Privacy Policy

Who we are

This policy explains how Business & Consumer Choices Telemarketing Limited ("BCC", "we", "us") collects and uses personal information. We are a company registered in England and Wales (company number 08909427) with our registered office at 5 Orion Park, Orion Way, Kettering, NN15 6PP. We are registered with the Information Commissioner's Office (ICO) under registration number ZA665710.

We also operate two contact centres in Umhlanga, Durban, South Africa: Lighthouse Quarter (14 Chartwell Drive, Umhlanga, 4320) and Manhattan House (Platinum Towers, Equinox Road, Umhlanga, Durban, 4320)

You can contact our data protection team at info@bcctelemarketing.co.uk, by phone on 01933 443322, or by post to our registered office marked "Data Protection".

Two roles: controller and processor

Most of our work is running telephone and customer service campaigns for other organisations (our clients). This matters for how your information is handled:

When we act for a client, the client decides why and how your information is used. The client is the controller and we are their processor. We only use your information on their written instructions, under a data processing agreement. If we call you about a client's product or service, that client's privacy notice also applies, and we will tell you who the client is if you ask.
When we run our own business (this website, finding and serving our own clients, recruitment and our own marketing), BCC is the controller.

This policy covers both, but where we act as a processor, the client's privacy notice explains your rights in full. You can still contact us and we will pass your request to the client straight away.

Information we collect

People we call or who call us on behalf of our clients

Name, job title, organisation, phone numbers, email and postal address.
Details of the conversation, including notes, outcomes, orders, bookings, registrations or preferences you give us.
Call recordings (see "Call recording" below).
Your marketing preferences and any request not to be contacted.

Clients, prospects and suppliers

Business contact details of the people we work with or would like to work with.
Correspondence, meeting notes, contract and billing information.

Website visitors

Information you enter into our forms (for example contact, data request or newsletter forms).
Technical data such as IP address, browser, device and pages visited, collected through cookies and similar technologies. See our Cookie Policy.

Job applicants

Your CV, contact details, employment history, qualifications, right-to-work documents and interview notes.
Where the role requires it and the law allows, the results of background checks.

We do not intentionally collect special category information (such as health, religion or ethnicity). If you share it with us during a call, we will only record it where it is needed and lawful to do so.

Where we get your information

Directly from you, on the phone, by email or through our website.
From our clients, who give us the details of their customers, members, subscribers or event attendees for a campaign.
From reputable business data suppliers and publicly available sources (such as company websites and Companies House) when we research business contacts.
From recruitment agencies and job boards if you apply for a role.

How and why we use it

Purpose	Lawful basis (UK GDPR)
Running campaigns and customer service for our clients	We act on our client's instructions. The client is responsible for choosing the lawful basis.
Recording calls for quality, training, compliance and resolving disputes	Legitimate interests (and our client's legitimate interests where we act for them)
Marketing our own services to business contacts by phone or email	Legitimate interests, and consent where the law requires it (for example emails to sole traders and partnerships)
Managing our client and supplier relationships, invoicing and contracts	Contract and legitimate interests
Responding to website enquiries and requests	Legitimate interests
Sending our newsletter	Consent (you can unsubscribe at any time)
Keeping our suppression ("do not call") lists	Legal obligation and legitimate interests
Recruitment	Taking steps to enter a contract with you, legal obligation (right-to-work checks) and legitimate interests
Website analytics and security	Legitimate interests, and consent for non-essential cookies where required

We do not make decisions about you based solely on automated processing that have a legal or similarly significant effect on you.

Telephone marketing and your choices

Before making marketing calls to UK numbers we screen them against the Telephone Preference Service (TPS) and Corporate Telephone Preference Service (CTPS), unless you have told the organisation concerned that you are happy to receive their calls.
We always display a number you can call back on, say who we are and who we are calling for, and give you our contact details if you ask.
If you tell us you do not want marketing calls, we add your number to our suppression list and pass the request to the client concerned.
In South Africa we follow the Protection of Personal Information Act 2013 (POPIA) and the Information Regulator's guidance on direct marketing. Where we call US numbers, we follow the Telephone Consumer Protection Act, the National Do Not Call Registry and applicable state rules, including the Kansas No-Call Act.

To stop calls, use our Received a call from us? page, say so on the call, or email info@bcctelemarketing.co.uk.

Call recording

We record calls to and from our contact centres for quality and training, to check that we are meeting our legal and contractual obligations, to confirm what was agreed, and to deal with complaints. We tell you at the start of a call if it is being recorded. Access to recordings is restricted to authorised staff and, where we act for them, our clients.

We do not record full payment card details. Where payments are taken, we pause recording and use a secure payment system that keeps card details out of our recordings.

Who we share it with

Our clients, for the campaigns we run on their behalf.
Our teams in the UK and South Africa, where they work together on a campaign.
Our US sales partner in Kansas, only where we work together to win or serve a client, and only the business contact information needed.
Service providers who help us run the business, such as telephony and call recording, CRM, cloud hosting, email, IT support, payroll and our website platform (Shopify). They may only use your information on our instructions.
Professional advisers such as lawyers, accountants and insurers.
Regulators, law enforcement or courts where we are legally required to.
A buyer or investor, if all or part of our business is sold or restructured.

We do not sell your personal information.

International transfers

Because we have teams in South Africa, work with a sales partner in the United States, and some of our service providers are based outside the UK, your information may be accessed from or stored outside the UK. Where a country does not have UK "adequacy" status, we protect the transfer with the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with security measures appropriate to the risk. For transfers to US organisations certified under the UK Extension to the EU-US Data Privacy Framework, we may rely on that certification. You can ask us for more information about these safeguards.

How long we keep it

Information	How long
Campaign data we hold for clients	For the length of the campaign, then returned or deleted as the client instructs (normally within 30 days)
Call recordings	12 months, unless a client instructs otherwise or we need them for a complaint or legal claim
Suppression ("do not call") records	For as long as we need to honour your request
Client and supplier records	6 years after the relationship ends
Website enquiries	2 years
Unsuccessful job applications	6 months after the role is filled, unless you agree to us keeping them longer

How we keep it safe

We use appropriate technical and organisational measures, including access controls, encryption in transit, secure offices, staff confidentiality agreements and regular data protection training. If a data breach is likely to put you at high risk, we will tell you and, where required, the ICO or the Information Regulator.

Your rights

You have the right to:

ask for a copy of your personal information (a subject access request);
ask us to correct information that is wrong or incomplete;
ask us to delete your information;
object to us using your information, including for direct marketing (this right is absolute);
ask us to restrict how we use your information;
ask for your information in a portable format;
withdraw consent at any time where we rely on it.

Use our data rights form or email info@bcctelemarketing.co.uk. It is free, and we will reply within one month. We may need to confirm your identity first.

Complaints

If you are unhappy with how we have handled your information, please tell us first using our complaints page. We will acknowledge your complaint within 30 days and aim to resolve it without undue delay.

You can also complain to the regulator: