Who We Are
Budruum Ltd ("Budruum", "we", "us" or "our") is a business consultancy registered in the United Kingdom. We provide services including business planning, brand development, financial forecasting, web and app development, product consultancy and startup support.
Our registered address and company details are available upon request. For all privacy-related correspondence, please contact us using the details provided at the end of this document.
Budruum acts as the data controller for personal information collected through our website, enquiry forms, booking system and direct communications.
Information We Collect
We collect personal information in the following ways:
Information you provide directly
- Full name, email address and phone number submitted via our enquiry or contact forms
- Business or brand name, country of residence and project details shared during enquiries
- Consultation booking details including selected service, date and preferred time slot
- Payment information processed via Stripe — we do not store card details directly
- Communications sent to us via email, WhatsApp or iMessage
- Newsletter subscription requests including email address
Information collected automatically
- Browser type, device type and operating system when visiting our website
- IP address and approximate geographic location
- Pages visited, time spent on pages and referring URLs
- Cookie data as described in Section 08
How We Use Your Information
Personal information collected by Budruum is used only for the purposes for which it was provided and for legitimate business operations. Specifically, we use your information to:
- Respond to enquiries and assess the suitability of a potential engagement
- Confirm and manage consultation bookings
- Process payments securely via our payment provider
- Deliver services agreed during onboarding
- Send newsletters and insights to subscribers who have opted in
- Improve the quality and performance of our website
- Comply with legal and regulatory obligations
Legal Basis for Processing
Under UK GDPR, we are required to identify a lawful basis for processing your personal data. Depending on the nature of your interaction with Budruum, we rely on the following legal bases:
- Contract: Processing necessary to deliver a service you have engaged us to provide or to take steps at your request prior to entering an agreement.
- Legitimate Interests: Processing necessary for our genuine business interests, such as responding to enquiries or improving our website, where those interests are not overridden by your rights.
- Consent: Where you have actively opted in — for example, to receive our newsletter. You may withdraw consent at any time.
- Legal Obligation: Where we are required to process data to comply with applicable law.
Data Sharing and Disclosure
Budruum does not share personal data with third parties except in the following limited circumstances:
- Service Providers: Trusted third-party tools used to operate our business, including Stripe for payment processing, email delivery services and website hosting. These providers are contractually bound to handle data securely and only for the purposes we specify.
- Legal Requirements: Where disclosure is required by law, court order or regulatory authority.
- Business Transfers: In the unlikely event of a merger, acquisition or sale of assets, personal data may be transferred to the relevant successor entity, subject to equivalent protections.
We do not transfer personal data outside of the United Kingdom or European Economic Area unless appropriate safeguards are in place in accordance with UK GDPR requirements.
Data Retention
We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with legal, regulatory or contractual obligations.
- Enquiry data from non-proceeding contacts is deleted within 12 months of last correspondence
- Client records relating to completed engagements are retained for up to 6 years for accounting and legal purposes
- Newsletter subscriber data is retained until you unsubscribe or withdraw consent
- Website analytics data is retained in anonymised or aggregated form
When data is no longer required, it is securely deleted or anonymised in a manner that prevents identification.
Your Rights
Under UK data protection law, you have the following rights in relation to your personal information:
- Right of Access: To request a copy of the personal data we hold about you.
- Right to Rectification: To request correction of inaccurate or incomplete personal data.
- Right to Erasure: To request deletion of your personal data where there is no longer a lawful basis for its retention.
- Right to Restrict Processing: To request that we limit the use of your data in certain circumstances.
- Right to Data Portability: To receive your data in a structured, commonly used and machine-readable format.
- Right to Object: To object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.
Cookies
Our website uses cookies — small text files placed on your device — to support the proper functioning of the site and to understand how visitors interact with our content.
Types of cookies we use
- Essential cookies: Required for the website to function correctly. These cannot be disabled.
- Analytics cookies: Used to understand how visitors use the website, which pages are visited most and where visitors come from. Data collected is aggregated and does not identify individuals.
- Preference cookies: Used to remember choices you have made, such as language or display settings.
You may adjust your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the website. We do not use cookies to serve targeted advertising.
Third-Party Links
Our website may contain links to external websites, platforms and services operated by third parties — including social media platforms, payment processors and partner services. These links are provided for your convenience.
Budruum is not responsible for the privacy practices, content or security of third-party websites. We encourage you to review the privacy policies of any external sites you visit. The presence of a link does not constitute an endorsement of the linked site or its operators.
Security
Budruum takes the security of personal information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure.
- All data transmission on our website is encrypted using SSL/TLS
- Payment information is handled exclusively by Stripe, which is PCI-DSS certified
- Access to personal data within our organisation is limited to those with a legitimate need
- We review our security practices regularly and update them as appropriate
While we take all reasonable precautions, no method of electronic transmission or storage is entirely secure. We cannot guarantee absolute security but commit to acting promptly in the event of any breach that affects your rights.
Children's Privacy
Our services are directed exclusively at individuals aged 18 and over. Budruum does not knowingly collect personal information from anyone under the age of 18.
If you believe that a minor has submitted personal information to us without parental consent, please contact us immediately at hello@budruum.co.uk and we will take appropriate steps to remove that information from our records.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal obligations or the services we provide. When we do so, the revised version will be published on this page with an updated effective date.
We encourage you to review this policy from time to time. Continued use of our website or services after any update constitutes your acceptance of the revised terms. Where changes are material, we will endeavour to notify active clients directly.
This policy was last reviewed and updated on 1 January 2025.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights or have a concern about how your information has been handled, please contact us using the details below. We will respond to all privacy-related enquiries within 30 days.