Privacy Policy

BlueMoon Solutions Limited (“BlueMoon”, “we”, “us”, “our”) is committed to protecting the privacy and security of personal data relating to our customers, suppliers, partners, website visitors and employees.

This Privacy Policy explains how we collect, use, store, share and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy also supports our management systems in line with ISO 9001 (Quality Management) and ISO/IEC 27001 (Information Security Management).

1. Who We Are

  • Company name: BlueMoon Solutions Limited
  • Registered in: England and Wales
  • Company number: 05538799
  • Registered and principal office:
    2 Tower Court, Irchester Road, Wollaston, NN29 7PJ, United Kingdom
  • Email: enquiries@bluemoonsolutions.co.uk
  • Telephone: 01933 697568

BlueMoon Solutions Limited is the Data Controller for the purposes of UK data protection law.

2. Lawful Basis for Processing Personal Data

We only process personal data where we have a valid lawful basis under UK GDPR, including:

  • Contractual necessity – to deliver IT support and related services
  • Legal obligation – for financial, employment or regulatory compliance
  • Legitimate interests – to operate, secure and improve our business
  • Consent – where explicitly required (e.g. certain marketing activities)

Where consent is relied upon, it can be withdrawn at any time.

3. Information We Collect

3.1 Customers

  • Company name and address
  • Contact details (names, telephone numbers, email addresses)
  • User account details
  • Billing and financial information
  • IT administration and support‑related information necessary to deliver services

3.2 Suppliers and Partners

  • Company and contact details
  • Financial and payment information
  • Contractual records

3.3 Employees

  • Personal and contact information
  • Employment and payroll details
  • Education and professional history
  • Next of kin / emergency contact details

3.4 Website Users

  • Contact form submissions
  • Technical data (IP address, browser type, usage statistics)

4. How We Use Personal Data

We process personal data in order to:

  • Deliver IT support and managed services
  • Manage contracts, billing and financial records
  • Communicate with customers, suppliers and partners
  • Improve and secure our systems and services
  • Manage employment relationships
  • Meet legal, regulatory and contractual obligations

5. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

  • Secure systems and access controls
  • Encryption where appropriate
  • Role‑based access to information
  • Supplier security assessment
  • Incident management and breach escalation procedures

Customer and operational data is primarily stored within secure platforms (including ConnectWise) and protected servers.

These controls form part of our ISO/IEC 27001 aligned Information Security Management System (ISMS).

6. Sharing of Personal Data

We may share personal data with trusted third parties where necessary, including:

  • IT and service delivery partners
  • Hosting and SaaS providers
  • Payment processors
  • Professional advisers (legal, financial, compliance)
  • Credit reference agencies (where contractually required)

All third parties are required to process data lawfully, securely and in accordance with UK data protection law.

We do not sell personal data.

7. International Transfers

Where personal data is transferred outside the UK, we ensure:

  • Appropriate safeguards are in place (e.g. UK adequacy regulations or standard contractual clauses)
  • Data is protected to an equivalent UK legal standard

8. Data Retention

Personal data is retained only for as long as necessary for its intended purpose, taking into account:

  • Legal and regulatory obligations
  • Contractual requirements
  • Business and security needs

Retention periods are reviewed regularly as part of our management systems.

9. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure (subject to legal exemptions)
  • Restrict or object to processing
  • Data portability (where applicable)
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO contact:
www.ico.org.uk
Tel: 0303 123 1113

Requests can be made in writing using the contact details below.

10. Cookies and Website Analytics

Our website may use cookies and analytics tools to:

  • Improve website performance and usability
  • Analyse visitor behaviour

Cookie usage is managed through appropriate notices and controls on our website.

11. Changes to This Policy

We may update this Privacy Policy periodically.
All changes will be published on this page with a revised update date.

12. Contact & Data Protection Officer

The Data Protection Officer for BlueMoon Solutions Limited is:

Sean Savoy
BlueMoon Solutions Limited
2 Tower Court, Irchester Road, Wollaston, NN29 7PJ
Email: enquiries@bluemoonsolutions.co.uk
Telephone: 01933 697568