1. Introduction

Bedrock Platform is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, store, share, and protect personal information in compliance with the General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable EU regulations. We have appointed specific representatives for the UK and EU to address any concerns regarding data protection.

 

2. Scope

This policy applies to all personal data collected and processed by Bedrock Platform in connection with our media buying and curation solution, including the Closed Loop Curation (CLC) module and Demand-Side Platform (DSP).

 

3. Data We Collect

We may collect and process the following types of personal data:

• Personal Identification Data: Name, email address, phone number, job title, and company name.
• Technical Data: IP addresses, browser type, operating system, device information, and usage patterns on our platform.
• Business Data: Information related to client business activities, projects, and service usage.
• Communication Data: Correspondence via email, messages, and other communication channels.

 

4. Legal Basis for Processing

We process personal data based on the following legal ground:

Consent: By providing your personal data through our platform, you consent to its processing for the purposes outlined in this Privacy Policy. You may withdraw your consent at any time by contacting us at the details provided in Section 11.

 

5. How We Use Your Data

We use the personal data we collect for the following purposes:

• Providing Services: To deliver and enhance our media buying and curation solutions, including the CLC module and DSP.
• Communication: To communicate with you regarding our services, respond to your inquiries, and provide customer support.
• Personalisation: To personalise your experience and tailor our services to your preferences.
• Analytics: To analyse usage patterns and improve the functionality and user experience of our platform.
• Security: To ensure the security and integrity of our platform, prevent fraud, and protect against unauthorised access.
• Compliance: To comply with legal obligations and regulatory requirements under EU GDPR, UK GDPR, and the Data Protection Act 2018.

 

6. Data Sharing and Disclosure

We may share your personal data with the following parties:

• Service Providers: Third-party vendors who assist in providing our services, such as hosting, analytics, and customer support.
• Business Partners: Partners who collaborate with us on product offerings and integrations.
• Legal Authorities: As required by law or to protect our legal rights, we may disclose personal data to law enforcement, regulatory authorities, or other government bodies.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction.

 

7. International Data Transfers

We may transfer personal data to countries outside the European Economic Area (EEA) and the United Kingdom. In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other mechanisms approved by the European Commission and the UK Information Commissioner's Office (ICO), to protect your personal data.

 

8. Data Security

We implement robust security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: Data is encrypted both in transit and at rest.
• Access Controls: We enforce role-based access controls and multi-factor authentication.
• Security Audits: Regular security audits and assessments are conducted to ensure the ongoing security of our systems.

 

9. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When personal data is no longer needed, we securely delete or anonymise it.

 

10. Your Rights

Under GDPR, UK GDPR, and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your personal data under certain conditions.
• Right to Restrict Processing: You can request restrictions on how your data is processed.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to the processing of your data, particularly in relation to direct marketing.
• Right to Withdraw Consent: You can withdraw your consent to data processing at any time.

To exercise your rights, please contact us using the details provided in Section 11, either through our UK Data Protection Officer or our EU GDPR representative, depending on your location.

 

11. Data Protection Officer (DPO)

We have appointed a Data Protection Officer (DPO) to oversee our data protection practices and ensure compliance with GDPR, UK GDPR, and the Data Protection Act 2018. If you have any questions or concerns about this Privacy Policy or how we handle your personal data, you can contact our DPO at:

Data Protection Officer: Burrfield Consulting Limited

Email: [email protected] (include Subject: RE: Bedrock Platform)

 

EU GDPR Representative

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

• European Union (EU)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://prighter.com/q/19386364150

 

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes by posting the updated policy on our website or via email.