Privacy Policy

Who we are. BMSOps is operated by PSBMS Limited, a company registered in England and Wales, based in Andover, Hampshire, United Kingdom. PSBMS Limited is the data controller for the personal data described here. Contact: piotr@psbms.com.

What we collect and why

• Demo and enquiry details. If you leave your email on the demo page or contact us, we use it to send the information you asked for and to follow up about BMSOps. Lawful basis: legitimate interest / consent. You can opt out at any time by replying or emailing us.
• Customer account data. When your company subscribes, we hold the account details you provide (names, work email addresses, company details) and the business data your team enters into the system (jobs, quotes, invoices, timesheets, files and similar). Your company owns that business data; we process it only to provide the service. Lawful basis: contract.
• Technical data. Standard server logs (IP address, time, requested page) kept for security and troubleshooting, and essential cookies for sign-in sessions. We do not run advertising or cross-site tracking.
• Billing data. Subscription and payment records. Card/bank details are handled by our payment provider, not stored by us.

Connected services (integrations)

BMSOps can connect to third-party services at your request, using credentials or authorisations you provide. We access only the data needed for the feature you enabled, and disconnecting removes our access:

• Bank feed (e.g. Starling). A read-only token you supply is used to display your transactions for bookkeeping. We never initiate payments.
• Calendar feeds. The calendar subscription URL contains a private token; anyone holding the URL can read the schedule it exposes. You can regenerate or disable it at any time.
• Microsoft 365 / Google / Dropbox (where enabled). Used to sync your schedule and/or store your backups in your own account. We request the narrowest scopes available, store tokens encrypted, and never sell or share this data.

Google user data — Limited Use. BMSOps' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the calendar sync and backup features you enable, is never used for advertising, and is never sold.

Where your data lives

BMSOps runs on servers controlled by PSBMS Limited in the United Kingdom. Encrypted backups are kept, including off-site copies, so your data survives hardware failure. If you enable a cloud backup destination, those copies go to the account you connect.

How long we keep it

• Demo/enquiry emails: until you ask us to stop, or after a period of inactivity.
• Customer business data: for the life of the subscription. On leaving, you can export everything free of charge, and we delete your data after a short wind-down period unless the law requires otherwise.
• Server logs: rotated on a short cycle.

Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your personal data, object to or restrict processing, and take your data elsewhere. Email piotr@psbms.com and we will respond within one month. You can also complain to the ICO (ico.org.uk).

Changes

If this policy changes materially we will note it here with a new date, and tell subscribed customers directly.