Bushay & Co.
Bushay & Co. · Your informationPrivacy Policy
This policy explains how Bushay & Co. collects, uses and protects personal information when you visit our website, contact us or work with us. We handle personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1Who we are
1.1Bushay & Co. is the trading name of Tyleeisha Bushay, a sole trader based in London, United Kingdom.
1.2We are the controller of the personal information described in this policy. Our ICO registration number is [ICO registration number]. For any privacy question or request, email hello@bushay.com.
2The information we collect
2.1Depending on how you interact with us, we may collect:
Contact and business details, such as your name, job title, company, email address and phone number, when you fill in our enquiry form, book a call, email us or connect with us on LinkedIn.
Engagement information you share about your business, systems and goals during discovery calls and projects, and our contracts and invoices with you.
Payment information, such as billing details. Card payments are handled by Stripe, and we never see or store full card numbers.
Website usage information, such as your IP address, browser and the pages you visit, collected through essential and analytics cookies (see section 9).
Marketing preferences, such as whether you want to receive updates from us.
2.2We do not intentionally collect sensitive (special category) information, and we ask you not to send it to us.
3Data we handle for our clients
3.1When we work inside a client’s HubSpot portal or other systems, we may have access to personal information about that client’s contacts and customers. For that information, our client is the controller and we act as their processor (or “service provider” under US state privacy laws).
3.2We use that information only on our client’s instructions, under our client agreement and our Data Handling Statement. If you are a client’s contact and have a question about your data, please contact that business directly.
4How we use your information
4.1We use personal information only where we have a lawful basis to do so:
| Purpose | Lawful basis |
|---|---|
| Replying to enquiries and booking calls | Legitimate interests, or steps taken at your request before a contract |
| Delivering our services and managing our relationship | Performance of a contract |
| Invoicing, accounting and tax records | Legal obligation |
| Sending occasional insights and updates | Consent, or legitimate interests for existing business contacts. You can opt out at any time. |
| Improving our website | Consent for analytics cookies; legitimate interests for essential cookies |
| Protecting our legal rights | Legitimate interests |
5Who we share it with
5.1We share personal information only with trusted organisations that help us run our business, including HubSpot (CRM, website forms and email), Google Workspace (email and file storage), Google Analytics (website analytics, only with your consent), Stripe (payments), Calendly (booking calls), FormSubmit (delivering website enquiries to our inbox), Zoom or Google Meet (video calls), and our accountant. They may use it only to provide their services to us.
5.2We may also share information with professional advisers such as lawyers and insurers, with authorities where the law requires it, or with a successor business if Bushay & Co. is restructured, for example if it becomes a limited company.
5.3We never sell your personal information.
6International transfers
6.1Some of our service providers are based outside the UK, including in the United States. When personal information is transferred outside the UK, we make sure it is protected by UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework where the provider is certified) or by the UK International Data Transfer Agreement or Addendum.
7How long we keep it
Client, contract and accounting records: 6 years after the end of the tax year they relate to, to meet our legal obligations.
Enquiries that do not lead to work: up to 2 years.
Marketing contacts: until you unsubscribe or ask us to stop.
Client CRM data we handle as a processor: deleted or returned within 30 days of the engagement ending, unless the client instructs otherwise.
8How we protect it
8.1We use encrypted devices, multi-factor authentication, strong access controls and the principle of least privilege. When we work with client systems, we stay inside those systems wherever possible. Our Data Handling Statement describes these measures in more detail.
9Cookies
9.1Our website uses essential storage so it works properly, such as remembering your cookie choice. With your consent, we also use analytics cookies from Google Analytics to understand how visitors use the site. Analytics cookies are only set after you click “Accept analytics”.
| Name | Purpose | Type | Kept for |
|---|---|---|---|
| bc-consent | Remembers your cookie choice. Stored in your browser. | Essential | 12 months |
| _ga, _ga_<ID> | Google Analytics: tells visits apart so we can count visitors and pages. | Analytics, only with consent | Up to 2 years |
9.2You can change your choice at any time using “Cookie settings” at the bottom of every page, or by clearing cookies in your browser. Choosing “Essential only” turns analytics off and removes the analytics cookies we set.
10Your rights
10.1Under UK data protection law, you have the right to: access your personal information; correct it; ask us to delete it; restrict or object to how we use it, including objecting to direct marketing at any time; receive it in a portable format; and withdraw your consent where we rely on it.
10.2To use any of these rights, email hello@bushay.com. We will respond within one month and will not usually charge a fee.
10.3If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
10.4If you live in a US state with a consumer privacy law, such as California, you may also have rights to know about, access, correct and delete your personal information. We do not sell or share personal information for cross-context behavioural advertising, and we will not treat you differently for using your rights.
11Children
11.1Our website and services are for businesses and are not directed at anyone under 18.
12Changes to this policy
12.1We may update this policy from time to time. The date at the top shows when it was last changed.
13Contact us
13.1For any question about this policy or your personal information, email hello@bushay.com.