Privacy Policy

1. Introduction

Bezalel Governance & Data Solutions is the trading name of Coeasy Connect Limited ( the “Company”, “we”, “us”, or “our”). We are a specialist Microsoft 365 governance, data protection, and cloud migration consultancy headquartered in the United Kingdom, providing advisory services aligned with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or engage our consultancy services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Coeasy Connect Limited t/a Bezalel Governance & Data Solutions (Company No. 15640773, registered in England & Wales) is the Data Controller responsible for your personal data. Our registered office is:

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

3. Information We Collect

We collect only the personal information necessary to respond to your enquiries, deliver our consultancy services, and meet our legal obligations. This includes:

• Contact information: name, work email address, organisation, and sector, provided when you complete our enquiry form or email us directly.
• Communication records: copies of correspondence, meeting notes, and call records, retained for the duration of our engagement and the statutory period thereafter.
• Technical data: IP address, browser type, and pages visited on this website, collected through standard server logs and analytics tools.
• Engagement data: information shared with us during a consultancy engagement, which may include access to your Microsoft 365 environment under the terms of a separate services agreement.

We do not collect special category personal data (such as health, ethnicity, or religious beliefs) through this website. If such data is inadvertently shared with us during an engagement, we will process it only with explicit consent and delete it as soon as practicable.

4. Lawful Basis for Processing

Under UK GDPR Article 6, we rely on the following lawful bases for processing your personal data:

• Consent (Art. 6(1)(a)), when you submit an enquiry or subscribe to communications from us.
• Contract performance (Art. 6(1)(b)) , to deliver consultancy services under a signed engagement letter.
• Legal obligation (Art. 6(1)(c)) , to comply with tax, accounting, and regulatory requirements (e.g. retention of invoices, professional indemnity records).
• Legitimate interests (Art. 6(1)(f)) , to respond to enquiries, maintain website security, and improve our services, provided these interests are not overridden by your rights.

5. How We Use Your Information

We use the personal information we collect to:

• Respond to your enquiry and provide requested information
• Scope, deliver, and support consultancy engagements
• Send service updates, where you have consented to receive them
• Maintain accurate records for accounting, tax, and regulatory compliance
• Protect the security and integrity of our website and IT systems
• Improve our website, services, and client experience

We do not sell your personal data to third parties under any circumstances.

6. Cookies and Analytics

This website uses a minimal set of cookies to function properly. We do not use cookies for cross-site advertising or behavioural profiling. The cookies we use are:

• Essential cookies, required for the website to function (e.g. remembering your cookie preference).
• Analytics cookies, anonymised statistics about how visitors use the site, used to improve usability. We do not identify individuals through these cookies.

You can manage or disable non-essential cookies through the cookie banner displayed on first visit, or through your browser settings at any time.

7. Data Sharing and Sub-processors

We share personal data only with trusted third parties who provide services on our behalf, under written contracts that meet UK GDPR requirements. These sub-processors include:

• Cloud hosting providers, for website and email hosting (e.g. Microsoft 365).
• Analytics providers, for aggregated, anonymised website statistics.
• Professional advisers, accountants, auditors, and legal advisers, where necessary for compliance or dispute resolution.
• Regulatory authorities, where we are legally required to disclose information.

We do not transfer personal data outside the UK or European Economic Area (EEA) unless appropriate safeguards, such as UK International Data Transfer Agreements or recognised Standard Contractual Clauses, are in place.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy and to comply with legal obligations. Typical retention periods are:

• Enquiry data: 24 months from last contact, unless an engagement follows.
• Engagement records: 7 years from the end of the engagement, in line with professional indemnity insurance requirements.
• Accounting records: 6 years from the end of the financial year, per HMRC requirements.
• Website logs: 13 months.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ( the “right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time
• Right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us at hello@bezalelsolutions.co.uk. We will respond within one calendar month of receiving a valid request.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, multi-factor authentication, and regular security reviews. No method of transmission over the internet is completely secure, but we work to protect your information to the standard expected of a consultancy handling sensitive commercial data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: