Privacy Policy
How we protect and handle your personal data
Last Updated: 2025-06-25
This Privacy Policy explains how British Veteran Owned (referred to as "we", "us", or "our") collects, uses, stores, and processes the personal data of individuals who register for and use our membership services (referred to as "members", "you", or "your") via our website, www.britishveteranowned.co.uk.
We are deeply committed to protecting your privacy and ensuring your personal data is handled securely and in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant data protection laws.
1. Who We Are
British Veteran Owned provides an online directory and community platform for UK veteran-owned businesses and their supporters.
For any questions regarding this Privacy Policy or our data protection practices, please contact us via our contact page.
2. Personal Data We Collect
We collect personal data directly from you when you register for a membership and use our website. The types of personal data we may collect include, but are not limited to:
Identity Data:
Name, date of birth, gender.
Contact Data:
Email address, postal address, telephone number.
Profile Data:
Profile picture (photo), username, password (encrypted), military service details, business details, interests, skills, social media links.
Financial Data:
Payment card details, membership subscription history.
Technical Data:
Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.
Usage Data:
Browse patterns, page views, interactions with content.
Marketing and Communications Data:
Marketing preferences, communication preferences.
3. How and Why We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances and for the purposes outlined:
| Purpose of Processing | Lawful Basis | Data Types Used |
|---|---|---|
| To provide and maintain your membership services | Performance of a Contract | Identity, Contact, Profile, Financial, Technical, Usage |
| To send you essential service updates | Performance of a Contract | Contact |
| To improve and develop new services | Legitimate Interests | Usage, Technical, Profile |
| To personalise your website experience | Legitimate Interests | Usage, Profile, Technical |
| To advertise our services and track actions on our website | Consent | Technical, Usage |
| To manage our relationship with you | Legal Obligation | Identity, Contact, Profile |
| To administer and protect our business and website | Legitimate Interests | Identity, Contact, Technical, Usage |
| To enable you to participate in surveys or contests | Consent | Identity, Contact, Profile |
4. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, personalise content and ads, and provide social media features. For detailed information on how we use cookies, the types of cookies we use, and how you can manage your cookie preferences, please refer to our dedicated Cookie Policy.
5. Storage and Processing of Personal Data
The personal data we collect from our members is stored and processed on cloud-based services. We utilise reputable third-party service providers for various functions, including:
Some of these services, or their data centres, may be located outside of the UK and European Economic Area (EEA). When your personal data is transferred outside the UK/EEA, we ensure a similar degree of protection through:
- Transfer only to countries deemed to provide adequate level of protection
- Use of Standard Contractual Clauses (SCCs) approved by UK Government or European Commission
- Transfer to US providers part of EU-US Data Privacy Framework
- Data processing agreements (DPAs) with service providers
6. Data Security
We are committed to ensuring the security of your personal data. We have implemented robust technical and organisational measures including:
- Firewall Protection
- Secure Configurations with encryption
- Access Controls with role-based access and least privilege principles
- Malware Protection with up-to-date anti-virus software
- Two-Factor Authentication (2FA)
- Regular Audits & Training
7. Data Retention
Personal data retained only for as long as necessary to fulfil collection purposes, considering amount, nature, sensitivity of data, potential risks, processing purposes, and legal requirements. Data securely deleted or anonymised upon retention period expiration.
8. Your Legal Rights
Under data protection laws, you have certain rights concerning your personal data. These rights include:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure (right to be forgotten)
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision-making and profiling
If you wish to exercise any of these rights, please contact us using the details provided below. You have the right to make a complaint at any time to the Information Commissioner's Office (ICO) - www.ico.org.uk.
9. Changes to This Privacy Policy
Policy may be updated from time to time with revised 'Last Updated' date and posted updated version on website. Users encouraged to review periodically.
10. Contact Information
If you have any questions or concerns about this Privacy Policy, our data practices, or if you wish to exercise any of your legal rights, please contact us via our Contact Page.