Privacy Policy

Last updated: 2 August 2026

1. Introduction

Busal Ltd (“Busal”, “we”, “us”, or “our”) operates the Busal OS platform and website at https://www.getbusal.com. This Privacy Policy explains how we process personal data when you visit our website, request a demo, create an account, or use our services.

We are the data controller for personal data described in this policy. For questions, contact privacy@getbusal.com.

2. Data we collect

We may collect the following categories of personal data:

• Identity and contact data — name, email address, phone number, job title, and business name.
• Account and usage data — login credentials, role assignments, activity logs, and configuration preferences within the platform.
• Business operational data — orders, customer records, inventory, financial transactions, and other data you or your organisation input into Busal OS.
• Technical data — IP address, browser type, device identifiers, and analytics cookies when you use our website or platform.
• Communications — messages you send via contact forms, support tickets, or email correspondence.

3. How we use your data

We process personal data for the following purposes:

• Providing, maintaining, and improving the Busal OS platform and related services.
• Processing demo requests, sales enquiries, and customer support.
• Authenticating users and enforcing role-based access controls.
• Generating analytics, reports, and AI-assisted recommendations within your business context.
• Complying with legal obligations and protecting the security of our systems.
• Sending service-related communications; marketing communications where you have opted in.

4. Legal bases (UK GDPR)

We rely on the following legal bases under UK GDPR:

• Contract — to perform our agreement with you or your organisation.
• Legitimate interests — to operate, secure, and improve our services, provided your rights are not overridden.
• Consent — where required for marketing or non-essential cookies.
• Legal obligation — where processing is required by law.

5. Data sharing

We do not sell personal data. We may share data with subprocessors who assist in hosting, payments, email delivery, analytics, and customer support—each bound by data processing agreements. We may disclose data where required by law or to protect our rights and the security of users.

Your organisation's operational data is tenant-scoped. We do not use one customer's business data to train models accessible to other customers without explicit agreement.

6. International transfers

Where personal data is transferred outside the United Kingdom, we implement appropriate safeguards such as UK International Data Transfer Agreements or equivalent mechanisms approved under UK GDPR.

7. Retention

We retain personal data for as long as necessary to provide services, fulfil contractual obligations, and comply with legal requirements. Account data is typically retained for the duration of your subscription plus a reasonable period thereafter. You may request deletion subject to legal and contractual constraints.

8. Security

We implement technical and organisational measures including encryption in transit (HTTPS), tenant isolation, role-based access controls, audit logging, and regular security reviews. No method of transmission or storage is completely secure; we encourage strong passwords and appropriate internal access policies.

9. Your rights

Under UK GDPR, you may have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability where applicable. You may withdraw consent at any time where processing is consent-based. To exercise your rights, contact privacy@getbusal.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Cookies

Our website uses essential cookies for authentication and security, and may use analytics cookies to understand usage. You can manage cookie preferences through your browser settings. Non-essential cookies require consent where applicable.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated via the website or email where appropriate. Continued use of our services after changes constitutes acceptance of the updated policy.

Questions about this policy? Contact us or email privacy@getbusal.com.