1. Who we are
This website is operated by BBA Apps (“BBA Apps”, “we”, “us” or “our”), a software solutions company. For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR and similar laws, we are the controller of the personal data described in this policy. You can reach us at info@bbaapps.com.
2. Data we collect
Information you give us
When you use our contact form or email us, we collect:
- your name and email address;
- optionally, your company name and phone number;
- the topic of your enquiry and the content of your message;
- your confirmation that you have read this Privacy Policy, and the date and time of submission.
Information collected automatically
- Technical data — IP address, browser type, device information, referring page and timestamps, processed by our hosting provider to deliver the website securely and to protect our forms against spam and abuse.
- Analytics data (only with your consent) — pages visited, time on page, approximate location (country/city level), device type and similar usage statistics collected by Google Analytics 4.
We do not knowingly collect special categories of personal data, and we ask you not to include such data in your messages.
3. How we use data & legal bases
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Responding to your enquiry and preparing proposals | Steps taken at your request before entering into a contract (Art. 6(1)(b)); our legitimate interest in answering business enquiries (Art. 6(1)(f)) |
| Operating, securing and preventing abuse of the website | Legitimate interests (Art. 6(1)(f)) |
| Website analytics via Google Analytics | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Complying with legal obligations and defending legal claims | Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)) |
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects, and we do not send marketing emails without your separate, explicit consent.
4. Cookies & analytics
We only use strictly necessary cookies by default. Analytics cookies are set only after you opt in through our cookie banner, and you can change your choice at any time via “Cookie settings” in the footer. We honor the Global Privacy Control browser signal as a refusal of optional cookies. Google Analytics is configured with Google Signals and ad personalization disabled. Full details are in our Cookie Policy.
5. Sharing & processors
We do not sell or rent your personal data, and we do not share it for cross-context behavioral advertising. We share data only with service providers that process it on our behalf under data-processing agreements, including:
- Vercel Inc. — website hosting and delivery;
- Google LLC / Google Ireland Ltd. — website analytics (only with your consent);
- Microsoft Corporation — business email and productivity services;
- Database and email-delivery providers (for example Supabase Inc.) — secure storage of enquiries and delivery of notification emails.
We may also disclose data where required by law, to protect our rights, or in connection with a merger, acquisition or sale of assets, in which case this policy will continue to apply.
6. International transfers
Some of our providers process data outside your country, including in the United States. Where personal data from the EEA, UK or Switzerland is transferred, we rely on adequacy decisions (such as the EU–U.S. Data Privacy Framework, where the recipient is certified) or on the European Commission's Standard Contractual Clauses and equivalent UK safeguards.
7. Retention
- Enquiries that do not lead to a business relationship: up to 24 months after our last contact, then deleted.
- Enquiries that lead to a contract: for the duration of the relationship plus the period required by applicable tax and commercial law.
- Analytics data: 14 months (the Google Analytics retention setting we apply).
- Your cookie-consent choice: 180 days, after which we ask again.
8. Security
We use appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS/TLS), access controls based on least privilege, reputable infrastructure providers and regular review of our practices. No method of transmission over the internet is completely secure, but we work hard to protect your information.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data deleted (“right to be forgotten”);
- restrict or object to certain processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing carried out before withdrawal;
- lodge a complaint with your local data-protection supervisory authority.
To exercise any of these rights, email info@bbaapps.com. We will respond within one month (or the period required by your local law) and may need to verify your identity first. We will not discriminate against you for exercising your rights.
10. U.S. privacy rights
Residents of California and other U.S. states with comprehensive privacy laws may have rights to know, access, correct and delete personal information, and to opt out of the “sale” or “sharing” of personal information. In the preceding 12 months we have collected identifiers, commercial enquiry information and internet activity information for the purposes described above. We have not sold or shared personal information as those terms are defined under the CCPA/CPRA. You or an authorized agent may submit a request using the contact details below.
11. Children
This website is intended for businesses and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows when it was last revised. Material changes will be highlighted on this website and, where required, we will ask for your consent again.
13. Contact
Questions about this policy or our handling of your data? Email info@bbaapps.com or use our contact form.