PRIVACY NOTICE
How we (Beyond Face Value Ltd) collect, use, and protect your personal data.
About Beyond Face Value Ltd
Beyond Face Value Ltd (trading as BFV) is a strategic tendering consultancy helping growth-focused UK SMEs win high-value contracts through structured bid leadership, capture engineering, and executive governance.
Registered Name: Beyond Face Value Ltd
Website: www.bfv-ltd.co.uk
Contact Email: Dominic.ibell@bfv-ltd.co.uk
For the purposes of UK data protection legislation (the UK General Data Protection Regulation and Data Protection Act 2018), Beyond Face Value Ltd is the data controller responsible for your personal data.
Data We Collect and How We Collect It
Depending on how you interact with us, we may collect the following categories of personal data:
Identity and Contact Data
- Full name, job title, and company name
- Email address, telephone number, and business address
Professional and Engagement Data
- Organisation size, sector, and tendering activity
- Bid and proposal documentation shared during engagements
- Notes from consultations, reviews, and advisory sessions
Technical and Usage Data
- IP address, browser type, device information, and operating system
- Pages visited, time spent on site, and referral source
- Cookie and tracking identifiers (see Section 6)
Communications Data
- Enquiries, feedback, and correspondence sent via our contact form, email, or telephone
How We Collect Your Data
- Direct interactions — when you complete our contact form, request a bid review, subscribe to updates, attend an event, or engage us for consultancy services
- Automated technologies — when you browse our website, cookies and analytics tools may collect technical data automatically
- Third parties — we may receive your data from referral partners, networking contacts, or publicly available business directories
How and Why We Use Your Data
We use your personal data for the purposes set out below, alongside the lawful basis under UK GDPR that applies to each:
- Providing consultancy services (Strategic, Embedded, Advisory)
Lawful Basis: Contract. Necessary for performance of our agreement with you. - Responding to enquiries and delivering Bid Health Checks and free resources
Lawful Basis: Legitimate Interest. To manage our business and respond to prospective clients. - Sending relevant updates, insights, and marketing communications
Lawful Basis: Consent (where opted in) or Legitimate Interest (for existing clients). - Website analytics and service improvement
Lawful Basis: Legitimate Interest. To understand usage patterns and improve our services. - Compliance with legal and regulatory obligations
Lawful Basis: Legal Obligation. To meet our statutory duties. - Business administration and fraud prevention
Lawful Basis: Legitimate Interest. To administer and protect our business.
Where we rely on legitimate interests, we have conducted a balancing assessment to ensure your rights and freedoms are not overridden.
Data Sharing, Transfers, and Retention
Who We Share Your Data With
We do not sell your personal data. We may share it with the following categories of recipients only where necessary:
- Service providers — hosting providers, IT support, email platforms, and analytics tools that process data on our behalf under contract
- Professional advisors — accountants, lawyers, and auditors where required
- Regulatory bodies — HMRC, the ICO, or other authorities where legally required
- Business partners — where a referral or joint engagement is in place, with your knowledge
All third-party processors are required to process your data in accordance with UK data protection law and our instructions.
International Transfers
We primarily store and process data within the United Kingdom. Where any personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations, International Data Transfer Agreements (IDTAs), or the UK Addendum to EU Standard Contractual Clauses.
Retention Periods
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Client data — duration of engagement plus 6 years (statutory limitation and tax obligations)
- Enquiry data — up to 2 years from last contact unless a business relationship is established
- Marketing data — until you withdraw consent or unsubscribe
- Website analytics — in accordance with our analytics provider’s policies, typically up to 26 months
When personal data is no longer required, it is securely deleted or anonymised.
Your Rights
Under UK data protection law, you have the following rights in relation to your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct any inaccurate or incomplete data
- Erasure — request deletion of your data where there is no lawful reason for continued processing
- Restriction — ask us to suspend processing of your data in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests or direct marketing
To exercise any of these rights, please contact us at Dominic.Ibell@bfv-ltd.co.uk. We will respond within one calendar month. There is no fee unless a request is manifestly unfounded or excessive.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Cookies, Security, and Other Information
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience, analyse site performance, and understand visitor behaviour. The types of cookies we use include:
- Strictly Necessary — essential for the website to function (e.g. consent management); these cannot be disabled
- Analytics — help us understand site usage via IONOS SiteAnalytics; data is collected in aggregated form
- Functional — enable features such as the website translation service
- Third-Party — set by services such as Google Maps on certain pages
You can manage your cookie preferences at any time using the Privacy Settings panel on our website, or by configuring your browser to block or delete cookies (though this may affect site functionality).
Data Security
We have implemented appropriate technical and organisational measures to protect your personal data, including encryption of data in transit (SSL/TLS), access controls limiting data to authorised personnel, regular review of security practices, and secure disposal of data when no longer required.
Children’s Data
Our services are designed for businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a child, we will take prompt steps to delete it.
Changes to This Notice
We may update this privacy notice from time to time to reflect changes in our practices, services, or legal requirements. Any significant changes will be communicated via our website.
Contact Us
If you have any questions about this privacy notice or how we handle your personal data, please get in touch:
Beyond Face Value Ltd
Email: Dominic.ibell@bfv-ltd.co.uk
Website: www.bfv-ltd.co.uk/contact