Privacy notice

Who is responsible for your information

Benilli Software and Services Limited is the data controller. We are registered in England and Wales under company number 05149267. Our registered office is 112 Feckenham Road, Headless Cross, Redditch, Worcestershire, B97 5AG.

For privacy questions, email simon.ashton@benilli.net.

Information we collect

• Contact and correspondence details you provide when you email or otherwise contact us, including your name, email address, organisation and the content of your enquiry.
• Project, commercial and billing information needed to discuss, deliver and administer work.
• Limited technical information generated when the website is delivered, such as IP address, browser information, request time and pages requested, where this is recorded by our hosting and security infrastructure.

Please do not send sensitive personal information unless it is necessary and we have agreed how it should be handled.

How and why we use it

We use personal information to respond to enquiries, assess and prepare proposed work, deliver agreed services, maintain business records, issue and manage invoices, protect our systems and meet legal obligations.

Our lawful bases are usually taking steps at your request before entering a contract, performing a contract, complying with a legal obligation, and our legitimate interests in operating, securing and improving the business. Where we rely on legitimate interests, we consider the effect on your rights and interests.

Browser storage and cookies

This website does not currently use advertising or analytics cookies. Where first-party local storage or session storage is used for temporary interface state, that information remains in your browser and is not used to identify you or build a marketing profile.

You can clear this information through your browser settings. If analytics or other non-essential tracking is introduced later, this notice and the site's consent controls will be updated before it is used.

Sharing and international transfers

We may use trusted providers for website hosting, email, document storage, accounting and other business administration. They may process information only as needed to provide their services and subject to their own contractual and legal duties. We may also disclose information where required by law or to establish, exercise or defend legal rights.

Some providers may process information outside the UK. Where data protection law requires it, we use an approved transfer mechanism or rely on an applicable adequacy decision.

How long we keep information

Enquiry information is normally kept for up to two years after the last meaningful contact. Records connected with clients, contracts, transactions and taxation may be kept for up to seven years after the relevant relationship or financial period. Security records are retained only for as long as reasonably needed for security, diagnosis and abuse prevention. We may keep information longer where a legal claim, dispute or statutory requirement makes that necessary.

Your rights

Depending on the circumstances, you may have rights to access, correct or erase your personal information; restrict or object to its use; and receive certain information in a portable form. Where processing relies on consent, you can withdraw that consent at any time. These rights can be limited in some circumstances.

Contact us using the email above to exercise a right. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Other websites and changes

This site links to websites operated by other organisations. Their privacy practices are governed by their own notices. We may update this notice when the website, our services or legal requirements change. The latest version will always appear on this page.