PRIVACY POLICY — BIM HIVES (bimhives.co.uk)
Last updated: [01/02/2026]
1. About this Privacy Policy
This Privacy Policy explains how GxM Consulting Ltd (trading as “BIM Hives”) (“we”, “us”, “our”) collects, uses and protects personal data when you use bimhives.co.uk (“Site”), contact us, purchase our services, or use any related client portal / collaboration environment we provide.
We process personal data in accordance with the UK GDPR and the Data Protection Act 2018. This Policy should be read alongside our Cookie Policy.
If you do not agree with this Policy, please stop using the Site.
2. Controller (who is responsible for your data)
Data Controller: GxM Consulting Ltd (trading as BIM Hives)
Company number: 11029452
Registered address: 86 Dobree Park, Wellington, Somerset, TA21 9RT, United Kingdom
Contact email: info@bimhives.co.uk
Data protection contact: Maciej Grabowiecki
3. What this Policy covers
This Policy applies to personal data collected through:
-
the Site (forms, enquiries, bookings, downloads)
-
communications (email, phone, LinkedIn messages, meetings)
-
any portal/project systems we operate (tasks, files, mark-ups, registers)
-
cookies, analytics, security monitoring and logs
The Site may include links to third-party websites. We do not control those sites and are not responsible for their privacy practices.
4. Your rights (UK GDPR)
You have the right to:
-
be informed and access your data
-
rectify inaccurate data
-
request erasure (where applicable)
-
restrict processing
-
data portability (where applicable)
-
object to processing (including direct marketing, and in some cases “legitimate interests”)
-
not be subject to solely automated decisions with legal/similarly significant effects (where applicable)
You may complain to the Information Commissioner’s Office (ICO) if you are unhappy with our response.
5. What data we collect
Depending on your interaction with us, we may collect:
(a) Identity & contact data
-
name, job title, employer / company name
-
email address, telephone number
-
business address (where relevant)
-
LinkedIn profile details (if you provide them or contact us via LinkedIn)
(b) Enquiry, service and project data
-
enquiry details, scope requirements, meeting notes
-
project information you share (e.g., models, drawings, schedules, mark-ups, registers)
-
communications and support requests
(c) Account and billing data (where applicable)
-
portal login details (stored securely, including hashed credentials)
-
role-based access permissions
-
invoices, billing contacts, payment status
Card payment details: if you pay online, card details are processed by third-party payment providers; we do not store full card details.
(d) Technical, usage and cookie data
-
IP address, browser type/version, device/OS
-
usage analytics (pages visited, clicks, timestamps)
-
referral URLs and exit pages
-
cookies and similar technologies (see Cookie Policy)
6. Lawful bases for processing
We process personal data only where we have a lawful basis, typically:
-
Contract – to deliver services you request (e.g., BIM modelling, Revit training, BIM consulting, portal access)
-
Legitimate interests – to operate and improve our business, respond to enquiries, maintain client relationships, secure our systems, develop and improve workflows (including AI/automation), and prevent abuse/fraud
-
Consent – where required (e.g., non-essential cookies; certain marketing)
-
Legal obligation – accounting, tax, and regulatory compliance
7. How we use your data
We use your data to:
-
respond to enquiries and provide quotations/proposals
-
deliver and administer services and portal access
-
manage projects, tasks, communications and deliverables
-
provide support and improve customer experience
-
maintain business records, invoicing, and accounting
-
secure the Site/portal (logging, monitoring, access control)
-
analyse usage to improve performance and content
-
build and maintain client/prospect lists (CRM) and manage business development
-
send service updates and marketing where permitted (see Section 10)
8. AI, automation, and improvement of our services
We use digital tools (including automation and AI-enabled systems) to improve productivity, quality and consistency of our outputs.
8.1 Internal improvement and training
We may use information you provide (including communications and service interactions) to develop, test, and improve:
-
internal templates, workflows, quality checks, and knowledge systems
-
internal AI/automation features that support our service delivery
Where feasible, we apply data minimisation and may use aggregated and/or de-identified data for analysis and improvement.
8.2 Client project files and confidentiality
If you provide project files (e.g., Revit models, drawings, PDFs, schedules), we treat these as business confidential and handle them under appropriate confidentiality expectations and contractual terms.
We do not sell personal data and we do not permit third parties to use your personal data for their own marketing.
If you require a strict approach (e.g., no AI processing of project content at all), request this in writing before sharing files; we will confirm what is operationally feasible for your project.
9. Who we share data with (processors)
We may share data with trusted suppliers who support our operations, such as:
-
Wix hosting and website tools
-
cookie consent tooling (e.g., Usercentrics for Wix, where enabled)
-
analytics and advertising platforms (e.g., Google Analytics, Google Ads, Meta, LinkedIn) (where enabled and subject to cookie consent where required)
-
CRM/email platforms
-
cloud storage, backups, security and IT providers
-
subcontractors supporting delivery (under confidentiality obligations)
We share only what is necessary and require appropriate data protection terms.
10. Marketing communications
We may contact you about our services by email/phone/LinkedIn where permitted by law. You can opt out at any time:
-
via unsubscribe links (where provided), or
-
by emailing info@bimhives.co.uk
We do not send spam and do not sell marketing lists.
11. International transfers
Some suppliers may process data outside the UK. Where this occurs, we use appropriate safeguards (e.g., UK adequacy decisions and/or contractual transfer protections).
12. Data security
We implement appropriate technical and organisational measures such as access controls, least privilege, and secure storage. No system is risk-free, but we take security seriously.
13. Data retention
We keep personal data only as long as necessary:
-
enquiries / prospects: typically up to 24 months
-
client/project records (including invoices): typically 6–7 years (tax/contract limitation)
-
security logs: typically 30–180 days
-
marketing lists: until you opt out or records are periodically cleaned
14. Your choices and access requests
To request access, correction, deletion, restriction, or objection, email info@bimhives.co.uk. We may request proof of identity.
15. Changes to this Policy
We may update this Policy from time to time. The latest version will be posted on the Site with an updated “Last updated” date.
