Effective Date: 27 April 2025
At business4sale.co.uk, we are committed to ensuring the security, protection, and proper use of personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the UK General Data Protection Regulation (UK GDPR).
This statement outlines how we collect, use, protect, and respect your personal data when you interact with our website and services.
1. Data Controller
Business4sale.co.uk acts as the Data Controller for the personal data you provide to us.
If you have any questions regarding your personal data or this GDPR Statement, please contact:
Email: help@business4sale.co.uk
Address: 48 W George St, Glasgow G2 1BP
2. Lawful Basis for Processing
We process your personal data based on one or more of the following lawful bases:
- Consent: When you provide clear consent for processing (e.g., when subscribing to newsletters).
- Contract: When processing is necessary for the performance of a contract (e.g., creating listings or account management).
- Legal Obligation: When processing is necessary for compliance with legal requirements.
- Legitimate Interests: For our legitimate business interests, provided your rights and freedoms are not overridden (e.g., improving services, preventing fraud).
3. Information We Collect
We may collect and process the following categories of personal data:
- Identity Data: Name, title, business name
- Contact Data: Email address, telephone number, postal address
- Account Data: Login credentials, preferences, and settings
- Transaction Data: Details of services you have purchased from us
- Technical Data: IP address, browser type, device information, and usage data
- Communication Data: Your communications with us and responses to surveys or feedback requests
4. Purposes of Data Collection
We use your personal data for the following purposes:
- To provide and manage access to our services
- To manage your account and listings
- To facilitate communication between buyers and sellers
- To notify you of changes to our terms, policies, or services
- To administer payments, billing, and refunds
- To detect and prevent fraud and other illegal activities
- To comply with legal and regulatory requirements
5. Data Sharing
We only share your personal data with:
- Trusted service providers who assist in operating our platform (e.g., hosting providers, payment processors)
- Law enforcement, regulatory bodies, or legal advisers when required by law
- Other users (buyers or sellers) when you choose to share your information through our platform
We ensure all third parties respect the confidentiality and security of your data and comply with GDPR requirements.
6. International Data Transfers
Where your data may be transferred outside of the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Typically, we retain account and listing data for [Insert Standard Period, e.g., 6 years] after account closure, unless otherwise required by law.
8. Your Rights
Under GDPR, you have the following rights:
- Right of Access: Request a copy of your personal data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your data where no longer necessary.
- Right to Restrict Processing: Request a restriction of processing.
- Right to Data Portability: Receive your data in a structured, commonly used format and transfer it to another controller.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at help@business4sale.co.uk.
We aim to respond to all legitimate requests within one month.
9. Data Security
We have implemented appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
These measures include data encryption, access controls, secure hosting environments, and regular security audits.
10. Changes to This GDPR Statement
We may update this GDPR Compliance Statement from time to time to reflect changes in legal, technical, or business developments.
We encourage you to review this page periodically for the latest information.
Last updated: 27 April 2025
