Privacy Policy

Privacy Policy – BDF InfoSec

Last updated: August 2026

BDF InfoSec (“we”, “us”) respects your privacy. This policy explains what information we collect and how we use it.

Who we are

BDF InfoSec provides practical guidance on AI governance and the EU AI Act for small and medium-sized organisations. Contact: seanpollonais@bdfinfosec.co.uk

What information we collect

We may collect:

• Your name and email address when you contact us
• Information needed to process a purchase (handled by our payment provider)
• Basic technical data such as IP address and browser type when you visit the site

How we use your informationWe use it to:

• Respond to enquiries
• Deliver digital products you purchase
• Improve the website and our services
• Meet legal and accounting obligations

Payment processing

Payments are processed by Lemon Squeezy (or another payment provider). We do not store your full payment card details.

Legal basis

We process personal data on the basis of:

• Your consent (when you contact us)
• Performance of a contract (when you buy a product)
• Legitimate interests (running and improving the business)
• Legal obligations

Data sharing

We do not sell your data. We only share it with service providers who help us operate the website and process payments, and only when necessary.

Data retention

We keep personal data only as long as needed for the purposes above or as required by law.

Your rights

Under UK GDPR and EU GDPR you have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Object to certain processing
• Withdraw consent where applicable

To exercise these rights, email us at seanpollonais@bdfinfosec.co.uk.

Cookies

The website may use basic cookies or similar technologies needed for it to function. We do not use them for advertising.

Changes

We may update this policy from time to time. The latest version will always be on this page.

Contact

For any privacy questions: seanpollonais@bdfinfosec.co.uk