BIMP Beta Privacy Policy

Last updated: 4 August 2026

1. Who we are

Pendrica Ltd (“we”, “us” or “our”) operates the bimp.ai website and the BIMP product.

We are the data controller for personal data collected through our website, our communications and the administration of BIMP accounts.

Where BIMP processes personal data contained in a connected repository, we act on behalf of the relevant data controller and use that data only to provide BIMP, in accordance with the BIMP Beta Data Processing Addendum.

For privacy enquiries, contact us at privacy@pendrica.com.

2. What data we collect

Website and communications

When you visit our website, contact us or sign up to receive communications from us, we may collect:

your name, email address and any other contact information you provide;
your communication and marketing preferences;
information contained in messages or enquiries you send us;
information about how you use our website; and
technical information, such as your IP address, browser and device type.

We collect this information from you, your browser or device, and through the cookies and services used on our website and in our communications.

BIMP product

When you create an account or use BIMP, we may collect:

account and contact information, such as your name, email address and profile image;
authentication information received from your chosen login provider;
information about how you use BIMP and the actions you take within the product;
technical and security information, such as your IP address, browser information and login activity;
communications and feedback you provide in connection with BIMP;
information about services and repositories you connect to BIMP;
information made available to BIMP through connected repositories; and
information generated when BIMP analyses connected repositories and provides the service.

We collect this information from you, automatically through your use of BIMP, and from login providers and other services you connect to BIMP.

You must provide the account and authentication information required to create and protect your account. Connecting a repository is optional, but repository-related features cannot operate without access to the relevant repository information.

3. How we use personal data

We may use personal data to:

operate and improve our website;
respond to enquiries;
send service information, product updates, newsletters and marketing communications;
manage communication preferences and unsubscribe requests;
create and manage BIMP accounts;
provide, maintain and improve BIMP;
connect to and analyse repositories selected by users;
communicate with users and provide support;
collect and assess feedback;
monitor performance and diagnose problems;
protect BIMP, our users and connected services;
maintain appropriate business and security records;
comply with legal obligations; and
establish, exercise or defend legal claims.

4. Legal bases

This section applies where Pendrica acts as a data controller. Where we process personal data contained in a connected repository as a data processor, the relevant controller is responsible for determining the lawful basis for that processing.

We process personal data under the following legal bases:

Contract: where processing is necessary to provide BIMP under the BIMP Beta Terms and Conditions or take steps you request before entering into an agreement.
Legitimate interests: where processing is necessary to operate, secure and improve our website and BIMP, respond to enquiries, communicate with users, promote our products or protect our legal rights.
Consent: where you consent to non-essential cookies, email marketing or other optional processing. You can withdraw your consent at any time.
Legal obligation: where processing is necessary to comply with applicable law.

Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your rights require the processing to be limited.

You can unsubscribe from marketing communications at any time by using the unsubscribe link in an email or contacting us.

5. Cookies

We use cookies and similar technologies to operate our website and BIMP.

Some cookies are necessary for the website, account authentication and security. With your consent, we may also use analytics and advertising cookies to understand how our website is used and improve our communications.

Details of the cookies and providers we use are available through Cookie Preferences. You can change your preferences or withdraw consent at any time.

6. Sharing and international transfers

We may share personal data with:

suppliers that help us host, operate, monitor and secure our website and BIMP;
authentication providers and other services you choose to connect to BIMP;
suppliers that help us send communications or understand how our website is used;
professional advisers, auditors and insurers;
regulators, courts or authorities where required by law; and
a buyer or successor if our business or assets are reorganised, sold or transferred.

We require suppliers handling personal data on our behalf to protect it and use it only for the agreed purposes.

Some suppliers may process personal data outside the United Kingdom. Where this happens, we use safeguards recognised under UK data protection law, such as adequacy regulations or approved contractual terms.

We do not sell personal data.

7. Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy.

Website, contact and communication information is retained while it is needed to respond to you or provide communications you have requested. If you unsubscribe, we may keep a limited record of your preference so that we can respect your request.

Account, product and repository information is generally retained while your account remains active or while it is needed to provide BIMP. After your account or access ends, we may retain information for a reasonable period to close the service, respond to enquiries and meet our legal obligations.

Account and product information is generally retained while your account remains active or while it is needed to provide BIMP. Personal data contained in connected repositories is retained and deleted in accordance with the BIMP Beta Data Processing Addendum.

Some information may be retained for longer where necessary for security, legal compliance or the establishment, exercise or defence of legal claims. Information may also remain in protected backups until those backups expire through our normal backup cycle.

8. Your rights

Under UK data protection law, you may have the right to:

access the personal data we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your personal data;
ask us to restrict how we use your personal data;
object to certain uses of your personal data, including direct marketing;
receive certain personal data in a portable format; and
withdraw consent where we rely on consent.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights or raise a concern, contact privacy@pendrica.com.

You also have the right to complain to the Information Commissioner’s Office. Information about making a complaint is available at ico.org.uk.

9. Changes and contact

We may update this Privacy Policy from time to time. We will update the “Last updated” date when we make changes and will take reasonable steps to notify affected users of material changes.

For questions, complaints or requests concerning this Privacy Policy or our use of personal data, contact:

Pendrica Ltd
Email: privacy@pendrica.com