BICRM Consulting Services ("BICRM", "we", "us", "our") respects your privacy and is committed to protecting your personal information. This policy explains what information we collect through this website (www.bicrm.co.za), how we use it, and the choices and rights you have.
We operate across three regions — Africa & Middle East, Asia-Pacific, and Europe — and we handle personal information in accordance with the applicable laws in the places we operate, including the Protection of Personal Information Act, 2013 (POPIA) in South Africa, the Privacy Act 1988 (Cth) in Australia, and the UK General Data Protection Regulation (UK GDPR).
1. Information we collect
Information you give us
If you contact us through the enquiry form on this website or by phone, we collect the information you choose to provide, such as your name, company, contact details, and the content of your enquiry.
Information collected automatically
When you visit this website, our hosting infrastructure (Amazon Web Services) automatically records standard technical information in server logs, such as your IP address, browser type, device information, pages visited, and the date and time of your visit. This information is used for security, performance, and troubleshooting purposes.
Cookies
This website uses only strictly necessary browser storage: a single preference that records your response to our cookie notice so we do not ask you again. We do not currently use advertising, profiling, or third-party analytics cookies. Fonts and icons are loaded from third-party content delivery networks (Google Fonts and Cloudflare), which may receive your IP address as a technical necessity of serving those files. If we introduce analytics or other non-essential cookies in future, we will update this policy and ask for your consent where required.
2. How we use your information
- To respond to your enquiries and provide information about our services
- To operate, secure, and improve this website
- To comply with legal obligations
- To establish, exercise, or defend legal claims where necessary
We do not sell personal information, and we do not use your information for automated decision-making that produces legal or similarly significant effects.
3. Legal bases
Where the UK GDPR or similar laws apply, we rely on: our legitimate interests (responding to enquiries, running and securing our website), your consent (where requested), and compliance with legal obligations.
4. Sharing your information
We share personal information only with service providers who help us operate this website and our business (for example, cloud hosting provided by Amazon Web Services), with professional advisers where necessary, and where required by law. Service providers are only permitted to process information on our instructions.
5. International transfers
Because we operate in multiple regions, information you provide may be accessed by our teams in South Africa, Australia, and the United Kingdom. Website content is served through a global content delivery network. Where personal information is transferred across borders, we take reasonable steps to ensure it receives an adequate level of protection consistent with applicable law.
6. Retention
We keep personal information only as long as needed for the purposes described above, and then delete or de-identify it. Enquiry correspondence is generally retained only for as long as needed to handle the enquiry and any follow-up, unless a longer period is required by law.
7. Security
We use appropriate technical and organisational measures to protect personal information, including encrypted (HTTPS) connections across this website and access controls on our systems. No method of transmission or storage is completely secure, but we work to protect your information against unauthorised access, loss, or misuse.
8. Your rights
Depending on where you live, you may have rights to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your information
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Lodge a complaint with your local privacy regulator — the Information Regulator (South Africa), the Office of the Australian Information Commissioner (OAIC), or the Information Commissioner's Office (ICO, United Kingdom)
To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.
9. Third-party links
This website may contain links to external websites (such as LinkedIn). We are not responsible for the privacy practices of those sites and encourage you to review their policies.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page shows when it was last revised. Significant changes will be highlighted on this website.
11. Contact us
For privacy enquiries or to exercise your rights, contact us via the enquiry form on our contact page or by phone:
- Africa & Middle East: 4th Floor, The Firs, Cnr Bierman & Cradock Avenue, Rosebank, 2196, South Africa — +27 10 100 3198
- Asia-Pacific: Level 19, Lonsdale Street, Melbourne, VIC, 3000, Australia — +61 3 9120 1970
- Europe: Kemp House, 160 City Road, London, EC1V 2NX, United Kingdom — +44 20 3148 6800