Last updated: 31-07-2026

About This Policy

This policy applies only to our website at banyaned.com. If you leave our site via a link or otherwise, you will be subject to the privacy policy of that website. We have no control over third-party policies and recommend you review them before continuing.

Personal Data Collected via Website Forms

When you complete a contact or enquiry form on banyaned.com, your information is transmitted securely using SSL encryption. We do not store form submissions in our website database. Submitted data is sent directly to our team by email. Where an enquiry represents a genuine sales or service lead, a member of our team may separately add your details to our customer relationship management (CRM) system to manage our ongoing communication with you. See “Data Sharing” and “Your Rights Under UK GDPR” below for how long we keep this information.

Cookies and Local Storage

This website uses only strictly necessary cookies and browser storage, required for core website security and functionality. To protect our forms from spam and abuse, we use Cloudflare Turnstile, a privacy-focused alternative to traditional CAPTCHA systems. Turnstile stores a small amount of data in your browser to verify that you are a genuine visitor. It does not set advertising cookies, does not track you across websites, and does not build a behavioural profile. This storage is strictly necessary to keep the site secure. No consent is required for strictly necessary cookies or storage under the UK Privacy and Electronic Communications Regulations (PECR). You can review Cloudflare’s privacy policy at cloudflare.com/privacypolicy.

Website Security

We take reasonable technical measures to protect your data, including SSL encryption on all form submissions, firewall protection, and two-factor authentication for administrative access.
In the event of a data breach that is likely to affect your rights and freedoms, we will notify affected individuals and the ICO within 72 hours, as required by UK GDPR.

Your Rights Under UK GDPR

As a UK-registered organisation, we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You have the right to:

• Access and correction – request a copy of your personal data and ask us to correct any inaccuracies.
• Deletion – request that we permanently delete your personal data from our records, including from our CRM system.
• Retention – personal data from general enquiries is retained only as long as necessary to handle your enquiry, then deleted. Where your details have been added to our CRM system as a sales or service lead, they are retained for as long as we have an ongoing relationship with you, or until you ask us to delete them.
• Complaints – lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Data Sharing

We do not sell or rent your personal data, and we do not share it with third parties for their own marketing purposes. Data may be shared only where required by law, where strictly necessary to respond to your enquiry, or with the service providers described below who process data on our behalf.

We use Brevo (brevo.com) to deliver email communications. When you submit a form on this website, your data is transmitted via Brevo’s SMTP service solely for the purpose of delivering your enquiry to our team. Brevo acts as a data processor on our behalf and does not use your data for any other purpose. You can review their privacy policy at brevo.com/legal/privacypolicy.

Where an enquiry represents a genuine sales or service lead, a member of our team may separately add your details to HubSpot, our customer relationship management (CRM) system, which we use to manage and respond to enquiries and maintain our relationship with you. This is done manually by our staff and your data is not transferred to HubSpot automatically by this website. HubSpot acts as a data processor on our behalf. As HubSpot is a US-based provider, any transfer of your data is safeguarded under the UK Extension to the EU-US Data Privacy Framework. You can review their privacy policy at legal.hubspot.com/privacy-policy.

IP Addresses

Our website forms do not capture your IP address. We do not use analytics software that collects browsing or behavioural data.

Contact and Data Protection

For questions about this policy or to exercise your rights under UK GDPR, please contact our Data Protection Officer.
Email: dpo@banyaned.com