Privacy & Cookie policy
Bros&Co Group Ltd, (“Bros&Co” or “we” in any form) is committed to protect the personal data and safeguard the privacy of our website visitors and contact persons for our customers, suppliers and other business partners. For more information about us, see Section 7.
This Privacy Policy describes how Bros&Co, in its capacity as a data controller, processes personal data in accordance with the General Data Protection Regulation (EU Regulation 2016/679) (hereinafter referred to as the “GDPR”).
We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website.
1. Categories of personal data, processing purposes and legal bases
In this Section 1 we have set out the categories of personal data that we may process, the purposes for which we may process personal data, the legal bases of the processing and the retention period for the personal data.
1.1 Ongoing business partners
If you represent an organization that we do business with, we may process the following personal data in order to facilitate our business relationship with the organization which you represent, i.e. name and contact details such as e-mail address, full name, title, telephone number, which organization you represent as well as correspondence. We may process personal data included in your personal profile on our website which may include your name, address, telephone number, email address, title, which organization you represent as well as correspondence. The profile data may be processed for the purpose of enabling and monitoring your use of our website and services.
We may also process correspondence data, i.e. information relating to our customer relationships, including information contained in or relating to any communication that you send to us. The source of the customer relationship data is you or your employer. The personal data may be processed for the purposes of managing our relationships with customers, communicating with customers, keeping records of those communications and promoting our products and services to customers. The legal basis for this processing is our legitimate interests, namely the proper management of our customer relationships.
Our legal basis for processing of the personal data is our legitimate interests to conduct our business and the proper management of our customer relationships.
We will retain the personal data for as long as we have a business relationship. After that we may retain your personal information for a maximum of 5 years, following the end of our business relationship.
1.2 Potential business partners
If you represent an organization that we consider to do business with, we process personal data in order to facilitate our potential business relationship with the organization which you represent, i.e. name and contact details such as [e-mail address, full name, title, telephone number, which organization you represent as well as correspondence]. Our legal basis for processing of the personal data is our legitimate interests to conduct our business.
We may also process information contained in any enquiry you submit to us regarding goods and/or services for the purpose of offering, marketing and selling relevant goods and/or services to you based on your enquiry. Our legal basis for processing of the personal data is in this case legitimate interest or consent.
We will retain the data for [a maximum of 5 years], following our latest contact. Where the contacts have led to a business relationship, the personal data will be processed as described in the previous section, Ongoing business partners.
1.3 Customer support
In order to provide customer support, we process personal data regarding organizational belonging, name, email address, phone number, location data, correspondence, matter number and information about the relevant enquiry. The correspondence data may be processed for the purposes of communicating with you and record-keeping. Our legal basis for processing personal data is our legitimate interests to conduct our business and to communicate with the person that has reached out to our customer support.
We will retain the data for a maximum of 12 months following the termination of the relevant service agreement.
1.4 Correspondence with other individuals
Occasionally, we engage in correspondence with individuals in other matters than those accounted for above. This may be the case where individuals have general questions about our services. Such correspondence may include communication content and metadata associated with the communication, e.g. metadata associated with communication generated using the website contact forms. Our legal basis for processing personal data in this respect is our legitimate interests to conduct our business, including to respond to such queries.
We will retain the data for a [maximum of 5 years], following the latest contact with you.
1.5 Newsletters and mailing lists
We process your name, contact information, organizational belonging and title and email address in order to provide you with marketing and product information in email notifications and/or newsletters. Our legal basis for doing so is consent or legitimate interests. Where the legal basis is consent, this can be withdrawn at any time by opting-out by following the instructions in the message.
We will retain the data and process it for the purposes of delivering newsletters until you opt-out or withdraw your consent.
1.6 Branding
We publish material containing personal data to inform about our activities on our website or on social media. Our legal basis for doing so is our legitimate interests to inform about our business for branding purposes or consent.
1.7 Press releases
We publish material containing personal data to inform about our activities on our website or on social media. Our legal basis for doing so is our legitimate interests to inform about our business for branding purposes or consent.
1.8 Social media
We use LinkedIn and Twitter to market and inform about our company and our services and products. The legal basis is our legitimate interests to use such channels for marketing and information. The social media providers each inform about their privacy practices and we encourage you to inform yourself thereof.
The data will be retained as long as it may be relevant to fulfil the purpose. In case of any questions, please refer to ‘Contact information’ in section 7.
1.9 Handling data subjects rights
We will process email address, name, correspondence and data about the request. Our legal basis for processing personal data is compliance with a legal obligation. The data will be retained as long as it may be relevant and for a maximum of three (5) years.
1.10 Other processing purposes
In addition to the specific purposes for which we may process your personal data set out in this Section 1, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. Furthermore, we may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks.
We may also process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
We will retain personal data for these purposes in accordance with the second paragraph of Section 2. below.
2. Retention
Your personal data will be retained for the different purposes as specified for each section above. In addition to retention for the foregoing purposes, we may also retain your personal data in order to comply with applicable laws, such as bookkeeping laws, or if we need your personal data to establish, exercise or defend legal claims.
In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, the period of retention of all personal data categories will be determined based on the necessity of storing that data for longer than necessary.
Where the data is only stored, it will be archived with appropriately limited access rights.
3. Who do we share your personal data with
Bros&Co may engage external service providers, who act as data processors of Bros&Co, to provide certain services to Bros&Co, such as website service providers, marketing service providers or IT support service providers. When providing such services, the external service providers may have access to and/or may process your personal data. We request those external service providers to implement and apply security safeguards to ensure the privacy and security of your personal data. We may also disclose your personal data to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and the legal bases, set out in this policy. Your personal data may also be shared with our business partners for marketing purposes, to the extent you have provided your consent.
In addition to the foregoing, Bros&Co may transfer – in compliance with applicable data protection law – personal data to law enforcement agencies, governmental authorities, legal counsels, insurers, external consultants, or business partners. In case of a corporate merger or acquisition, personal data may be transferred to the third parties involved in the merger or acquisition, including potential buyers, investors and professional advisers.
4. International transfers of Personal Data
Personal Data may be transferred to and processed by recipients which are located inside or outside the United Kingdom. Other recipients might be located in other countries which do not adduce an adequate level of protection from a UK data protection law perspective. Bros&Co will take all necessary measures to ensure that transfers out of the UK are adequately protected as required by applicable data protection law. With respect to transfers to countries not providing an adequate level of data protection, we base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the UK Information Commissioner's Office or by a supervisory authority, approved code of conducts together with binding and enforceable commitments of the recipient, or approved certification mechanisms together with binding and enforceable commitments of the recipient.
5. Data subjects rights
You have a number of rights in connection with the processing of your personal data, subject to certain conditions set out in the GDPR and local data protection laws, including the right to:
- Request access to your personal data (“data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request the rectification of the personal data that we process about you. This enables you to have incomplete or inaccurate data we hold about you corrected.
- Request the deletion of your personal data. This enables you to ask us to delete or remove personal data where there is no overriding reason for us to retain it.
- Ask us to stop processing personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground.
- Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of your personal data to another party. If you have given your consent for processing of your personal data and that consent has served as a legal basis for processing, you can withdraw this consent at any time with future effect by contacting us as stated in the ‘Contact’ page.
To exercise your rights please contact us as stated below in Section 7.
In case of complaints you may contact our Data Protection Officer at contact@brosand.co and you also have the right to lodge a complaint with the competent data protection supervisory authority in particular in the UK of your habitual residence, place of work or of an alleged infringement of the GDPR.
6. Changes to the Privacy Policy
Bros&Co reserves the right to change this Privacy Policy at any time. We will give you reasonable notice of any significant changes to the Privacy Policy, where appropriate. If so, we will notify you by a message or by email. You will also find the date of the latest change to the Privacy Policy on this website.
7. Contact information
This website is owned and operated by the company Bros&Co Group Ltd.
We are registered in UK. If you have concerns or questions regarding this Privacy Policy, please contact us by email, using the email address contact@brosand.co
8. Cookie policy
We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website.
8.1 Introduction
This Cookie Policy explains how Bros&Co ("we," "us," or "our") uses cookies and similar technologies to collect, process, and handle data about visitors to our website ("you" or "your"). It also outlines your rights regarding the use of cookies. By continuing to use our website, you consent to the use of cookies as described in this policy.
8.2 What Are Cookies?
Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work efficiently and to provide information to website owners. Cookies allow us to improve your browsing experience and understand how our site is being used.
9. Data We Collect Using Cookies
9.1 User Data
- User Demographics: Age, gender, and interests (if enabled via analytics settings).
- Geolocation: Country, region, city, and in some cases, more specific locations.
- Device Information: Device type (e.g., desktop, mobile, tablet), operating system, and browser used.
- User Type: Identification of users as new or returning visitors.
9.2 Traffic Source Data
- Acquisition Channels: How users arrive at our site, including direct traffic, organic search, paid search, referral links, social media, and email campaigns.
- Source/Medium: Details of the source (e.g., Google, Facebook) and the medium (e.g., organic, paid, referral).
- Campaign Data: Tracking data for marketing campaigns using UTM parameters (source, medium, campaign name).
- Referral Sources: Websites or sources that direct traffic to our website.
- Search Queries: Organic search terms, if integrated with Google Search Console.
9.3 Session Data
- Sessions: Total number of user sessions.
- Session Duration: Time spent on the website per session.
- Pages Per Session: The average number of pages viewed during a session.
- Bounce Rate: Percentage of sessions where users view only one page before exiting.
- Engaged Sessions: Sessions lasting longer than 10 seconds, involving a conversion event or multiple page views.
9.4 Behavioral Data
- Pageviews: Total number of pages viewed.
- Unique Pageviews: Number of sessions where specific pages were viewed.
- Top Pages: Pages with the highest number of visits.
- Exit Pages: Pages where users most commonly leave the site.
- Events: Tracked interactions, such as video plays, clicks, downloads, or form submissions.
- Scroll Depth: Percentage of page scrolled by users (if enabled).
- Site Search: Internal search terms entered by users on the website.
9.5 Conversion Data
- Goal Completions: Total number of goal conversions (e.g., form submissions, sign-ups).
- Funnel Visualisation: Path users take through predefined steps to complete a goal.
9.6 Engagement and Interaction Data
- User Engagement: Metrics such as average session duration and engagement rate.
- Event Tracking: Custom interactions like video plays, outbound clicks, and form submissions.
- Scroll Depth: How far users scroll down a page.
- Video Interactions: Play, pause, and completion events for embedded videos.
9.7 Site Speed Data
- Page Load Time: Time taken for pages to load.
- Server Response Time: Time taken by the server to respond to a request.
- Page Timings: Average load times for different pages.
9.8 Technical Data
- Device Category: Desktop, tablet, or mobile device.
- Browser and Operating System: Types of browsers (e.g., Chrome, Firefox) and operating systems (e.g., Windows, macOS).
- Network: Information about network providers or ISPs.
- Screen Resolution: Users’ screen resolution to optimise design.
9.9 Real-Time Data
- Active Users: Number of users currently active on the site.
- Real-Time Traffic Source: Current sources directing visitors to the site.
- Current Page Views: Pages currently being viewed by users in real-time.
9.10 User Flow and Behaviour Flow.
- User Flow: Navigation paths taken by users, starting with the first page visited.
- Behaviour Flow: Visual representation of interactions and navigation across pages.
9.11 User Flow and Behaviour Flow
- Custom Audiences: Grouping of users based on behaviours, demographics, or acquisition methods.
- Comparisons: Metrics comparing different audience segments (e.g., new vs. returning users, mobile vs. desktop).
9.12 Data Retention
- Event Data: Retained for 14 months.
- User Data: Retained for 14 months.
9.13 Data Captured via Forms
When you submit an enquiry through our website, we collect the following information, which is stored securely in our database for up to 7 years:
- Full name
- Email address
- Organisation
- Job role
- Message
- Timestamp
- Agreement to newsletters (if opted-in).
This data is sent directly to Bros&Co operations via email for follow-up purposes.
9.14 Types of Cookies Used
- Strictly Necessary Cookies: Essential for website functionality and cannot be disabled.
- Performance Cookies: Collect data on how visitors use the website, including the above-mentioned metrics.
- Functional Cookies: Remember user preferences to enhance their experience.
- Targeting/Advertising Cookies: Track users for personalised advertising and marketing purposes.
9.15 Third-Party Tools and Cookies
We use third-party analytics tools such as Google Analytics, which may place their own cookies on your device. These cookies enable us to analyse user behaviour and improve our services. Third-party providers are contractually obligated to comply with applicable data protection laws.
9.16 Managing Your Cookie Preferences
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
9.17 Your Rights
Under the UK GDPR and other applicable regulations, you have the right to:
- Request rectification or deletion of your data.
- Restrict processing or object to certain data uses.
- Lodge a complaint with a supervisory authority (e.g., the ICO in the UK).
9.18 Updates to This Policy
We may update this Cookie Policy periodically to reflect changes in technology, legislation, or our business operations. Any changes will be posted on this page, and where significant, we will notify you. Access the personal data we hold about you.
- Request rectification or deletion of your data.
- Restrict processing or object to certain data uses.
9.19 Contact Us
For further information about this Cookie Policy or our data practices, please contact us at: contact@brosand.co