Legal
Privacy notice
How we collect, use and protect personal information, in line with Bermuda's Personal Information Protection Act (PIPA) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Who we are
Back Office Bermuda Ltd ("BOB", "we") provides managed back-office services to businesses in Bermuda. For the purposes of PIPA, we act as an organisation using personal information; where we process personal information on a client's behalf and instructions, we act as a service provider to that client.
2. The personal information we collect
Through this website: the details you submit in our consultation form (name, company, contact number, email address, urgency rating and message). Form submissions reach us through our form-delivery providers, HubSpot and FormSubmit, and by email to info@bob.bm. In delivering our services: personal information contained in our clients' business systems (such as customer contact details, correspondence and invoicing records), accessed only as needed to perform the services.
3. How we use it
We use personal information to respond to enquiries, assess fit, deliver and improve our services, meet contractual and legal obligations, and maintain the security of our systems. We do not sell personal information, and we do not use it for third-party advertising.
4. Where it goes
Service delivery is performed by our team in Lisbon, Portugal, which means personal information may be accessed from within the European Union. We put contractual and technical safeguards in place for such transfers, including data processing agreements with clients, confidentiality obligations on all personnel, and least-privilege access controls. Work is performed inside our clients' own systems; we avoid creating separate copies of client data.
5. How we protect it
Safeguards include multi-factor authentication, encrypted devices, a managed password system, background checks on personnel, access revocation on role change or departure, and a documented breach-response process. We carry professional indemnity and cyber insurance.
6. How long we keep it
Enquiry information is retained for as long as needed to handle your enquiry and for a reasonable period thereafter. Information processed on behalf of clients is retained according to the client's instructions and applicable law.
7. Your rights
Under PIPA you may request access to your personal information, ask for corrections, and object to certain uses. If you are in the EU, you may have equivalent rights under GDPR. To exercise any right, contact our privacy officer at info@bob.bm. You also have the right to complain to the Office of the Privacy Commissioner for Bermuda.
8. Cookies and analytics
This website uses the cookies and local storage necessary for it to function. We also use Google Analytics 4, a service provided by Google LLC, to understand how visitors use the site (pages viewed, approximate location, device and browser type) so we can improve it. This information is aggregated and does not identify you by name. You can opt out at any time using Google’s browser add-on at tools.google.com/dlpage/gaoptout or through your browser’s privacy controls.
9. Changes and contact
We may update this notice from time to time; the date above reflects the latest version. Questions belong with our privacy officer: info@bob.bm.