This notice explains how BDC Method Ltd (“BDC”, “we”) collects and uses personal data, both through this website and through the BDC Workbench, our capability assessment platform. It is written to meet our obligations under the UK General Data Protection Regulation and the Data Protection Act 2018.
1. Who we are
BDC Method Ltd is the data controller for the personal data described in this notice. We are registered in England and Wales, company number 17335759, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
For any question about this notice or about how we handle your data, contact contact@bdc-method.co.uk.
2. Personal data we hold
If you contact us through this website
When you complete the enquiry form we collect your name, organisation, email address and whatever you tell us about your programme. We use it only to respond to your enquiry and to correspond with you about our services.
If you use the BDC Workbench
Where your employer engages BDC, we hold the following about the individuals recorded in the platform:
| Data | Why we hold it |
|---|---|
| Name and work email address | To create and authenticate your account, and to link you to your organisation and your team |
| Job role, grade or band, team, and line manager’s email address | To structure the assessment and determine who may see which records |
| Capability assessment responses, scores and supporting notes | To produce the assessment outputs your organisation has commissioned |
| Account activity, such as the date of last sign-in | To administer and secure the platform |
We do not collect special category data (such as health, ethnicity or religious belief), and the Workbench should not be used to record it.
3. Our lawful basis
- Legitimate interests — for responding to business enquiries, and for operating and securing the platform. Our interest is in running and improving a professional service; we have considered this against your interests and rights.
- Contract — where processing is necessary to deliver the services your organisation has engaged us for.
- Legal obligation — where we must retain records for accounting or regulatory reasons.
Where your employer has engaged BDC and entered your data into the platform, your employer determines the purpose of that assessment. In that respect they act as controller and BDC acts as processor on their instructions, under a separate data processing agreement.
4. Where your data is held
Workbench data is stored in a Postgres database operated by Supabase, hosted in the United Kingdom (London region). Authentication emails are sent via Resend, whose processing takes place in the European Union (Ireland). This website is hosted by Netlify. Where an assessment uses the platform’s AI assistance features, the relevant text is processed by Anthropic; this is used to answer questions about the Method and is not used to train any model.
Where any transfer outside the UK occurs, it is made under the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
5. Who we share it with
We do not sell personal data and we do not share it with other clients. We share it only with the service providers named above, who process it on our instructions, and with your own organisation’s administrators and managers as described in section 2. We may disclose data where required by law.
6. How long we keep it
- Enquiries — up to 24 months from your last contact with us, unless you ask us to delete them sooner.
- Workbench data — for the duration of the engagement with your organisation, and for 12 months thereafter, unless your organisation instructs otherwise. On termination, data is returned or deleted at your organisation’s direction.
7. Your rights
You have the right to ask us for a copy of your data; to have it corrected or erased; to restrict or object to its processing; and to receive it in a portable form. Where we rely on legitimate interests, you may object at any time.
To exercise any of these, email contact@bdc-method.co.uk. We will respond within one month. If your data was entered by your employer, we may need to refer your request to them.
If you are unhappy with how we have handled your data you may complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113. We would ask that you raise it with us first.
8. Cookies and similar technologies
This website does not use tracking or advertising cookies, and does not profile visitors.
The BDC Workbench uses browser storage for functional purposes only: to keep you signed in, and to remember your display preferences such as light or dark mode. These are strictly necessary for the platform to work and are not used for tracking. Some browser privacy settings restrict this storage, which may affect your ability to stay signed in.
9. Security
Accounts are protected by a password you choose. Data is encrypted in transit and at rest by our hosting providers, and each client organisation’s data is separated at the database so that no client can access another’s. Access by BDC is limited to those who need it to deliver the service.
10. Changes to this notice
We will update this notice as the service develops, and will record the date of the current version at the top of this page. Material changes affecting Workbench users will be notified to their organisation’s administrator.