Privacy Policy

Privacy Policy

Last updated: 20 January 2026

This Privacy Policy explains how Bravus Metal Services and Supplies (“BMSS”, “we”, “us”, “our”) collects, uses, stores and shares personal data when you use https://bmss.uk (the “Website”), contact us, request a quote, or use our live chat.

1) Who we are (Controller)

Company: Bravus Metal Services and SuppliesAddress: 20 Wenlock Road, London, N1 7GU, United KingdomEmail: [email protected]

We are the data controller for the personal data described in this policy.

2) What personal data we collect

Depending on how you interact with us, we may collect:

  • Contact details: name, email address, phone number

  • Business details: company/business name, job role (if provided)

  • Location details: postcode (used for delivery/pricing evaluation)

  • Enquiry details: service type selected, project description, and any information you send us (including drawings/photos/files if you provide them)

  • Live chat data: messages and information you choose to share in chat

  • Website usage data: IP address, browser type, pages viewed, dates/times, device identifiers, and similar analytics data

  • Cookie data: information stored via cookies and similar technologies (see Cookies section)

3) How we use your personal data

We use your personal data to:

  • Respond to enquiries and quote requests

  • Provide our services, including supplying materials, processing, fabrication, delivery and related project support

  • Communicate with you about your enquiry, quote, order status, and service updates

  • Improve our Website and customer experience

  • Maintain security, prevent fraud and protect our systems

  • Send marketing communications where permitted (see Marketing section)

  • Comply with legal obligations and enforce our rights

4) Our lawful bases (UK GDPR)

We process personal data under the following lawful bases:

  • Contract / steps to enter a contract: when you request a quote or place an order

  • Legitimate interests: to run and improve our business, respond to enquiries, maintain security, and understand how our Website is used (we balance this against your rights)

  • Consent: where you choose to opt in to marketing communications or where consent is required for certain cookies

  • Legal obligation: where we must keep records or disclose information to comply with law

5) Marketing emails (UK PECR + UK GDPR)

5.1 Opt-in marketing

If you tick an opt-in box (or otherwise clearly agree), we may email you about BMSS products, services and offers. You can unsubscribe at any time.

5.2 “Soft opt-in” marketing (existing customers and enquiries)

If you have requested a quote or purchased from us, we may send you marketing emails about similar BMSS products/services where permitted by UK PECR, and where you were given a clear opportunity to opt out at the time we collected your details.

5.3 How to stop marketing

Every marketing email includes an unsubscribe link. You can also email [email protected] to opt out.

Important: Service messages about your enquiry/quote/order (for example, replying to your request, clarifying specifications, delivery updates) are not marketing and may still be sent even if you opt out of marketing.

6) Cookies and analytics

We use cookies and similar technologies:

  • Strictly necessary cookies (required for the Website to function)

  • Functionality cookies (remember preferences)

  • Analytics cookies (help us understand Website usage)

You can control cookies through your browser settings and, where available, our cookie banner/preferences.

7) Who we share personal data with

We may share personal data with:

  • Service providers who help us operate the Website and run our business (e.g., hosting, email delivery, live chat, analytics). They process data only on our instructions.

  • Professional advisers (e.g., legal, accounting) where necessary.

  • Authorities where required by law or to protect rights and safety.

We do not sell your personal data.

8) International transfers

Your personal data may be processed outside the UK if we use suppliers or systems located abroad. Where this happens, we use appropriate safeguards (such as UK International Data Transfer Agreement / Addendum, or other lawful mechanisms) to protect your data.

9) How long we keep your data (retention)

We keep personal data only as long as needed for the purposes in this policy, including:

  • Enquiries/quotes: for a reasonable period to manage follow-up and record-keeping

  • Customers/orders: as required for contractual and legal/accounting obligations

  • Marketing: until you unsubscribe/opt out, or we decide it is no longer appropriate to keep your details

10) Your rights (UK GDPR)

You may have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing (including marketing)

  • Data portability (in certain cases)

  • Withdraw consent (where processing is based on consent)

To exercise your rights, contact [email protected].

You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO): https://ico.org.uk

11) Security

We use reasonable technical and organisational measures to protect personal data. No online system is 100% secure, but we work to protect your information.

12) Children

Our Website and services are not intended for children. We do not knowingly collect personal data from children.

13) Links to other websites

Our Website may link to third-party sites. We are not responsible for their privacy practices. Please review their policies.

14) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date.

15) Contact

If you have questions about this policy or how we use your data, contact:[email protected]