Privacy Policy

Effective date: 24 October 2025

1) Who we are

Berthier Fitzgerald Group (“we”, “us”, “our”) provides consultancy services.
Registered address: 34 – 35 Hatton Gardens, Holborn, London EC1N 8DX
Company number: [Company no.].
Website: www.bfgroup.global.
Contact for privacy matters: info@bfgroup.global.
Data Protection: dh@bfgroup.global

We are the “controller” of your personal data for the purposes of UK GDPR and the Data Protection Act 2018.

2) The data we collect

We collect and process the following categories of personal data:

  • Identity data – name, job title, company.

  • Contact data – email, phone, postal address, social handles.

  • Account data – login details, profile information, preferences.

  • Transaction data – orders, invoices, payments, VAT numbers.

  • Usage data – pages viewed, links clicked, time on site, referral sources, approximate location.

  • Technical data – IP address, device identifiers, browser type, operating system, cookies.

  • Communications – messages, emails, form submissions, call notes.

  • Marketing preferences – opt-in or opt-out choices.

  • User-generated content – reviews, comments, uploads.

  • Recruitment data CVs, qualifications, right-to-work information.

  • CCTV or call recordings – if you use these, briefly explain where and why.

We do not intentionally collect special category data unless you provide it and we have a clear lawful basis.

3) How we collect data

  • Direct interactions – forms, checkout, bookings, emails, events, phone.

  • Automated technologies – cookies, analytics, similar technologies.

  • Third parties – payment processors, advertising platforms, referral partners, due diligence tools, public sources such as Companies House or LinkedIn.

4) Why we use your data, and our lawful bases

We process personal data for the purposes below, using one or more lawful bases recognised by UK GDPR.

PurposeExamplesLawful basis
Provide products or servicesAccount creation, order fulfilment, supportContract, legitimate interests
Take payments, prevent fraudPayment processing, chargebacks, verificationContract, legitimate interests, legal obligation
Communicate with youRespond to enquiries, service emails, noticesContract, legitimate interests
Improve our site and servicesAnalytics, troubleshooting, testingLegitimate interests
MarketingNewsletters, offers, event invitesConsent, or legitimate interests with soft opt-in where allowed
Legal and complianceTax records, regulatory requestsLegal obligation
Recruitment Assess candidatesConsent, legitimate interests, legal obligation

Where we rely on consent, you can withdraw it at any time.

5) Cookies and similar technologies

We use cookies and similar technologies to operate our site, remember your preferences, and measure performance. For details on types of cookies, providers, retention periods, and how to manage settings, see our Cookie Policy. You can adjust cookie preferences via our cookie banner or your browser settings. Essential cookies cannot be turned off as they keep the site working.

6) Analytics, ads, and social tools

We may use analytics and advertising tools such as  Google Analytics, Meta Pixel, LinkedIn Insight Tag to understand performance and show relevant content. These providers may set their own cookies and act as independent controllers for parts of the processing. Check their policies for more information.

7) Sharing your data

We share personal data only when needed, for example with:

  • Service providers – hosting, email and SMS tools, CRM, helpdesk, analytics, payment processors, delivery partners.

  • Professional advisers – accountants, auditors, legal counsel, insurers.

  • Business partners – where you ask us to connect you, or where a co-branded service is clearly described.

  • Authorities – where required by law or to protect rights.

  • Corporate transactions – if we restructure, merge, or sell parts of the business, data may transfer under appropriate safeguards.

We require processors to keep data secure, use it only under our instructions, and delete it when finished.

8) International transfers

Some providers are located outside the UK. Where we transfer data internationally, we use appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy regulation.

9) How long we keep data

We keep personal data only as long as necessary for the purposes described above, then delete or anonymise it. Typical examples:

  • Contract and transaction records – up to 7 years for tax and accounting.

  • Marketing data – until you unsubscribe or after 24 months of inactivity.

  • Account data – while your account is active, then 12 months.

  • Recruitment data  – 6 months after the process ends unless you agree we keep it longer.

10) Your rights

Under UK data protection law, you have the right to:

  • Access – ask for a copy of your personal data.

  • Rectification – correct inaccurate or incomplete data.

  • Erasure – request deletion where there is no good reason to keep it.

  • Restriction – ask us to pause processing in certain cases.

  • Objection – object to processing based on legitimate interests or to direct marketing.

  • Portability – receive your data in a structured, commonly used format and request we transfer it to another controller.

  • Withdraw consent – where we rely on consent.

To exercise your rights, contact info@bfgroup.global. We may need to verify your identity.

You also have the right to complain to the UK Information Commissioner’s Office (ICO). See ico.org.uk or call 0303 123 1113. We would appreciate the chance to resolve your concerns first.

11) Children

Our services are not directed at children under 16. If you believe a child has provided us with personal data, contact us so we can delete it.

12) Security

We use administrative, technical, and organisational measures to protect personal data, including encryption in transit, access controls, and regular reviews. No system is completely secure, so please take care with your own credentials and devices.

13) Automated decision-making and profiling

If you use any automated scoring, credit checks, or profiling for ads or risk, explain it plainly here, including logic involved, significance, and consequences, plus how users can request human review.

14) Links to other websites

Our site may link to third-party websites. Those sites have their own privacy policies, and we are not responsible for their content or practices.

15) Changes to this policy

We may update this policy from time to time. The latest version will always appear on this page with the effective date at the top. Significant changes will be communicated where appropriate.

16) How to contact us

Questions or requests about this policy or your data:
Email: info@bfgroup.global