Privacy Policy

TRUST & TRANSPARENCY

Privacy Policy

This Privacy Policy explains how BNB Mobile Deals collects, uses, stores, and protects personal information when you visit our website, contact our team, or use our services.

  • Effective Date: October 30, 2026
  • Last Updated: October 30, 2026

Data Protection Commitment

Your privacy is paramount. We implement enterprise-grade security protocols to safeguard every piece of data shared with BNB Mobile Deals.

Secure Data Encryption
0 %

Information We May Collect

We gather essential details to offer accurate, compliant legal and security services. Here is a clear breakdown of the data categories we receive and maintain.

Direct Information

  • Full Name
  • Email Address
  • Phone Number
  • Enquiry & Case Details

Telephone Enquiries

Telephone interactions, including outbound and inbound calls, may be recorded or monitored. We retain these logs to guarantee security, quality control, training consistency, and full regulatory compliance.

Technical Information

  • IP Addresses & Geolocation
  • Browser Type & Version
  • Operating System & Device
  • Cookies & Diagnostic Metrics
SECTION 03

How We Use Personal Information

We process your personal information only for specific, explicit, and legitimate purposes. Below is an overview of how we utilize your data to deliver, optimize, and secure our services.

Responding to Enquiries

Addressing direct requests, quote submissions, and contact form enquiries efficiently.

Customer Support

Providing comprehensive assistance, troubleshooting errors, and resolving software issues.

Communications

Managing service announcements, technical updates, and critical policy change alerts.

System Security

Monitoring network health, protecting platforms against attacks, and ensuring integrity.

Performance Analytics

Aggregating performance metrics to elevate page speed and application stability.

Advertising Measurement

Evaluating target audience interactions to optimize campaigns using non-identifying signals.

Fraud Prevention

Preventing malicious bot access, suspicious registrations, and transaction fraud attempts.

Legal Obligations

Meeting judicial commands, audit procedures, corporate filings, and compliance protocols.

Purpose Limitation & Lawful Processing

We adhere strictly to the principle of purpose limitation. We will never use or process your personal data for secondary, unrelated, or undisclosed activities without ensuring a compliant lawful basis under applicable data protection legislations.

SECTION 04

Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we must have a valid lawful basis for every processing activity involving your personal data. We rely on the following primary legal grounds.

Consent

You have given clear, affirmative consent for us to process your personal data for a highly specific purpose.

Contract

Processing is strictly necessary to fulfill a contract with you, or to take requested steps prior to entering a contract.

Legitimate Interests

Processing is required for our legitimate business interests, provided your fundamental privacy rights do not override them.

Legal Obligation

Processing is essential for our compliance with statutory UK laws, tax regulations, and regulatory oversight authorities.

Processing Activities Mapping

We strictly attribute specific operational activities to their respective lawful bases. Expand each category below to review active mappings.

1. Consent-Based Activities

  • Direct Email Marketing & Newsletter Distribution
  • Non-Essential Analytics & Behavioral Cookie Placement
  • Optional Customer Satisfaction & Product Feedback Surveys
  • Core Account Registration, Profile Creation & Authentication
  • Processing Invoices, Payments, & Purchase Fulfillments
  • Delivering Essential Platform Notifications & Service Inquiries
  • Intrusion Detection, Platform Security Monitoring & DDoS Prevention
  • Internal Optimization through Anonymized Product Analytics
  • Fraud Protection & Identification of Platform Misuse / Terms Abuse
  • Maintaining Corporate VAT Records & Mandatory HMRC Tax Reporting
  • Preservation of Audit Trails for Financial Regulators
  • Fulfilling Valid Statutory Legal Requests & Judicial Subpoenas

SECTION 5: COMMUNICATIONS

Telephone Calls & Customer Communications

We are dedicated to safeguarding customer privacy across all channels. When you contact us via telephone or submit general enquiries, we process, log, and secure all interactions in compliance with global tracking and communication governance standards.

  • Enquiry Handling: Secure routing protocols ensure inquiries reach relevant specialists without exposing unencrypted personal details.
  • Call Logging: General logs record basic metadata, containing timestamps, telephone numbers, and operational routing profiles.
  • Retention Protocols: Voice recordings and logs are stored securely in heavily encrypted environments, retaining data for a maximum of 12 months.
  • Dynamic Number Insertion (DNI): Dynamic routing lines track campaign performance. We associate call metrics with secure browser analytics to measure marketing attribution without violating user anonymity.

Direct Communications Line

For questions about automated call tracking configurations, database retention schedules, or direct corporate enquiries, reach our compliance center directly.

0800 652 1799

* Calls may be recorded to verify regulatory compliance. Dynamic attribution parameters correlate campaign interactions without processing unhashed end-user identities.

SECTION 06

Cookies and Similar Technologies

We use cookies and equivalent tracking layers to customize your service experience, gauge platform health, and serve personalized marketing messages. Below, we explain our main cookie categories, how they operate, and your distinct rights to manage or withdraw consent.

Strictly Necessary Cookies

These cookies are crucial for page transitions, access to authenticated portals, and firewall parameters. They process essential features like active login preservation and security threat mitigation. These elements cannot be disabled within our system.

  • Operation: Triggered on user interaction / configuration actions.
  • Management: Handled directly via browser-level restrictions.
  • Consent: Exempted from absolute prior consent under global rules.

Analytics & Performance Cookies

We gather anonymized records about user movement, popular features, loading speeds, and transaction drop-off rates. This aggregate insight drives software stability and clean interface enhancements. No identity-matching profile tracking is utilized.

  • Operation: Aggregates technical system logs and route durations.
  • Management: Controlled anytime using our dynamic privacy settings dashboard.
  • Consent Withdrawal: Instantly ceases future behavioral mapping upon opt-out.

Targeting & Advertising Cookies

These identifiers build a general profile of your interactions to target promotional assets across networks. They identify unique parameters about browser configurations to limit ad fatigue and deliver contextually appropriate information.

  • Operation: Tracks impressions, conversions, and target audience alignment.
  • Management: Switchable on or off via the marketing preferences drawer.
  • Consent Withdrawal: Opting out restricts target profile matching immediately.

How to Manage & Withdraw Consent

You can modify browser preferences to completely exclude cookies or clear them upon application exit. Note that blocking all cookies might disrupt platform functionality. To quickly delete or adjust browser trackers, use these links to jump to your browser's instructions:

SECTION 7

Google Ads and Advertising Measurement

To continuously improve our offerings and measure marketing effectiveness, we leverage Google's industry-standard advertising technology. We implement these solutions in alignment with modern data-privacy requirements, ensuring your consent preferences strictly guide how data is processed.

Google Ads Integration

We deploy Google Ads tracking to quantify key interactions—such as registrations or inquiries—resulting from our campaigns. This aggregate conversion data allows us to optimize bid efficiency and display advertisements tailored directly to your professional profile.

Google Analytics 4 (GA4)

GA4 is used to monitor user pathways, interface engagement, and structural performance. This environment relies on event-based analytical tracking without relying entirely on traditional tracking methods, processing IP addresses and session data under privacy protocols.

Google Tag Manager (GTM)

GTM acts as a centralized script management console. While GTM executes the loading of analytics and helper tags, the tool itself does not store or access your personal data. It solely controls the trigger logic linked directly to your active cookie preferences.

Google Consent Mode (v2)

Consent Mode operates dynamically based on your cookie panel settings. If you withhold consent, Google tags automatically shift to a cookieless model, suppressing advertising identifier tracking while communicating cookieless state parameters to respect visitor choices.

To learn more about how Google safeguards and utilizes your active data inputs inside their marketing ecosystems, please consult Google's official documentation.

Google Privacy Policy

SECTION 08 / THIRD-PARTY RECIPIENTS

Sharing Personal Information

We strictly control who has access to your data. We do not sell or trade your information. To deliver secure, reliable, and compliant services, we share necessary data with trusted third parties categorized below under restrictive legal and technical safeguards.

Hosting

Encrypted secure cloud servers and reliable database systems where application information rests securely.

Security

Intrusion protection, identity checkers, and threat evaluation services that defend platform and accounts integrity.

Analytics

Aggregated usage insights and software tracking tools used to evaluate, repair, and optimize system speed.

Telephone Providers

Secure telecommunication networks used specifically to transmit automated OTPs and critical phone alerts.

Advisers

External lawyers, general auditors, and professional advisors subject to strict legal confidentiality agreements.

Authorities

Regulators, court officers, and law enforcement agencies only when legally mandated or required to protect public safety.

Enforced Safeguards

Prior to conveying information to any third party, we apply absolute privacy filters and demand strict adherence to our standard protocols:

  • Signed Data Processing Agreements (DPA) containing strict GDPR and regional privacy compliance mandates.
  • Standardised end-to-end encryption protocols in transit (TLS 1.3) and AES-256 protocols at rest.
  • Principle of Least Privilege (PoLP) enforcing that partners access only specifically requested minimal data fields.
SECTION 09 • COMPLIANCE FRAMEWORK

International Data Transfers

To support our global operations and deliver optimized digital solutions, personal data collected within the UK may be transferred to and stored in jurisdictions outside the United Kingdom. We implement strict safeguards to ensure that your data is handled with an equivalent standard of protection in line with UK GDPR requirements.

  • Compliant with UK GDPR Chapter V regulations
  • Standard Contractual Clauses & IDTA executed
  • Adequacy-driven target destinations priority

Transfers Outside the UK

When we transfer personal data outside the UK, it is usually because our primary processors, hosting providers, or regional entities operate in jurisdictions that require outbound processing. We only initiate these transfers when necessary for standard service delivery.

Destinations & Locations

Data transfers primarily occur to EEA countries and the United States. While EEA nations operate under reciprocal adequacy agreements, US-bound transfers are strictly isolated to compliant entities certified under approved data privacy frameworks.

UK Safeguards & Legal Mechanisms

To guarantee privacy parity, we utilize standard contractual clauses, the UK International Data Transfer Agreement (IDTA), and the UK Addendum. We perform rigorous Transfer Impact Assessments (TIAs) to ensure recipients maintain equivalent protection controls.

Section 10

Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Use the interactive schedule to explore specific retention periods across our core communication and system channels.

Request Data Deletion
Website Enquiries
RETENTION PERIOD: 24 MONTHS

Inquiries submitted via our online contact forms are securely stored for up to two years. This allows us to provide consistent, continuous customer service and reference historical communication if you return to request further services.

RETENTION PERIOD: 12 MONTHS

Metadata regarding inbound and outbound business phone calls—including caller identity, timestamp, and duration—is kept strictly for billing verification, telecom routing audits, and staff capacity planning before automatic purge.

RETENTION PERIOD: 90 DAYS

Voice recordings collected during phone consultations are encrypted immediately and kept for quality assurance and training purposes. After 90 days, recordings are permanently and securely overwritten in our cloud system.

RETENTION PERIOD: 26 MONTHS

General website behavioral analytics and user flow logs are stored under pseudonymized identifiers. This allows us to perform multi-year optimization audits and track seasonal performance without directly identifying users.

RETENTION PERIOD: 6 MONTHS

Firewall history, system event tracking, failed authentication logs, and general diagnostic infrastructure logs are maintained to trace active security incidents, mitigate brute-force attempts, and protect database integrity.