Privacy Policy

1. Introduction

BAM ENGINEERING LTD, trading as TraceID ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our traceability platform services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our company registration number is 14078681.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact information (name, email address, phone number, company details)
• Account credentials and authentication data
• Payment and billing information
• Communication preferences and marketing consent
• Technical data (IP address, browser type, device information)
• Usage data and analytics information

2.2 Business Data

In providing our traceability services, we may process:

• Manufacturing data and product information
• Supply chain documentation
• Compliance records and audit trails
• Quality control data

3. How We Use Your Information

We process your personal data for the following purposes:

• Service Delivery: To provide and maintain our traceability platform
• Account Management: To create and manage your user account
• Communication: To respond to inquiries and provide customer support
• Legal Compliance: To meet regulatory requirements and legal obligations
• Marketing: To send promotional materials (with your consent)
• Analytics: To improve our services and website functionality

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract: Processing necessary for the performance of our service agreement
• Legitimate Interest: For business operations, security, and service improvement
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Trusted third parties who assist in our operations
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers or acquisitions
• Consent: When you have given explicit consent

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Staff training on data protection
• Incident response procedures

7. Your Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Decision Making: Human review of automated decisions

To exercise these rights, please contact us at [email protected].

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Typically:

• Account data: Retained while your account is active
• Marketing data: Until you withdraw consent
• Legal compliance data: As required by applicable laws
• Analytics data: Anonymized after 24 months

9. International Data Transfers

If we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

10. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. For detailed information about our cookie practices, please see our Cookie Policy.

11. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with the law. Visit ico.org.uk for more information.