My Buvo

Privacy Policy

Last updated: November 2025

1. Who We Are

Buvo Ltd (trading as "My Buvo") is a UK-registered company providing AI workflow design and implementation services to small and medium-sized enterprises. We're committed to protecting your personal data and respecting your privacy.

Data Controller: Buvo Ltd
Contact: [email protected]
ICO Registration Number: [Insert ICO registration number]

2. What We Collect

We collect only the minimum data necessary to provide our services:

Information you provide directly:

  • Contact details: Name, email address, phone number, company name
  • Business information: Details about your workflows, pain points, and automation goals
  • Payment information: Processed securely via Stripe (we do not store full card details)
  • Communication records: Emails, messages, and meeting notes related to your project

Information collected automatically:

  • Website analytics: Pages visited, time spent, device type, approximate location (via Google Analytics, only with your consent)
  • Cookies: See our Cookie Consent Manager for full details
  • Tool usage data: When you use our self-serve tools (ROI Calculator, Automation Readiness Assessment, Prompt Optimiser), we may collect anonymised usage statistics to improve these tools

3. Lawful Bases for Processing

We process your personal data under the following lawful bases:

  • Contract performance: To deliver the services you've purchased
  • Legitimate interests: To improve our services, communicate about relevant offerings, and maintain business records
  • Consent: For analytics cookies and marketing communications (you can withdraw consent at any time)
  • Legal obligation: To comply with UK tax and financial record-keeping requirements

4. How We Use Your Data

Your data is used exclusively for:

  • Delivering the AI workflow services you've purchased
  • Communicating about your project, support, and related services
  • Processing payments and maintaining financial records
  • Improving our services through anonymised, aggregated analysis
  • Complying with legal obligations

We never sell, rent, or share your data with third parties for marketing purposes.

5. Third-Party Services

We use carefully selected third-party services that comply with UK GDPR:

  • Calendly: Appointment scheduling (US-based, EU-UK adequacy framework)
  • Stripe: Payment processing (compliant with PCI DSS and UK GDPR)
  • Google Analytics: Website analytics (only with your consent, anonymised IP)

Each processor has appropriate data processing agreements in place.

6. Data Security

We implement appropriate technical and organisational measures:

  • Encrypted data transmission (TLS/SSL) and storage
  • Least-privilege access principles for all integrations
  • Regular security reviews and updates
  • UK-based data hosting where possible
  • Staff training on data protection and security

7. Data Retention

We retain your data only as long as necessary:

  • Contact enquiries: 2 years from last contact
  • Active project data: Duration of project + 1 year
  • Financial records: 7 years (UK legal requirement)
  • Analytics data: 14 months maximum
  • Tool usage data: Anonymised after 90 days

8. Your Rights

Under UK GDPR, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data (subject to legitimate business needs and legal obligations)
  • Portability: Receive your data in a structured, machine-readable format
  • Object: Object to processing based on legitimate interests
  • Restrict processing: Request we limit how we use your data
  • Withdraw consent: Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at [email protected]. We'll respond within one month.

9. Cookies

We use cookies to improve your experience. You can manage your cookie preferences at any time using our Cookie Consent Manager (accessible via the "Cookie Preferences" link in the footer).

10. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email to active clients and prominently on our website.

11. Contact & Complaints

For any privacy concerns, questions, or to exercise your rights, contact us at: [email protected]

If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO Helpline: 0303 123 1113
Website: ico.org.uk

Back to Home