Privacy Policy | How BGB-360 Uses Personal Data

How BGB-360 Handles Personal Data

Effective date: 12 August 2026
Last updated: 12 August 2026

In brief. This Policy explains how BGB 360 (Private) Limited collects and uses personal data through the public website at www.bgb-360.com. It does not govern Academy accounts or transactions, which are covered by the policies published on the Academy platform.

1. Who is responsible for your data?

BGB 360 (Private) Limited, trading as BGB-360 – Business Growth & Beyond (“BGB-360”, “we”, “us” or “our”), is responsible for personal data collected through this public website. The company is incorporated in Pakistan under Corporate Unique Identification Number 0309406. European market development is currently led from Norway while a Norwegian NUF branch registration is in process.

2. What personal data do we collect?

Depending on how you use the website, we may collect:

Contact and identity data: name, organization, job title, email address, telephone number and country or location information you provide.
Enquiry and correspondence data: the subject, message, requested service, attachments and subsequent communications.
Technical data: IP address, browser and device information, referring page, requested URL, timestamps, server logs and security events.
Preference data: communication choices and cookie preferences where available.

Please do not send passwords, full payment-card details, government identity documents, health information or other highly sensitive personal data through the public contact form unless we have requested it and provided an appropriate secure method.

3. Why do we use personal data?

We use personal data only where we have a lawful basis. The principal purposes and bases are:

to answer enquiries, arrange discussions and prepare requested proposals or pre-contract information (steps requested before a contract and our legitimate interest in responding);
to establish and manage a client, supplier or professional relationship (contract performance, legal obligations and legitimate interests);
to operate, secure, troubleshoot and improve the website (legitimate interests in reliable and secure services);
to keep records, prevent fraud, establish or defend legal claims and comply with accounting, tax, regulatory or law-enforcement requirements (legal obligations and legitimate interests); and
to send optional marketing communications where consent is required, or where another lawful basis permits them. You may opt out at any time.

Where processing relies on consent, you may withdraw it at any time without affecting processing that occurred before withdrawal.

4. Cookies and similar technologies

The website may use strictly necessary cookies or local storage required for security and functionality. Optional analytics, marketing or preference technologies should be activated only in accordance with applicable consent requirements. If optional cookies are introduced, the website’s consent controls should explain their provider, purpose and duration before they are set.

5. Who receives personal data?

Access is limited to people and service providers who need the information for the purposes described above. Recipients may include authorized BGB-360 personnel, hosting and email providers, website-security and IT support providers, professional advisers, delivery partners involved in a requested service, and public authorities where disclosure is legally required.

Service providers acting on our instructions are expected to protect personal data, use it only for agreed purposes and meet applicable confidentiality and data-protection requirements. We do not sell personal data.

6. International data transfers

BGB-360 operates across Pakistan, Norway, the Gulf and other markets. Personal data may therefore be accessed or processed outside the country where it was collected. Where the GDPR applies and data is transferred outside the European Economic Area, we will use a lawful transfer mechanism where required, such as an adequacy decision, approved contractual safeguards or another permitted derogation, together with appropriate supplementary measures.

7. How long do we keep personal data?

We retain personal data only for as long as reasonably necessary for the stated purpose and applicable legal, accounting, tax, security and claims requirements. Enquiries that do not lead to an engagement are periodically reviewed and deleted or anonymized when no longer needed. Client and transaction records may be retained for the period required by law or the applicable service agreement. Security logs are generally retained for a shorter operational period unless an incident requires longer preservation.

8. How do we protect personal data?

We use proportionate technical and organizational safeguards intended to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. These may include access controls, encrypted transmission, secure hosting, backups, updates, logging and confidentiality obligations. No internet service can guarantee absolute security, so please use the public contact form only for information appropriate to ordinary business email.

9. Your privacy rights

Subject to the law that applies to you, you may have rights to request access to your personal data, correction, deletion, restriction, portability, or an objection to processing based on legitimate interests or direct marketing. You may also withdraw consent and complain to a competent data-protection authority.

For people in Norway, the supervisory authority is Datatilsynet. Other EEA residents may contact the authority in the country where they live or work or where the alleged infringement occurred. We may need to verify your identity before fulfilling a request.

10. Third-party websites and BGB-360 Academy

This website contains links to independent websites and services. Their operators control their own privacy practices, and you should review their notices before submitting information. BGB-360 Academy is live at academy.bgb-360.com; Academy accounts, learning activities and transactions are governed by the privacy information and platform policies published there.

11. Children

The public BGB-360 business website is not directed to children, and we do not knowingly request personal data from children through its contact form. Parents or guardians who believe a child has submitted personal data may contact us to request review and deletion where appropriate.

12. Changes to this Policy

We may update this Policy when our services, technology, providers or legal obligations change. The current version will be published here with a revised “Last updated” date. Material changes may also be communicated through another appropriate channel.

13. Contact and privacy requests

Questions, requests or complaints concerning personal data may be directed to:

BGB 360 (Private) Limited, trading as BGB-360
Corporate Unique Identification Number: 0309406
Pakistan address: 204, River View, Bahria Town Phase 8, Islamabad
Norway correspondence address: Hellebakkane 60, 5215 Lysekloster
Email: corporate@bgb-360.com
Phone: +47 40 548 360
Contact page: www.bgb-360.com/contact-us/

Legal review recommended: This operational draft should be checked against the website’s actual hosting, email, analytics, cookie, CRM and partner arrangements before publication, and reviewed by qualified counsel for the jurisdictions in which BGB-360 operates.