invoicing, accounting, and statutory legal record keeping | Compliance with legal obligations and legitimate business interests. |
| Managing client relationships, service quality, and internal administration | Legitimate business interests. |
| Direct marketing communications to business contacts or opted-in subscribers | Consent and legitimate interests as permitted by electronic marketing rules (opt-out rights always apply). |
| Website analytics, advertising pixels, and non-essential cookies | Consent where required by applicable regulations. |
| Establishing, exercising, or defending legal claims | Legitimate interests and applicable legal conditions. |
Client Data Processed on Behalf of Clients
When a client provides Bossy with access to their own customer, prospect, subscriber, or employee data solely so that we can deliver marketing services under their direction, the client remains the data controller and Bossy acts as a data processor.
In those circumstances, processing is governed strictly by our formal client agreement and our standard Data Processing Agreement (DPA) rather than this general privacy notice.
Sharing and Service Providers
We work with trusted third-party service providers to support our operations, including suppliers for web hosting, email, cloud storage, call scheduling, web analytics, advertising platforms, CRM tools, accounting software, and project management. Access is strictly restricted to what is reasonably necessary to carry out their functions.
We may also disclose information where required to do so by legal or regulatory authorities, or when taking professional advice from our legal and financial advisers.
International Data Transfers
Certain software providers we use may store or process information outside the United Kingdom. Where UK data protection law requires transfer safeguards, Bossy ensures that appropriate contractual and technical safeguards, including standard contractual clauses or recognised adequacy regulations, are in place.
Data Retention
We hold personal information only for as long as reasonably necessary to fulfil the purposes it was collected for, including meeting any statutory legal, tax, accounting, contractual, and reporting requirements.
When marketing records or client relationships end, data is archived or securely deleted in line with our internal retention schedule. Client-controlled data handled under a processing agreement is returned or securely removed at the conclusion of the project.
Your Legal Rights
Under UK data protection regulations, you hold key rights regarding your personal information, including:
- The right to request access to the personal data we hold about you.
- The right to ask us to correct inaccurate or incomplete details.
- The right to request the erasure of your personal details where there is no good reason for us continuing to process them.
- The right to restrict or object to the processing of your data in specific circumstances.
- The right to data portability for information provided under contract or consent.
- The right to withdraw your consent at any time where processing relies on consent.
To exercise any of these rights, please email admin@bossymanagement.co.uk. You also hold the right to lodge a formal complaint with the Information Commissioner’s Office (ICO) at any time.
Changes to This Privacy Notice
We review and update this notice whenever our systems, third-party tools, or legal requirements change. Any revised versions will be published directly on this page with an updated revision date.