Last Updated: 26 August 2026
This Privacy Policy explains how Bibronto (operating at bibronto.online) collects, uses, stores and protects personal data. It applies to all visitors and users of the website. It is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The data controller for this website is Bibronto, trading at the domain bibronto.online. Our registered address is 6, Broughton Trade Centre, 95 Broughton Ln, Salford M7 1UH, United Kingdom. You can contact us regarding data matters by email at info@bibronto.online or by telephone at +44 161 832 7187.
As a data controller, Bibronto determines the purposes and means of processing personal data collected through this website. We take our obligations under UK GDPR seriously and are committed to handling personal data responsibly, transparently, and lawfully.
We collect the following categories of personal data through this website:
Contact enquiry data: When you use the contact form, we collect your name, email address, and the content of your message. This data is transmitted directly to our email inbox via your email client.
Technical data: When you visit the website, certain technical information may be collected automatically, including your IP address, browser type and version, the pages you visit, the time and date of your visit, and the referring URL. This data is collected through standard server logs and, where applicable, analytics tools.
Cookie data: We use cookies to store your consent preferences and, where you have consented, to collect anonymised usage data. Please refer to our Cookies Policy for full details of the cookies we use.
We do not collect sensitive personal data (also known as special category data) through this website. We do not collect financial information, health data, or any data relating to children under the age of 13.
We use the personal data we collect for the following purposes:
Responding to enquiries: When you submit a contact form, we use the information you provide to respond to your message. The lawful basis for this processing is our legitimate interests in communicating with people who express interest in our educational resource (Article 6(1)(f) UK GDPR).
Website operation and improvement: Technical data is used to maintain and improve the website, diagnose technical issues, and understand how visitors use the site. The lawful basis is our legitimate interests in operating and improving an effective online resource.
Cookie consent management: We store your cookie consent choices to ensure we comply with our legal obligations. The lawful basis is compliance with a legal obligation (Article 6(1)(c) UK GDPR).
We do not use your personal data for automated decision-making or profiling. We do not use your data for direct marketing purposes.
Under UK GDPR, we must identify a lawful basis for every processing activity. Our lawful bases are as follows:
Legitimate interests (Article 6(1)(f)): We process contact enquiry data and technical data on the basis of our legitimate interests in operating an educational website and communicating with interested parties. We have conducted a legitimate interests assessment and concluded that these interests do not override your rights and freedoms, given the limited and proportionate nature of the data we collect.
Legal obligation (Article 6(1)(c)): We process cookie consent data to fulfil our obligations under the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR.
Consent (Article 6(1)(a)): Where we use non-essential cookies (such as analytics cookies), we process data only where you have provided explicit, informed consent through our cookie consent tool.
We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.
We may share data with the following categories of third-party service providers who process data on our behalf:
Hosting and infrastructure providers: The website is hosted on servers operated by third-party hosting providers. These providers process technical data as part of delivering the hosting service. We ensure that any hosting providers we use offer appropriate data protection guarantees.
Analytics providers: Where you have consented to analytics cookies, anonymised usage data may be processed by analytics service providers. This data does not identify you individually.
All third-party processors are subject to contractual obligations that require them to protect personal data in accordance with UK GDPR. We do not transfer personal data outside of the United Kingdom or the European Economic Area without ensuring appropriate safeguards are in place.
We retain personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with our legal obligations.
Contact enquiry data: Emails received through the contact form are retained in our inbox for a period of 12 months from receipt, after which they are reviewed and deleted unless an ongoing correspondence requires continued retention.
Technical/server log data: Server log data is typically retained for a period of 30 days and then automatically overwritten or deleted.
Cookie consent records: Records of your cookie consent are stored in a browser cookie for a period of 12 months, after which consent is requested again.
When data is no longer required, it is securely deleted or anonymised in a manner that prevents recovery.
Under UK GDPR, you have the following rights in relation to your personal data:
Right of access: You have the right to request a copy of the personal data we hold about you (a Subject Access Request). We will respond within one month of receiving a valid request.
Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute and applies only where specific conditions are met.
Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while a complaint is being investigated.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format.
Right to object: You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
Rights related to automated decision-making: You have the right not to be subject to decisions made solely by automated processing that produce legal or similarly significant effects. We do not carry out such processing.
To exercise any of these rights, please contact us at info@bibronto.online. We will not charge a fee for reasonable requests and will respond within one month. In some cases, we may need to verify your identity before processing a request.
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include the use of HTTPS encryption for data transmitted to and from the website, access controls on systems that store personal data, and regular review of our security practices.
While we take reasonable steps to protect personal data, no method of internet transmission or electronic storage is entirely secure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by UK GDPR. Where required, we will also notify affected individuals without undue delay.
This website uses cookies. Cookies are small text files placed on your device when you visit a website. Some cookies are essential for the website to function; others are used for analytics or preference storage and require your consent.
Full details of the cookies we use, their purposes, and how to manage your preferences are set out in our separate Cookies Policy. You can manage your cookie preferences at any time using the cookie consent tool accessible on this website.
This website may contain links to external websites operated by third parties. We have no control over the content or privacy practices of those websites and are not responsible for how they collect or use personal data. We encourage you to review the privacy policies of any external websites you visit.
If you have concerns about how we handle your personal data, we encourage you to contact us first at info@bibronto.online so that we can address your concerns directly.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the supervisory authority for data protection in the United Kingdom. The ICO can be contacted at:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Website: ico.org.uk. Helpline: 0303 123 1113.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of the website following any changes constitutes acceptance of the updated policy. If changes are significant, we may take additional steps to inform users.
