Last updated: 4 October 2026
Who we are
The controller is Bsness di Stefano Ventura, Via Amola, 46, 40050 Monte San Pietro (BO), Italy, VAT IT04390251207. Stefano Ventura operates bsness.co.uk and is the author and seller of its software. For privacy questions or requests, email info@bsness.co.uk or write to the address above.
We mainly serve businesses, professionals and people preparing to start a business, particularly in the United Kingdom. This notice also covers individual customers and people acting for business customers.
Information we use and why
We receive the contact, business, billing and account details, orders, reviews and correspondence you provide. A business may give us the details of its purchasing contact. Technical information, including IP addresses and browser information, is also generated when your device connects to the website or a service you use.
- Orders, software access and support: to take steps you request before a contract and perform our contract with an individual customer. For contacts acting for a business, we rely on our legitimate interest in supplying and administering that business’s purchase.
- Enquiries: to respond to your pre-contractual request or our legitimate interest in answering other relevant correspondence.
- Invoicing and accounting: to meet applicable legal obligations, using the billing, tax and transaction information needed for those obligations.
- Site operation and security: our legitimate interests in maintaining a reliable service, preventing misuse and investigating incidents, using relevant connection, session and transaction records.
- Review invitations: your consent through the separate, optional checkout choice. Contact us to withdraw permission for a future invitation. We moderate and display submitted reviews, including their text, rating and displayed name, based on our legitimate interest in providing relevant customer feedback.
- Privacy choices: to remember and apply the choice you request and meet applicable consent-accountability obligations. The receipt archive stores a random identifier, categories, timestamps and the notice version; it does not store your email address, IP address, browser user-agent or order details. Hosting and security logs are separate.
- Website analytics: with your consent, Google Analytics 4 measures website use and shopping events, including product views, basket changes, checkout starts and paid purchases.
- Advertising measurement: with your separate consent, Google Ads measures advertising interactions and purchases to help us assess campaign results.
- Legal claims: applicable legal obligations and our legitimate interest in establishing, exercising or defending claims.
Required checkout information is needed to fulfil your order or meet a legal obligation. Refusing analytics, advertising measurement or a review invitation does not prevent a purchase. We do not send newsletters. WooCommerce generates order confirmations and related service notifications.
Providers and recipients
The shop uses WordPress, WooCommerce and CheckoutWC and is hosted on SiteGround. Providers supporting website hosting, maintenance, delivery of transactional emails, accounting and payments may receive information necessary for those services. Installing software on our server does not by itself mean that its author receives customer data. We may also disclose relevant information to professional advisers and competent authorities where necessary.
Payment methods include cards and supported wallets through Stripe, PayPal and bank transfer. Availability depends on your device and payment eligibility. Payment components loaded during the shopping or checkout journey can receive connection information before a payment is submitted. The payment provider and banks involved process information for payment, authentication, fraud prevention and their own legal obligations. Providers may use automated fraud assessments that affect whether a payment is accepted. Their notices explain their processing and relevant rights: Stripe privacy information and PayPal privacy information. Contact us if a declined payment prevents you from completing an order.
Reviews are managed on our website using Customer Reviews for WooCommerce in self-hosted mode. The external CusRev verification platform is not enabled for this process. Invitations are sent manually through the website’s email system only where the separate invitation permission applies; automatic invitations and email-opening tracking are disabled.
Google Analytics and advertising measurement
Analytics and advertising measurement can be selected independently through Privacy settings. We use basic consent mode: the corresponding Google measurement service is not loaded until you agree to its category. When you withdraw a category, our integration stops further measurement for that category.
Permitted requests may include browser and connection information, Google identifiers, a page category, public product identifiers, quantities, purchase value and currency, and a pseudonymous transaction identifier. Advertising measurement may use an advertising-click identifier to link an interaction to a conversion. Our integration does not send customer names, email addresses, postal addresses, payment credentials or order-access keys in these measurement payloads. Pseudonymous information is not necessarily anonymous: Google receives connection information when a request reaches its systems.
We do not enable enhanced conversions, Google Signals or personalised advertising in this UK integration. Read how Google uses information from partner sites and our Cookie Policy.
Where information is processed
Bsness is established in Italy and receives information there. Providers may process information in other countries through their infrastructure, support teams and subprocessors, including Google and payment-provider operations in the United States. Where a transfer requires safeguards, the applicable route depends on the recipient and destination, such as a relevant adequacy decision or approved contractual safeguards. Provider notices explain their international processing. Contact info@bsness.co.uk for information about the recipients, locations and safeguards relevant to your information or to request a copy of applicable safeguards.
How long information is kept
Retention depends on the purpose and applicable obligations. Routine correspondence is needed while an enquiry or support issue is being resolved and where a specific ongoing matter or claim requires it. Minimum purchase, licence and account records remain necessary while we provide your requested software access, entitlements and support. You can request account closure; a lifetime licence does not justify retaining unrelated information indefinitely.
Invoices and legally required accounting records are normally retained for 10 years from the relevant accounting entry under Italian law, with longer retention where a specific obligation or dispute requires it. Reviews are retained while published and relevant, subject to moderation and removal requests. Review-invitation choices are retained as needed to administer invitations and demonstrate permission or withdrawal.
Privacy-choice receipts: a series of receipts is retained for 365 days from its latest choice, then removed by automatic scheduled cleanup. A later choice in the same series extends retention of earlier receipts in that series. This is separate from the six-calendar-month lifetime of the preference cookie and from order or invoice retention. Merely reading your choice does not renew it.
Analytics: the property is configured to retain event-level data for two months and user-level data for fourteen months, with the user-level retention period reset on new activity. These settings do not impose the same expiry on aggregate reports. Google’s cookie lifetimes are separate and are described in the Cookie Policy. Advertising reports and payment-provider records follow the relevant service’s purposes and retention arrangements.
Security records and backups follow the hosting service’s security and recovery cycles; records relevant to an incident may be kept for its investigation or related claims. Deletion from an active system does not necessarily remove an isolated backup immediately. A restored backup must be reconciled with subsequent deletion and withdrawal requests before normal use.
Your rights and choices
Subject to applicable conditions, you may request access, correction, deletion, restriction or portability of your information and withdraw consent. Withdrawal applies to future processing based on that consent and does not affect the lawfulness of earlier processing. Use Privacy settings for analytics and advertising choices; contact us for review invitations or other requests.
You may object to processing based on legitimate interests. We will consider your circumstances and stop unless an applicable ground permits us to continue. Optional measurement is based on consent, which you can withdraw without giving a reason.
Email info@bsness.co.uk. We may request proportionate information to verify your identity. You may complain to a competent authority, including the UK Information Commissioner’s Office or the Italian Garante, as applicable. You do not have to contact us first.
Changes
We update this notice when our processing changes. A new optional purpose requiring consent will be explained and will remain disabled until you agree to it.