1.    BACKGROUND
1.1    BM Catalysts Limited understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this website, www.bmrewardspro.com ("Our Site"). We will only collect and use personal data in ways that are described here, and in a manner that is consistent with Our obligations and your rights under the law.
1.2    Please read this Privacy Policy carefully and ensure that you understand it. Your acceptance of Our Privacy Policy is deemed to occur upon your first use of Our Site. If you do not accept and agree with this Privacy Policy, you must stop using Our Site immediately.
2.    DEFINITIONS AND INTERPRETATION
In this Policy the following terms shall have the following meanings:
“Account”    means an account you create to register for the Rewards Scheme;
“Personal Data”    means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to Us via Our Site. This definition shall, where applicable, incorporate the definitions provided in the Data Protection Act 2018 and the UK General Data Protection Regulation ("UK GDPR"); and
“We/Us/Our”    means BM Catalysts Limited, a limited company registered in England under company number 01673421, whose registered address and main trading address is Reed Mill, Sheepbridge Lane, Mansfield, Nottinghamshire, NG18 5DL
3.    INFORMATION ABOUT US
3.1    Our Site is owned and operated by Us. Our VAT number is 290 8703 83.
4.    WHAT DOES THIS POLICY COVER?
4.1    This Privacy Policy applies only to your use of Our Site and membership of the loyalty rewards scheme (“Rewards Scheme”). Our Site may contain links to other websites. Please note that We have no control over how your data is collected, stored, or used by other websites and We advise you to check the privacy policies of any such websites before providing any data to them.
5.    YOUR RIGHTS
5.1    As a data subject, you have the following rights under the UK GDPR, which this Policy and Our use of Personal Data have been designed to uphold:
5.1.1    the right to be informed about Our collection and use of Personal Data;
5.1.2    the right of access to the Personal Data We store about you (see section 12);
5.1.3    the right to rectification if any Personal Data We hold about you is inaccurate or incomplete (please contact Us using the details in section 13);
5.1.4    the right to be forgotten – i.e. the right to ask Us to delete any Personal Data We hold about you (We only hold your personal data for a limited time, as explained in section 7 but if you would like Us to delete it sooner, please contact Us using the details in section 13);
5.1.5    the right to restrict (i.e. prevent) the processing of your Personal Data;
5.1.6    the right to data portability (obtaining a copy of your Personal Data to re-use with another service or organisation);
5.1.7    the right to object to Us using your Personal Data for particular purposes; and
5.1.8    rights with respect to automated decision making and profiling (We do not engage in any automated decision making or profiling).
5.2    If you have any cause for complaint about Our use of your Personal Data, please contact Us using the details provided in section 13. If We are unable to help, or you are unsatisfied with Our response, you also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office.
5.3    For further information about your rights, please contact the Information Commissioner's Office or your local Citizens Advice Bureau. Please see https://ico.org.uk/make-a-complaint/ for more information.
6.    WHAT DATA DO WE COLLECT?
6.1    Depending upon your use of Our Site, We may collect some or all of the following personal data (please see our Cookie Policy relating to Our use of cookies and similar technologies) when you:
6.1.1    visit Our Site;
6.1.2    create an account with us;
6.1.3    contact us to make an enquiry or complaint; or
6.1.4    interact with us on social media.
6.2    When you interact with us you may provide us with personal information about you such as your:
6.2.1    name;
6.2.2    date of birth;
6.2.3    gender;
6.2.4    business/company name;
6.2.5    business/company address;
6.2.6    job title;
6.2.7    contact information such as email addresses and telephone numbers;
6.2.8    information such as preferences and interests;
6.2.9    financial information such as credit / debit card numbers;
6.2.10    IP address;
6.2.11    web browser type and version;
6.2.12    operating system; and
6.2.13    a list of URLs starting with a referring site, your activity on Our Site, and the site you exit to.
6.3    Depending on the nature of Our interactions with you, there may be certain essential personal information that We have to collect from you so that We can provide you with the information goods or services that you have requested. This will vary depending on the relationship We have with you.
6.4    We may also ask you for additional personal information which it is optional for you to provide but which will allow Us to improve the service that We provide to you.
6.5    We will always aim to make it clear which personal information it is necessary for you to provide and which personal information is optional. However, if you are unsure as to whether you are required to provide any particular piece of personal information, please ask Us.
7.    HOW DO WE USE YOUR DATA?
7.1    All Personal Data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with Our obligations and safeguard your rights under the UK GDPR and Data Protection Act 2018 at all times. For more details on security see section 8, below.
7.2    We may use your data for the following purposes:
7.2.1    to perform Our obligations with you, including:
(a)    applying points to your Account; and 
(b)    providing reward inventory to you;
7.2.2    where you have expressly consented to us doing so, including:
(a)    replying to an enquiry or email from you;
(b)    supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time); and
7.2.3    where We have a legitimate interest in doing so, including:
(a)    monitoring fraud and other illegal or unlawful activity;
(b)    providing and managing access to Our Site;
(c)    providing you with updates regarding the Rewards Scheme and reward inventory;
(d)    providing and managing your account;
(e)    record keeping purposes;
(f)    personalising and tailoring your experience on Our Site;
(g)    ensuring that Our Site is presented in the most effective manner for you and your computer and tracking your use of our website through the use of cookies and log files to help us to provide a positive user experience and improve and increase usage of Our Site.
7.3    For some of your personal information, there will be a legal, contractual or other requirement or obligation for you to provide Us with your personal information. If you do not provide Us with the required personal information, We may not be able to properly perform Our contract with You, continue Our relationship with you or comply with legal obligations. For other personal information, whilst you may not be under an obligation to provide it to Us, if you do not provide it then We may not be able to properly perform Our services for you or provide you with Our products or We may be unable to continue Our relationship with you. 
7.4    You have the right to withdraw your consent to Us using your Personal Data at any time, and to request that We delete it. Please note however that the withdrawal of your consent will not affect any use of your personal information made before you withdrew your consent. Withdrawing consent may also have the same effects as not providing the information in the first place, for example We may no longer be able to carry out certain activities or continue Our relationship with you.
8.    HOW AND WHERE DO WE STORE YOUR DATA?
8.1    The duration for which We retain your personal information will differ depending on the type of information and the reason why We collected it from you. However, in some cases personal information may be retained on a long-term basis: for example, personal information that We need to retain for legal purposes will normally be retained for at least six years in accordance with usual commercial practice and regulatory requirements.
8.2    It is important to ensure that the personal information We hold about you is accurate and up-to-date, and you should let Us know if anything changes, for example if you move home or change your phone number or email address. You may be able to update some of the personal information We hold about you through your account on Our Site. Some or all of your data may be transferred outside of the UK. You are deemed to accept and agree to this by using Our Site and submitting information to Us. If We do transfer your data outside of the UK, this may be to:
8.2.1    a country that is considered to have data protection rules that are equivalent to those in the United Kingdom; or
8.2.2    a country which is not considered to have the same standards of protection for personal data as those in the United Kingdom, in which case we will take all steps required by law to ensure sufficient protections are in place to safeguard your personal information, including where appropriate putting in place contractual terms approved under the Data Protection Act 2018.
8.3    Data security is very important to Us, and We take all reasonable measures to safeguard and secure your Personal Data collected through Our Site according to the terms of this Privacy Policy. Such measures include polices to prevent unauthorised access, improper use or disclosure, unauthorised modification, unlawful destruction or accidental loss.
8.4    The transmission of data via the internet is not completely secure. Notwithstanding Our best efforts We therefore cannot guarantee the security of any data transmitted to Our website. Any transmission of your data to Our Site is at your own risk. Once We have received your data We will use strict procedures and security features to try to prevent unauthorised access.
8.5    Where We have given you (or where you have chosen) a password to access certain parts of Our Site, you are responsible for keeping this password confidential. You should not share your password with anyone.
9.    DO WE SHARE YOUR DATA?
9.1    We may share your data with other companies in Our group for Our legitimate business purposes. This is to enable Us to operate Our group effectively and to enable Us to provide you with an efficient service.
9.2    We may share your data with:
9.2.1    Our professional advisors;
9.2.2    providers of outsourced services, such as hosting and IT support or maintenance services (to the extent necessary for the provider to provide those outsourced services to Us); and
9.2.3    the prospective seller or buyer of any business or assets in the event that We sell or buy any business or assets.
9.3    In certain circumstances, We may be legally required to share certain data held by Us, which may include your Personal Data, for example, where We are involved in legal proceedings, where We are complying with legal obligations, a court order, or a governmental authority.
10.    HOW CAN YOU CONTROL YOUR DATA?
10.1    In addition to your rights under the UK GDPR, set out in section 5, when you submit Personal Data via Our Site, you may be given options to restrict Our use of your data. In particular, We aim to give you strong controls on Our use of your data for direct marketing purposes including the ability to opt-out of receiving emails from Us which you may do by unsubscribing using the links provided in Our emails and at the point of providing your details and by managing your Account.
10.2    You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service (the TPS), the Corporate Telephone Preference Service (the CTPS), and the Mailing Preference Service (the MPS). These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receiving.
10.3    In certain circumstances you may be entitled to request the erasure of personal information that We hold about you. To make a request of this nature, please contact Us, providing full details of the personal information you want to be erased and the reason(s) for your request. We will consider all requests upon receipt and confirm to you whether We are able to agree to your request.
11.    YOUR RIGHT TO WITHHOLD INFORMATION
11.1    You may access certain areas of Our Site without providing any data at all. However, to use all features and functions available on Our Site you may be required to submit or allow for the collection of certain data.
11.2    You may restrict Our use of cookies. For more information, please see our Cookie Policy available here: https://bmrewardspro.com/Cookie-Policy 
11.3    If you want to stop receiving any information from Us, such as news and updates, please let Us know by contacting us using the details in section 13. It may take up to one month to unsubscribe you from marketing.
11.4    Your decision to stop receiving information from Us may result in the deletion of some of the personal information that We hold about you, but We may still retain personal information We require for other purposes, including where it is required for record keeping purposes.
12.    HOW CAN YOU ACCESS YOUR DATA?
12.1    You have the right to ask for a copy of any of your Personal Data held by Us (where such data is held). Under the UK GDPR, no fee is payable and We will provide any and all information in response to your request free of charge. Please contact Us using the contact details below in section 13.
13.    CONTACTING US
13.1    If you have any questions about Our Site or this Privacy Policy, please contact Us by email at enquiries@bmcatalysts.com. Please ensure that your query is clear, particularly if it is a request for information about the data We hold about you (as under section 12, above).
13.2    You are entitled by law to ask for a copy of your personal information at any time. Please contact Us using the details in this section 13.
13.3    In the unlikely event that you have any concerns about how We use your personal information, please contact Us as described in this section 13. This includes situations where you want to request the rectification or erasure of your personal information, restrictions to be placed around how We use your personal information, or to object to a particular use.
13.4    If We are unable to resolve your complaint, you may make a complaint to the Information Commissioner's Office. 
14.    CHANGES TO OUR PRIVACY POLICY
14.1    We may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site following the alterations. We recommend that you check this page regularly to keep up to date. You can also obtain an up-to-date copy of Our privacy notice by contacting Us as described in section 13. Should you object to any alteration, please contact Us.
15.    FURTHER INFORMATION
15.1    We hope that the contents of this privacy notice address any queries that you may have about the personal information We may hold about you and what We may do with it. However, if you do have any further queries, comments or requests, please contact Us as described in section 13 above.
15.2    Whilst this privacy notice sets out a general summary of your legal rights in respect of personal information, this is a very complex area of law. More information about your legal rights can be found on the Information Commissioner's website at https://ico.org.uk/your-data-matters/.