GDPR Privacy Statement


This Privacy Policy will help you understand what data we collect from you, why we collect it and what we do with it.  This policy explains how we store and use your personal information when you use or interact with our website, or where we otherwise obtain or collect your personal information.  This Privacy Policy applies to all services offered by us, except where otherwise noted.

This statement also explains how we protect any personal data we obtain directly or passively from you or which we obtain indirectly from other sources.

We reserve the right to change our privacy statement from time to time.  We therefore ask you to check it occasionally to ensure that you are aware of the most recent version.

Privacy statement

We are committed to keeping your personal data safe and to ensuring the integrity and security of any personal data we may process.

You should read this privacy notice very carefully as it contains important information on the way in which we will process your personal data, in particular:

If you have any questions about this Privacy Policy, please contact our Data Champion, Jane Proctor email:

Who are we?

BCM Public Relations Ltd (referred to as BCM), a company incorporated and registered in England with company number 7755020.  BCM is the Controller of personal data relating to individuals within its client firms, for the purposes of relationship management, marketing and business development. BCM is also a Processor of data for the purposes of offering PR, marketing and communication services on behalf of its clients.

Personal information we collect or obtain about you

We collect personal data relating to you and your use of our services from a variety of sources.  These are detailed below.  Further sections of this Privacy Policy then describe what we do with this information.

Information gained directly from you

We will collect personal data, such as your name, business address, business and mobile telephone number and business email address via: Meetings, telephone calls and conversations, from business cards, when registering for services, and when using our website.

We may also collect your personal work-related data, which is gained indirectly or passively, such as:

This data may include:

We protect the data obtained from third parties according to the practices described in this statement.

Cookies and similar technology

Cookies are small files which are sent to your web browser and stored on your computer’s hard drive.

This website uses ‘session cookies’ – temporary cookies that remain in your browser until you leave the website. These allow you to carry information across our site without having to re-enter it; it also enables us to analyse web traffic and improve our online services.

They can not be used to identify you. You may set your web browser to notify you of cookie placement requests or to decline cookies completely. You can delete the files that contain cookies; those files are stored as part of your internet browser.

Our legal basis for processing your personal data

We may rely on a number of legal bases for collecting and further processing your personal data, which are:

Contractual necessity

We collect personal information about you when you request our services.   We will ask you to provide some information about yourself for security, identification and verification purposes.

We will also collect personal data for the purposes of the performance of a contract with you, such as:

Legal obligation

We may also process your personal information to allow us to comply with certain legal obligations to which we are subject.   We will also work co-operatively with the national data protection authority, and the ICO, in relation to any data protection matters.

Legitimate interest

We may use your personal data for our legitimate business interests, whilst carefully considering and balancing any potential impact on you and your rights as a data subject under the relevant data protection regulation.

This may include processing your personal data to allow us to provide the best services and customer experience and to ensure our service remains relevant and tailored to your needs.

We will always ensure that our legitimate interests will never override your rights and freedoms under the data protection regulation.

As an example, we may rely on our legitimate interest to process your personal data for the following purposes:

In addition, we may use its legitimate interests to perform statistical and other analysis on the personal data we collect, to help us understand and improve on how people use our products or services.


We are required to gain your explicit consent prior to processing any sensitive information about you, or where we are processing your personal data for any other purpose, other than the original purpose for which it was gained.

Where we require such consent, we will provide you with sufficient information to allow you to make an informed decision.  We will ensure that we only gain consent via a clear and affirmative act, freely given by you that indicates your consent to specific purposes.

Your communication preferences

We strive to provide you with relevant and useful information related to our products and services. You can update your communication preference at any time by emailing

How we use your personal data

We will only process your data where have a legal basis for doing so. We use data collected to communicate with you and to offer you our services. We may use your data to improve or maintain the services we offer to you. We will never share your data with any other third party, other than those stated in this policy, nor use your data for any other purpose, unless we firstly gain your explicit consent to do so.

We categorise the use of your personal information for in different ways, namely:

Category of Personal DataDescriptionLegal Basis for ProcessingExample
Personally Identifiable InformationThis is personal information, such as name, address or emailPre-Contractual or
Enabling you to access and use our services
Financial InformationWe hold invoice information relating to clients and the company accounting information, nothing personal  

Who we share your data with

We may disclose your personal data to third parties from time to time under the following circumstances:

We do not sell your personal data or other information to any third-party.

Security and confidentiality

We are committed to transparency, ensuring that your privacy is protected and that your data is used and retained fairly, transparently and in accordance with the GDPR.

We will make sure that we have appropriate technical and organisational measures in place to keep your personal data secure and to protect against accidental or unlawful destruction, loss alteration, disclosure or access.  We will provide a level of security appropriate to the risk presented by the nature of the processing we do. Your personal data will be held securely in our systems so that we can manage your relationship with us.

Retention period

We will only keep your personal data for as long as necessary for the purposes for which it was gained. Personal data will be retained for the purposes of direct marketing, relationship management and business development, or where we have another legal basis for processing (such as consent).

We will review the personal data we hold in line with our retention policy, to check for accuracy and relevancy and to ensure that we continue to have a legal basis for processing. If the personal data is no longer necessary, or where we no longer have the legal basis for processing we will delete or fully anonymise the data we hold on you, in line with our Data Protection Policy. If your data becomes inaccurate, we will update it accordingly.

Parents and children

We do not knowingly collect personal information from children under the age of 13. Parents have the right to terminate the registration of a child under the age of 13 by contacting us using the information listed at the bottom of this policy.

Subject access/User rights

As a data subject, you have the following rights:


We will be more than happy to help should you have any complaints about the processing of your personal data. You have the right to lodge a complaint with the Supervisory Authority, ICO, who are the national authority responsible for the protection of personal data. A complaint can be made to the ICO via their website

Contact us:

If you have any queries or requests concerning your personal information or how we process it, please contact us at BCM Public Relations Ltd, 8 Saint James’s Square, London, SW1Y 5JU, United Kingdom, +44 (0) 2034 095090 or email