This Privacy Notice explains how I collect, use and protect personal information when you visit the BizOps Co. website, contact me, work with me, or receive business communications from me.
Who I am
BizOps Co. is operated by Rebecca Dunn, a UK self-employed sole trader trading as BizOps Co.
I provide fractional technology and operations support, including website development, SEO, systems and automation, project management and operational support.
For personal information that I use for my own business purposes, I am the data controller.
You can contact me about privacy or data protection matters at:
Email: rebecca@biz-ops.co
Personal information I may collect
Depending on how you interact with me, I may collect and use information such as:
- your name;
- business or organisation name;
- job title or professional role;
- work email address and other business contact details;
- information you provide when contacting me about my services;
- correspondence and records of our communications;
- project, contractual, invoicing and payment-related information;
- publicly available professional information, such as information published on a company website or professional profile;
- appointment information where you book a meeting through Calendly; and
- limited technical information, such as your IP address and browser details, which is processed by my hosting and font providers when your browser loads this website.
I do not intentionally collect special category personal information through this website.
Where I obtain personal information
I may receive personal information:
- directly from you when you email me, make an enquiry, book a call or work with me;
- from clients, agencies or business partners where relevant to a project;
- from publicly available professional sources, such as company websites and professional networking profiles, where I identify businesses or professional contacts who may reasonably be interested in my services or partnership opportunities; and
- automatically, in the limited way described under Cookies and website technologies, when your browser loads this website.
How I use personal information
I may use personal information to:
Respond to enquiries and provide my services
This includes responding to messages, arranging calls, preparing proposals, managing projects and communicating with clients.
My lawful basis will usually be taking steps at your request before entering into a contract, performing a contract, or my legitimate interests in operating my business and responding to business enquiries, depending on the circumstances.
Manage client relationships and projects
I use information to deliver agreed services, manage projects, communicate with clients, maintain appropriate business records and administer the working relationship.
The lawful basis will normally be performance of a contract, legitimate interests in running and managing my business, or compliance with legal obligations where applicable.
Business development and professional outreach
I may use professional contact information obtained from publicly available business sources to contact relevant businesses or professional contacts about BizOps Co. services or potential agency partnerships.
Where I rely on legitimate interests, those interests are developing my business, identifying relevant commercial opportunities and communicating with businesses that may reasonably have an interest in the services I provide.
I consider the nature of the information, its professional context, the likely expectations of the individual and the impact of the communication before relying on this basis.
Electronic marketing communications are also subject to the Privacy and Electronic Communications Regulations (PECR). Different rules can apply depending on whether the recipient is a company or another type of business, such as a sole trader.
You can ask me to stop sending business-development communications at any time by replying to the message or contacting me at rebecca@biz-ops.co.
Operate and secure this website
This website does not currently use Google Analytics or any other analytics, advertising or tracking service.
When your browser loads the site, my hosting provider (Netlify) and font provider (Google Fonts) necessarily process limited technical information, such as your IP address and browser details, in order to deliver the pages and fonts and keep the service secure. My lawful basis is my legitimate interests in operating a secure, working website.
Meet legal and administrative obligations
I may use or retain information where reasonably necessary for accounting, taxation, legal claims, fraud prevention or other applicable legal obligations.
Sharing information with service providers
I use third-party services to operate my business. Depending on the interaction, personal information may be processed by providers including:
- Google Workspace and Gmail, for email and business communications;
- Netlify, for website hosting and delivery;
- Google Fonts, for delivering the typefaces used on this website;
- Calendly, for meeting bookings;
- ClickUp, for project and task management;
- LastPass, for password management and security;
- Wise, for payments and financial administration;
- Anthropic/Claude, where used as part of business or technical workflows; and
- OpenAI/ChatGPT, where used as part of business or technical workflows.
I may also use other professional service providers where necessary to operate my business.
I do not sell personal information.
Where a provider processes personal information on my behalf, I expect it to handle that information in accordance with its contractual and legal obligations.
Important: the extent to which personal information is entered into AI services such as Claude or ChatGPT depends on the particular workflow. Confidential or client-controlled information should only be used where appropriate and in accordance with applicable client instructions and contractual requirements.
International transfers
Some of the service providers I use operate internationally or may store or process information outside the UK.
Where personal information is transferred internationally, the relevant provider may rely on mechanisms recognised under UK data protection law, such as UK adequacy regulations or approved contractual safeguards.
I do not claim that every provider uses the same transfer mechanism.
Information about individual providers' processing locations and safeguards is available in their respective privacy and data-processing documentation.
How long I keep personal information
I keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for any legal, accounting or administrative requirements.
As a general guide:
- enquiries that do not become client relationships may be retained for up to 24 months after the last meaningful contact;
- business-development and outreach records may be retained for up to 24 months after the last meaningful contact, unless you object or opt out sooner;
- I may retain a minimal record of an opt-out where necessary to ensure I respect your preference in future;
- active client and project information is normally retained for the duration of the working relationship and afterwards where reasonably required for business, contractual or legal purposes; and
- invoices, transaction records and related information may be retained for the period required by applicable tax, accounting and legal obligations.
Technical information processed by my hosting and font providers is retained according to those providers' own retention practices.
Your data protection rights
Depending on the circumstances, UK data protection law may give you the right to:
- request access to personal information I hold about you;
- ask me to correct inaccurate or incomplete information;
- ask me to delete your information in certain circumstances;
- ask me to restrict how I use your information;
- object to processing based on legitimate interests;
- object to the use of your information for direct marketing;
- request transfer of certain information to you or another organisation where the right to data portability applies; and
- withdraw consent at any time where processing is based on consent.
These rights are not absolute and may depend on the circumstances and the lawful basis for the processing.
You have the right to object at any time to the use of your personal information for direct marketing.
To exercise a privacy right, contact:
Complaints
If you have concerns about how I use your personal information, please contact me first so I can try to resolve them.
You also have the right to complain to the UK supervisory authority:
Information Commissioner's Office (ICO)
www.ico.org.uk (opens in a new tab)
When I work with client data
This Privacy Notice primarily describes how BizOps Co. handles personal information for its own business purposes.
Some of my work involves accessing or processing personal information belonging to a client's business, such as information within websites, systems, customer records or operational tools.
Where I process personal information solely on a client's instructions as part of delivering services, the client will generally remain the data controller and I will act as its processor or service provider.
In those circumstances, the client's own privacy notice, lawful bases, policies and instructions govern how that information is used. Appropriate contractual and data-processing arrangements should be put in place where required.
Cookies and website technologies
This website does not set cookies and does not use local storage or similar technologies on your device. It does not use Google Analytics or any other analytics, advertising or tracking tools. For that reason there is no cookie banner.
Two things are worth knowing:
- Fonts. The typefaces on this site are loaded from Google Fonts. To deliver them, Google receives your IP address and browser details. Google states that it does not set cookies for this service.
- Links to other services. This site links to Calendly for booking calls, to LinkedIn and to client websites. Nothing from those services loads on this website, but once you follow a link, that service's own cookies and privacy notice apply.
This Privacy Notice will be updated if the website's setup changes, for example if analytics is added. If that happens, any non-essential cookies or tracking will only be used with your consent.
Changes to this Privacy Notice
I may update this Privacy Notice from time to time to reflect changes to my services, website, providers or legal obligations.
The latest version will always be published on this website with its last-updated date.