This Privacy Policy explains how Stuart Stafford, trading as BCC Logger ("we", "us", "our"), collects, uses, and protects personal data in connection with the HubSpot BCC Logger Outlook add-in and the website at bcc-addin.co.uk.
We are committed to protecting your privacy and processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Data Controller: Stuart Stafford, trading as BCC Logger
Address: England, United Kingdom
Email: hello@bcc-addin.co.uk
2. What Data We Collect
2.1 Data you provide to us
| Data | When collected | Purpose |
|---|---|---|
| Email address | Subscription sign-up or contact form | To provide access and send service communications |
| First and last name | Contact form | To identify you when responding to your enquiry |
| Message content | Contact form submissions | To respond to your enquiry |
2.2 Data stored by the add-in
The HubSpot BCC Logger add-in stores the following data as Exchange Roaming Settings — small key-value pairs stored in your Microsoft Exchange account by Microsoft, not by us:
- HubSpot BCC email address — the address you configure in the settings pane
- Auto-mode preference — whether BCC is added automatically or manually
These settings are stored and synced entirely by Microsoft Exchange. We have no access to them and they never pass through our servers.
2.3 Data we do NOT collect
The add-in does not read, copy, store, or transmit:
- The content, subject, or body of any email you send or receive
- The identities of your email recipients
- Any data from your HubSpot account
- Any browsing or usage analytics
2.4 Website analytics
We may collect standard server access logs (IP address, browser type, page visited, timestamp) for security and performance purposes. These are not used to identify individuals and are deleted after 30 days.
3. Legal Basis for Processing
We process personal data under the following lawful bases:
- Contract (Article 6(1)(b) UK GDPR) — to provide the service you have signed up for
- Legitimate interests (Article 6(1)(f) UK GDPR) — to respond to enquiries and maintain the security of our service
- Consent (Article 6(1)(a) UK GDPR) — where you have opted in to marketing communications
4. How We Use Your Data
We use the personal data we collect to:
- Provide and manage your subscription access to BCC Logger
- Send you service-related communications (account confirmation, billing, updates)
- Respond to support and contact enquiries
- Improve the product and website
We will never sell your personal data to third parties or use it for purposes other than those described above.
5. Who We Share Data With
We share personal data only with the following third-party processors, under data processing agreements:
| Processor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and subscription management | United States (Standard Contractual Clauses apply) |
| Microsoft (Exchange) | Roaming settings storage (add-in preferences only) | European Economic Area / UK |
We do not share personal data with any other third parties without your explicit consent.
6. Data Retention
We retain personal data for as long as necessary to provide the service:
- Active subscribers: data retained for the duration of the subscription plus 12 months
- Incomplete sign-ups (payment not completed): data deleted after 30 days
- Contact form enquiries: deleted after 24 months
- Server logs: deleted after 30 days
You may request deletion at any time — see Section 8 below.
7. Cookies
The bcc-addin.co.uk website does not currently use tracking cookies or advertising cookies. We use only technical cookies that are strictly necessary for the website to function. No consent banner is required for strictly necessary cookies under UK GDPR.
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your personal data
- Right to restrict processing — request that we limit how we use your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, email us at hello@bcc-addin.co.uk. We will respond within 30 days.
9. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. The bcc-addin.co.uk website is served exclusively over HTTPS. The add-in operates entirely within your Outlook client and transmits no email data to our servers.
10. International Transfers
Where personal data is transferred outside the UK (for example to Stripe in the United States for payment processing), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).
11. Complaints
If you have concerns about how we handle your personal data, please contact us first at hello@bcc-addin.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active subscribers of material changes by email. The current version is always available at bcc-addin.co.uk/privacy.html.
13. Contact Us
For any questions about this Privacy Policy or your personal data:
Stuart Stafford trading as BCC Logger
Email: hello@bcc-addin.co.uk
Website: bcc-addin.co.uk