Privacy Policy

Effective Date: January 1, 2026 | Last Updated: February 2026

1. Data Controller and Entity Information

This website is operated by Operational Desk Systems Ltd. ("we," "us," or "our"), trading as bundlespoppio.courses. Company Registration Number: 14892019. Registered Office: 72 Commercial Way, Facility Suite 4B, London EC2A 4NE, United Kingdom. For questions concerning this privacy policy or our data handling practices, contact our operational privacy lead at [email protected].

2. Personal Data We Collect

We collect personal information directly from users when interacting with our contact interface or requesting key management guidance:

• Contact Details: Full name, business email address, company name, telephone number (if voluntarily submitted).
• Operational Requirements: Property portfolio categories, estimated building counts, and descriptive enquiry summaries submitted through our contact form.
• Technical Interaction Data: Basic browser user-agent header, protocol status codes, timestamp of access, and local device cookie choices stored in client local storage.

We do not collect payment card information, biometric records, or sensitive categories of personal data through this static informational platform.

3. Lawful Basis and Purposes of Processing

We process your personal information strictly under established lawful grounds defined by the UK General Data Protection Regulation (UK GDPR) and EU GDPR:

• Legitimate Interests: To reply to direct business enquiries regarding commercial property key management, to verify contractor and facility access coordination requests, and to maintain site performance.
• Contractual Performance: To take necessary steps at your request prior to entering into any commercial advisory engagement or operational key management arrangement.
• Legal Compliance: To satisfy corporate record-keeping, building safety documentation, or lawful requests from statutory regulatory authorities.

4. Data Retention and Security Measures

Inquiry data submitted through our contact form is retained only as long as necessary to address your operational request and maintain reasonable commercial audit records, generally not exceeding 24 months from the date of final resolution unless an active ongoing service engagement requires formal retention.

We implement proportional technical security controls. Web communications are encrypted using Transport Layer Security (TLS 1.3/HTTPS). Access to incoming inquiries is restricted to designated operations coordinators holding verified role credentials. No transmission across the Internet is completely risk-free, and we do not claim absolute immunity from interception.

5. Third-Party Sharing and Processors

We do not sell, rent, or trade your contact details to third-party advertising networks. Information is disclosed only to verified technical infrastructure providers required to operate this static web service (such as website hosting providers and secure mail gateway handlers) under binding data processing agreements, or where required by applicable law.

6. Your Legal Privacy Rights

Depending on your jurisdiction (including the UK, EEA, and California under CCPA/CPRA), you possess specific legal rights regarding your personal information:

• Right of Access: Request confirmation of whether we hold personal data concerning you and obtain a copy.
• Right to Rectification: Request correction of inaccurate or incomplete contact records.
• Right to Erasure: Request deletion of your personal data where retention is no longer justified by law or legitimate interest.
• Right to Restrict or Object: Object to processing founded upon legitimate interests or request restricted processing under specific circumstances.

To exercise these rights, submit a formal written request to [email protected]. We respond to all verified requests within thirty (30) days without undue fee.