Privacy Policy
Last updated: 28 September 2026
Birbal Limited ("Birbal", "we", "us") respects your privacy. This policy explains how we collect and use personal information when you visit birbal.co.uk (the "Website") and when you contact us, request a demo or otherwise deal with us as a business (our "Business Operations").
1. Who this policy applies to
This policy applies to visitors to our Website and to people we deal with in our Business Operations, such as prospective customers, partners and suppliers.
It does not apply to data that our customers process in the Birbal platform (app.birbal.co.uk or a private Birbal deployment). For that data, Birbal acts as a data processor on behalf of our customer, who is the data controller, and it is governed by our agreement with that customer. If you use Birbal through your employer, please refer to your employer's privacy notice.
For the Website and our Business Operations, Birbal is the data controller.
2. Information we collect
Information you give us
- Demo requests: your name, work email, company, industry, department, product interest, use case, and preferred date and time.
- Contact and sales enquiries: your name, work email, company, phone number and your message.
- Correspondence: anything you send us by email or in meetings.
Information collected automatically
- Server logs: when you visit the Website, our servers record technical information such as your IP address, browser type, the page requested and the time of the request. This is used to run and secure the Website.
- Analytics (only with your consent): if you accept analytics cookies, we use Google Analytics and Microsoft Clarity to understand how visitors use the Website, for example which pages are viewed, how far people scroll, which buttons are clicked, whether our videos are watched and how visitors move around a page. Clarity may record anonymised session replays and heatmaps. We do not use these tools to identify you, and we do not send your name, email or form content to them.
Information from others
- We may receive business contact details from event organisers, partners or publicly available professional sources.
3. How we use your information and our legal bases
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Responding to your enquiry, arranging and delivering a demo | Steps at your request before entering into a contract; our legitimate interests in responding to business enquiries |
| Managing our relationship with customers, partners and suppliers | Performance of a contract; legitimate interests |
| Sending you relevant information about Birbal after an enquiry | Legitimate interests (business-to-business). You can opt out at any time |
| Operating, securing and preventing abuse of the Website (including spam filtering of forms) | Legitimate interests |
| Website analytics with Google Analytics and Microsoft Clarity | Your consent, which you can withdraw at any time |
| Complying with our legal obligations | Legal obligation |
We do not sell your personal information, and we do not make decisions about you based solely on automated processing.
4. Cookies and similar technologies
We only use non-essential cookies if you accept them in our cookie banner. You can change your choice at any time using the Cookie settings link at the bottom of every page.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| birbal_consent_v1 | Birbal | Remembers your cookie choice (stored in your browser) | Strictly necessary | Until you clear it |
| _ga | Google Analytics | Distinguishes visitors | Analytics (consent) | 2 years |
| _ga_DM8SE4ZYHB | Google Analytics | Keeps session state | Analytics (consent) | 2 years |
| _clck | Microsoft Clarity | Identifies returning visitors | Analytics (consent) | 1 year |
| _clsk | Microsoft Clarity | Links page views within a session | Analytics (consent) | 1 day |
| MUID | Microsoft | Used by Clarity to identify unique browsers | Analytics (consent) | 1 year |
If you reject analytics cookies, none of the analytics tools above are loaded. You can also block or delete cookies in your browser settings. We do not currently respond to "Do Not Track" browser signals, because we rely on the consent choice you make in our banner instead.
5. How we share your information
We share personal information only with:
- Service providers who process it for us under contract, including our website hosting provider, Google (Google Analytics), Microsoft (Clarity), Automattic (Akismet spam protection for our forms) and our email and business software providers.
- Professional advisers, such as lawyers and accountants, where needed.
- Authorities, where required by law or to protect our rights, users or others.
- A buyer or successor, if Birbal is involved in a merger, acquisition or sale of assets, subject to this policy.
6. International transfers
Some of our service providers, including Google and Microsoft, may process personal information outside the UK, for example in the United States. Where they do, we rely on appropriate safeguards, such as the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Agreement or Addendum, or standard contractual clauses.
7. How long we keep your information
- Enquiries and demo requests: for as long as needed to respond and manage our relationship, and then for up to 24 months after our last contact, unless we need it longer for legal reasons.
- Google Analytics data: up to 14 months.
- Microsoft Clarity: session recordings are kept for up to 30 days, and aggregated heatmap and usage data for up to 13 months.
- Server logs: normally deleted within a few days.
8. Security
We use appropriate technical and organisational measures to protect personal information, including encrypted connections (HTTPS) and restricted access to our systems. No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards regularly.
9. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- ask us to correct or complete it;
- ask us to delete it;
- ask us to restrict or object to how we use it, including objecting to direct marketing at any time;
- receive it in a portable format;
- withdraw your consent at any time, including for analytics cookies via Cookie settings, without affecting processing before withdrawal.
To exercise any of these rights, contact us using the details below. We will respond within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address your concerns first.
10. Links to other websites
The Website may link to other websites. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.
11. Children
The Website and our services are intended for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 18.
12. Changes to this policy
We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date, and where changes are significant we will draw attention to them on the Website.
13. Contact us
Birbal Limited
71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Registered in England and Wales, company number 16742649
Email: info@birbal.co.uk
