Privacy Policy

Effective date / Last updated: 2026-11-05

1. Controller and scope

WILLAN PRODUCTIONS LTD, 27 Mortimer Street, London, United Kingdom, W1T 3BL, is the controller of personal data used to operate bisarolosolution at bisarolo.com. This notice explains our account, workspace and enquiry processing. It does not imply that this workspace serves advertisements, collects advertising audiences or runs conversion tracking.

2. Information we handle

We handle information you provide when registering, updating your profile, saving campaign plans or contacting us: email address, company and optional contact details, country, address, password credentials and message or plan content. Passwords are stored as password hashes. A session identifier is used to maintain signed-in access. Requests also necessarily transmit technical information such as network address and browser request details to the service infrastructure. Do not include sensitive personal information or audience lists in campaign names or enquiries.

3. Purposes and lawful bases

Our primary framework is the UK GDPR and the Data Protection Act 2018. We use account and workspace details to perform our contract with you, enquiry details to respond to your request, and information necessary for security and service administration on the basis of legitimate interests balanced against your rights. We may process data to meet legal obligations. Where consent is required, including for optional cookies or electronic marketing, we rely on consent; you may withdraw it without affecting earlier lawful processing.

4. Recipients

Access is limited to people who need the information for service administration and handling your enquiry. Where providers are engaged for hosting or other necessary support, information should be shared only for that purpose with suitable contractual protections. We may disclose information where required by law or necessary for lawful claims, and where you direct us to do so. We do not sell personal data. This notice does not assert an active relationship with any media supplier or advertising measurement partner.

5. Cookies and electronic communications

The service uses a necessary session cookie for authentication. Browser storage may also remember cookie preferences. Optional cookies or electronic marketing, if introduced, must comply with the Privacy and Electronic Communications Regulations (PECR), including consent where required, as well as applicable data protection law. Optional technologies must not be enabled without the required choice. You can manage browser cookies and contact privacy@bisarolo.com about preferences. Blocking necessary cookies may prevent sign-in.

6. Security and retention

We use measures designed to protect personal data, including password hashing and account access controls. No storage or transmission method is absolutely secure. We retain information only for as long as needed to operate the service, handle requests, resolve disputes or comply with legal obligations. Data no longer required should be deleted or de-identified. You may request account closure or deletion by contacting us.

7. Your rights and complaints

Subject to the applicable conditions, you may request access, correction, erasure, restriction, portability or object to processing, including direct marketing. Contact privacy@bisarolo.com. We may need proportionate verification of your identity and will respond within the period required by law. You can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint/.

Where other laws apply to particular processing, including the EU GDPR or applicable US state privacy laws such as CCPA/CPRA, we handle requests in accordance with those laws. This conditional statement does not claim that each law applies to all users.

8. International processing

This notice does not state that a cross-border transfer is currently taking place. If a proposed service arrangement involves a restricted transfer outside the UK, it must first meet applicable legal requirements, using an appropriate permitted mechanism such as adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, with assessments and supplementary safeguards where required. If EU GDPR applies, its transfer rules also apply. Contact us for information relevant to your own data.

9. Children and policy updates

The workspace is intended for business use and is not directed to children. We may update this notice to reflect the service and legal requirements and will provide appropriate notice of material changes.

Terms of Service · Advertising Policy · Refunds & Cancellation