Privacy Policy

Barnveil Ltd, Basecamp Liverpool, 49 Jamaica St, Liverpool, L1 0AH

1. Who We Are

Barnveil ("we", "us", "our") is a digital privacy protection business registered in England and Wales, operating from Basecamp Liverpool, 49 Jamaica St, Liverpool, L1 0AH. We are the data controller for personal data collected through our website and services.

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, when you contact us or purchase a service
• Payment information: processed securely through our payment provider; we do not store card details
• Assessment subject data: personal information you provide about yourself (or a consenting third party) for the purpose of a Digital Exposure Assessment
• Usage data: anonymised analytics data about how visitors interact with our website (e.g. page views, browser type)
• Communications: records of correspondence when you contact us by email or through our website

3. How We Use Your Data

We use your personal data for the following purposes:

• To deliver the services you have requested, including Digital Exposure Assessments
• To process payments and send service-related communications
• To respond to enquiries and provide customer support
• To improve our website and services using aggregated, anonymised analytics
• To comply with legal obligations, including fraud prevention and anti-money laundering requirements

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing your data:

• Contract: processing is necessary to deliver services you have purchased
• Legitimate interests: to improve our services, prevent fraud, and maintain security
• Legal obligation: where we are required to process data to comply with UK law
• Consent: where you have given explicit consent, such as subscribing to marketing communications

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Service providers: third-party tools and platforms used to deliver our services (e.g. payment processors, email platforms), bound by data processing agreements
• Legal authorities: where we are required to do so by law or court order

All third-party processors are required to handle your data in accordance with UK GDPR and our instructions.

6. Third-Party Integrations

6.1 Barnveil Creator Studio

Barnveil Creator Studio is a content publishing platform that enables approved creators within the Barnveil network to publish video content directly to their own TikTok profiles via the TikTok Content Posting API.

When you apply to join the Creator Studio, we collect your name, email address, TikTok handle, content niche, and a description of your content. This data is processed via Formspree and used solely to assess your application.

When you connect your TikTok account, we access only the permissions necessary to facilitate publishing: basic profile information (display name, avatar) and video upload. We do not store your TikTok credentials, access your direct messages, followers, or analytics data. No content is published without your explicit confirmation. You may revoke access at any time via your TikTok account settings.

TikTok's own privacy policy governs their handling of data on their platform.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Assessment reports and associated personal data are retained for a maximum of 12 months after delivery unless you request earlier deletion.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: to obtain a copy of the personal data we hold about you
• Right to rectification: to correct inaccurate or incomplete data
• Right to erasure: to request deletion of your data in certain circumstances
• Right to restriction: to limit how we process your data
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at hello@barnveil.co.uk. We will respond within 30 days.

9. Cookies

Our website may use essential cookies to ensure functionality. We do not use tracking or advertising cookies without your explicit consent. You can control cookie settings through your browser preferences.

10. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is completely secure.

11. International Transfers

Where any of our service providers are based outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with UK GDPR.

12. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date above. We encourage you to review this policy periodically.

14. Contact Us