BHUMI

Privacy Policy

Last updated: 27 February 2026

1. Who we are

Bhumi operates the website bhumi.co.uk (“the Site”). Bhumi is operated by Angus Bennett. When we say “we”, “us”, or “Bhumi” in this policy, we mean the data controller responsible for your personal data.

For any privacy-related questions, contact us at .

2. What data we collect

We collect the following categories of personal data:

Data you provide directly

  • Newsletter signup: your email address, collected when you subscribe to our newsletter.
  • Contact form: your name, email address, enquiry type, and message, collected when you submit the contact form.

Data collected automatically

  • IP addresses and approximate location data.
  • Device and browser information: browser type, operating system, screen resolution, and language preferences.
  • Usage data: pages visited, time spent on pages, referral source, and interactions with site features.
  • Cookie data: identifiers set by analytics and advertising platforms (see our Cookie Policy for full details).

3. How we use your data

  • To send you our newsletter (only if you have subscribed).
  • To respond to enquiries submitted through the contact form.
  • To understand how visitors use the Site, so we can improve our content and user experience.
  • To measure the effectiveness of our marketing efforts across platforms.

4. Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:

  • Consent -- for sending you marketing emails (newsletter). You can withdraw consent at any time by clicking the unsubscribe link in any email or by contacting us.
  • Legitimate interests -- for analytics and site improvement, including the use of analytics and advertising cookies. We have a legitimate interest in understanding how visitors use our Site and measuring the reach of our content. This processing is proportionate and does not override your rights.
  • Legitimate interests -- for responding to contact form submissions you have initiated.

5. Analytics and advertising platforms

We use the following third-party services to analyse site usage and measure the reach of our content. Each platform may set cookies on your device (see our Cookie Policy for specifics):

  • Google Analytics (GA4) -- measures site traffic, user behaviour, and content performance.
  • Meta Pixel (Facebook) -- tracks interactions for audience measurement.
  • LinkedIn Insight Tag -- measures interactions from LinkedIn visitors for audience analytics.
  • TikTok Pixel -- tracks page views and interactions for audience measurement.
  • Pinterest Tag -- measures interactions from Pinterest visitors.

We use server-side Conversions APIs (CAPI) for all five platforms listed above (Google Analytics, Meta, LinkedIn, TikTok, and Pinterest). This means event data is transmitted server-side to these platforms independently of browser-based cookies. Server-side transmission occurs even if you block browser cookies or use an ad blocker.

These platforms are operated by companies based outside the UK. Data transferred to them may be processed in the United States or other jurisdictions. Each platform has its own data processing agreements and safeguards in place.

6. Cookie consent

We use cookies as described in our Cookie Policy. Essential cookies (required for the Site to function) are set automatically. Analytics and advertising cookies are set on the basis of legitimate interests, as described in Section 4 above. You can manage or delete cookies through your browser settings at any time.

7. Where your data is stored

Personal data you submit (email addresses, contact form entries) is stored in a database hosted by Supabase on infrastructure located in Sydney, Australia. This means your data is transferred outside the United Kingdom. Supabase processes personal data under Standard Contractual Clauses approved by the UK Information Commissioner's Office, providing appropriate safeguards for international data transfers.

Newsletter emails are sent via Resend, a transactional email service. Your email address is shared with Resend solely for the purpose of delivering our newsletter. Resend processes data in accordance with its own privacy policy.

8. How long we keep your data

  • Newsletter subscriber data: kept until you unsubscribe. Once you unsubscribe, your email address is deleted from our mailing list within 30 days.
  • Contact form submissions: kept for 2 years from the date of submission, then deleted.
  • Analytics data: retained according to the defaults set by each analytics platform (typically 14 months for Google Analytics). We do not store analytics data separately.

9. Your rights under UK GDPR

You have the following rights in relation to your personal data:

  • Right of access -- request a copy of the personal data we hold about you.
  • Right to rectification -- ask us to correct inaccurate or incomplete data.
  • Right to erasure -- ask us to delete your personal data.
  • Right to restrict processing -- ask us to limit how we use your data.
  • Right to data portability -- request your data in a structured, commonly used format.
  • Right to object -- object to processing based on legitimate interests.
  • Right to withdraw consent -- where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email . We will respond within one month. If your request is complex, we may extend this by a further two months, and we will let you know.

10. Complaints

If you are unhappy with how we have handled your data, you may also contact the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

11. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

12. Children

This Site is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us at and we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. If we make significant changes that affect your rights, we will notify subscribers by email.