Privacy Policy
ONE BMT Platform
Operated by
CHILLED YELLOW BIRD LTD
Company Number: SC876614
United Kingdom
Last updated: 09/03/2026
- INTRODUCTION
This Privacy Policy explains how CHILLED YELLOW BIRD LTD (“Company”, “we”, “us”, “our”) collects, uses, processes, and protects personal data when you use the ONE BMT platform (“Service”).
We are committed to protecting your privacy and handling personal data in accordance with:
• UK GDPR
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)
• Applicable international data protection laws
This policy applies to:
• users of the ONE BMT platform
• visitors to our website
• individuals whose data is processed through the platform
- COMPANY DETAILS
Data Processor / Service Provider:
CHILLED YELLOW BIRD LTD
Company Number: SC876614
United Kingdom
Email: info@chilledyellowbird.com
- IMPORTANT GDPR ROLES
When using the ONE BMT platform:
Your business acts as the Data Controller for any personal data you store or process in the system.
CHILLED YELLOW BIRD LTD acts as a Data Processor, providing the software platform and infrastructure.
Individuals whose data is stored in the system are Data Subjects.
- INFORMATION WE COLLECT
We may collect and process the following types of information.
4.1 Information you provide directly
• name
• email address
• phone number
• company information
• billing information
• login credentials
• account settings
• communications with our support team
4.2 Information collected automatically
When you use the platform we may collect:
• IP address
• device information
• browser type
• usage data
• login timestamps
• system interaction logs
• analytics data
4.3 Information processed on behalf of customers
Customers may store their own client data within the platform, including:
• names
• email addresses
• phone numbers
• customer notes
• booking details
• invoices and payment records
• communications history
• marketing preferences
This data is processed strictly under the instructions of the customer.
- HOW WE USE PERSONAL DATA
We process personal data for the following purposes:
• providing access to the platform
• operating and maintaining the service
• user authentication and account management
• billing and subscription management
• customer support
• improving system performance
• security monitoring and fraud prevention
• analytics and product development
• communication with users
• legal compliance
- LEGAL BASIS FOR PROCESSING
Under UK GDPR we rely on the following legal bases:
Contractual necessity
Processing required to provide the service.
Legitimate interests
Improving our platform, ensuring security, and maintaining system integrity.
Legal obligations
Compliance with tax, accounting, and regulatory requirements.
Consent
Where required for marketing communications or optional features.
- COOKIES AND TRACKING TECHNOLOGIES
Our website and platform may use cookies and similar technologies to:
• maintain login sessions
• remember user preferences
• improve website performance
• measure analytics
Types of cookies may include:
• essential cookies
• analytics cookies
• performance cookies
Users can manage cookie preferences through browser settings.
- DATA STORAGE AND SECURITY
We implement technical and organisational measures designed to protect personal data.
Security measures may include:
• encrypted data transmission (HTTPS / TLS)
• access control systems
• user authentication
• system monitoring
• intrusion detection
• secure cloud infrastructure
• regular security updates
Despite these safeguards, no system can guarantee absolute security.
- DATA RETENTION
We retain personal data only as long as necessary to provide the service and comply with legal obligations.
Data retention periods may depend on:
• active account status
• contractual obligations
• legal requirements
• dispute resolution needs
Upon account termination, data may be deleted after a reasonable retention period.
Customers are responsible for exporting their data before account closure.
- INTERNATIONAL DATA TRANSFERS
Our platform may rely on cloud infrastructure providers located outside the United Kingdom.
Data may be transferred to jurisdictions including the United States.
Where international transfers occur, we implement appropriate safeguards such as:
• Standard Contractual Clauses (SCCs)
• contractual data protection agreements
• recognised transfer mechanisms under UK GDPR
- THIRD-PARTY SERVICE PROVIDERS
We may share data with trusted service providers that support operation of the platform.
These may include:
• cloud hosting providers
• payment processors
• messaging service providers
• email delivery services
• analytics providers
• infrastructure monitoring tools
All third-party providers are required to implement appropriate data protection safeguards.
- CUSTOMER RESPONSIBILITIES
Customers using the ONE BMT platform are responsible for:
• obtaining lawful consent to collect personal data
• responding to data subject access requests
• complying with applicable privacy laws
• ensuring lawful marketing practices
CHILLED YELLOW BIRD LTD does not control how customers use the data they collect.
- DATA SUBJECT RIGHTS
Individuals whose data is processed may have the following rights under UK GDPR:
• right of access
• right to rectification
• right to erasure
• right to restrict processing
• right to data portability
• right to object to processing
• rights relating to automated decision making
Requests should normally be directed to the Data Controller (the business that collected the data).
- CHILDREN’S DATA
The platform is not intended for use by individuals under the age of 18.
We do not knowingly collect personal data from minors.
- MARKETING COMMUNICATIONS
We may send communications regarding:
• platform updates
• service announcements
• product improvements
• relevant offers
Users can opt out of marketing communications at any time using unsubscribe options.
- INCIDENT RESPONSE
In the event of a data breach that affects personal data, we will take appropriate steps including:
• investigating the incident
• mitigating risks
• notifying affected parties where required
• complying with regulatory obligations
- AUTOMATED PROCESSING AND AI
The platform may use automated systems and AI tools to assist with:
• message generation
• content creation
• workflow automation
• analytics
Users remain responsible for reviewing AI-generated content before use.
- CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time.
Updated versions will be posted on our website.
Continued use of the platform constitutes acceptance of the updated policy.
- COMPLAINTS
If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
https://ico.org.uk
- CONTACT
For privacy-related inquiries please contact:
CHILLED YELLOW BIRD LTD
Company Number: SC876614
United Kingdom
Email: info@chilledyellowbird.com