BEMRG

Privacy Policy

Last updated: 30 May 2026

1. Who We Are

BEMRG is the data controller for personal data collected through our platform at bemrg.com. If you have questions about how we process your data, please contact us at info@bemrg.com.

2. Data We Collect

We collect the following categories of personal data:

  • Account information: name, email address, and password (hashed) when you register.
  • Payment information: billing details processed by Paddle (our Merchant of Record). We do not store card numbers; Paddle handles PCI-DSS compliance.
  • Usage data: pages visited, tools accessed, login timestamps, and referral activity.
  • Communications: messages you send via our contact form or by email.

3. How We Use Your Data

We use your personal data to:

  • Provide and manage your BEMRG membership.
  • Process payments and manage billing via Paddle.
  • Send transactional emails (receipts, password resets, membership updates).
  • Improve our platform, tools, and resources.
  • Comply with legal obligations.

Our legal bases for processing are: contract performance (providing your membership), legitimate interests (platform security and improvement), and legal obligation (tax and compliance records).

4. Third-Party Processors

We share data with the following sub-processors:

  • Supabase — database hosting and authentication. Data stored in the EU.
  • Paddle — payment processing and subscription management. Acts as Merchant of Record; see Paddle’s Privacy Policy.
  • Resend — transactional email delivery.

All processors are contractually bound to process data only on our instructions and in accordance with applicable data protection law.

5. Cookies

We use strictly necessary cookies to maintain your session when you are logged in to the member portal. We do not use advertising or third-party tracking cookies. No cookie consent banner is required for strictly necessary cookies under UK GDPR guidance.

6. Data Retention

We retain your account data for as long as your membership is active and for a further 7 years to comply with UK financial record-keeping requirements. You may request deletion of your data at any time; see Section 7.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data (“right to be forgotten”), subject to legal retention obligations.
  • Restrict or object to certain processing activities.
  • Data portability — receive your data in a machine-readable format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at info@bemrg.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to members by email. The date at the top of this page indicates when the policy was last revised.

9. Contact

For privacy enquiries: info@bemrg.com