Privacy Policy — Big Blue Whale Corp

This Privacy Policy explains how Big Blue Whale Corp Ltd (“BBW”, “we”, “us”, “our”) collects, uses, shares, and protects information about you when you visit bbw.so or otherwise interact with us. We are the data controller for the personal data described in this policy.

Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Company number: 14203949. For data-protection enquiries, please use our contact form.

1. Information we collect

1.1 Information you provide

Contact form submissions — your name, email address, optional company name, subject and the contents of your message.
Newsletter sign-ups — your email address.
Communications — when you email us or otherwise communicate with us, we keep a record of that correspondence.

1.2 Information collected automatically

Log data — IP address, browser type, operating system, referring URL, pages visited, and timestamps.
Cookies and similar technologies — see our Cookie Policy for details.
Aggregated analytics — anonymous, aggregate usage data such as visit counts, page popularity and approximate geographic distribution.

2. How we use your information

To respond to your enquiries and provide information you request.
To send you marketing communications (such as newsletters), where you have consented to receive them.
To operate, maintain, secure and improve the Services.
To analyse usage trends and measure the effectiveness of our content.
To comply with legal obligations and to protect the rights, property or safety of BBW, our users or third parties.

3. Lawful bases (UK GDPR / EU GDPR)

Consent — for marketing communications and non-essential cookies.
Legitimate interests — for operating, securing and improving the Services and analysing aggregate usage. We balance our interests against your rights and freedoms.
Contract / pre-contractual steps — to respond to enquiries you initiate.
Legal obligation — where processing is required by law.

4. Sharing your information

We do not sell your personal information. We share it only:

with service providers who process data on our behalf (e.g. hosting, email delivery, analytics) under contractual obligations of confidentiality and security;
with professional advisers (lawyers, accountants, auditors) where necessary;
where required by law, regulation or legal process;
in connection with a merger, acquisition or sale of all or part of our business, in which case we will notify you if your information becomes subject to a different privacy policy.

5. International transfers

Your information may be transferred to and processed in countries other than the one in which you reside. Where we transfer personal data outside the UK or the European Economic Area, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions.

6. Data retention

Contact form submissions — retained for up to 24 months from last contact, or longer where required for an ongoing matter.
Newsletter — retained while you remain subscribed; you may unsubscribe at any time.
Server logs — typically retained for up to 90 days for security and operational purposes.
Aggregate analytics — may be retained indefinitely in anonymised form.

7. Your rights

Depending on where you live, you may have rights including: access, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent. To exercise any of these rights, please submit a request via our contact form. We will respond within the timeframes required by applicable law (typically 30 days).

If you are in the UK or the EEA and believe we have not addressed your concern, you may lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk).

8. Security

We implement technical and organisational measures designed to protect your information against unauthorised access, loss, misuse and alteration. No method of transmission or storage, however, can be guaranteed to be 100% secure.

9. Children

Our Services are not directed to children under 16, and we do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by updating the “Last updated” date and, where appropriate, a notice on the Services.

11. Contact

For privacy questions or to exercise your rights, please contact us via our contact form.