Privacy Policy and Cookie Notice

Privacy Policy

Effective Date: June 17, 2025

The Bennet and Bernard Company (“we,” “us,” or “our”), located at 19/158, near Francisco Luis Gomes Garden, Campal, Panaji, Goa 403001, India, is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws. This Privacy Policy explains how we collect, process, store, and protect your personal data when you visit our website, https://bennetandbernard.com/, or engage with our services. For GDPR purposes, we are the data controller.

1. Data We Collect and Purpose

We collect personal data only when necessary, based on the following lawful bases under GDPR (Article 6):

• Consent (Article 6(1)(a)):

  • Data: Name, email address, and optional details (phone, company, inquiry type) when you submit a contact form or subscribe to our newsletter.

  • Purpose: To respond to inquiries, send marketing communications (e.g., newsletters), or provide updates. You may withdraw consent at any time via the unsubscribe link or by contacting us.

• Legitimate Interests (Article 6(1)(f)):

  • Data: Non-personal data (e.g., IP address, browser type, device information, pages visited, time spent) collected via cookies and analytics tools (e.g., Google Analytics).

  • Purpose: To improve website functionality, analyze performance, and enhance user experience. We balance our interests with your rights, ensuring minimal intrusion.

• Legal Obligation (Article 6(1)(c)):

  • Data: Any data required to comply with legal or regulatory requirements.

  • Purpose: To meet obligations, such as tax reporting or responding to authorities.

2. How We Use Your Data

We process your personal data to:

• Respond to and manage inquiries submitted via contact forms.

• Send newsletters or updates if you have consented (opt-out available).

• Analyze website usage to optimize performance and content.

• Ensure security and prevent fraud.

• Comply with legal obligations or defend our rights.

3. Data Sharing and Transfers

We share your data only when necessary:

• Service Providers: With trusted third parties (e.g., Squarespace for hosting, Google Analytics for analytics, email marketing platforms) who process data on our behalf under GDPR-compliant Data Processing Agreements (DPAs).

• Legal Requirements: With authorities if required by law or to protect our rights.

• Business Transfers: In case of a merger, acquisition, or asset sale, your data may be transferred with appropriate safeguards.

As a global business with operations in India, Portugal, UK, Ukraine, and São Tomé and Príncipe, we may transfer data outside the EEA. We use Standard Contractual Clauses (SCCs) or rely on adequacy decisions to ensure GDPR-compliant protection.

4. Data Retention

We retain personal data only as long as necessary:

• Contact form data: Up to 2 years, unless ongoing communication requires longer retention.

• Newsletter data: Until you unsubscribe or withdraw consent.

• Analytics data: Up to 26 months (Google Analytics default).

• Legal obligation data: As required by applicable laws (e.g., tax records for 7 years).
  Data is securely deleted or anonymized when no longer needed.

5. Your GDPR Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data.

• Rectification: Correct inaccurate or incomplete data.

• Erasure: Request deletion of your data (“right to be forgotten”).

• Restriction: Limit processing in certain cases.

• Portability: Receive your data in a structured, machine-readable format.

• Object: Oppose processing based on legitimate interests (e.g., analytics).

• Withdraw Consent: Opt out of marketing or other consent-based processing.
  To exercise these rights, contact us at info@bennetandbernard.com. We will respond within 30 days (extendable by 60 days for complex requests). You may also lodge a complaint with your local data protection authority (e.g., ICO in the UK).

6. Data Security

We implement technical and organizational measures (e.g., encryption, access controls, staff training) to protect your data from unauthorized access, loss, or misuse. However, no online transmission is 100% secure, and you share data at your own risk.

7. Third-Party Links

Our website may link to external sites (e.g., bnbcustomhomes.com). We are not responsible for their privacy practices. Review their policies before sharing data.

8. Children’s Privacy

Our website is not intended for individuals under 16. We do not knowingly collect personal data from children. If such data is collected inadvertently, we will delete it upon discovery.

9. Updates to This Policy

We may update this policy to reflect changes in practices or legal requirements. Updates will be posted on this page with a revised effective date. For significant changes, we will notify you via email or a website notice.

10. Contact Us

For questions, concerns, or to exercise your GDPR rights, contact our Data Protection Officer:
Bennet and Bernard House
19/158, near Francisco Luis Gomes Garden, Campal, Panaji, Goa 403001, India
Phone: +919019110006
Email: info@bennetandbernard.com