Privacy Policy
Last updated: this month.
BCS Notify ("we", "us", "our") operates email delivery infrastructure at bcsnotify.com. This policy describes what information we collect, how we use it, and your rights regarding your personal data.
1. Information we collect
We collect only the minimum data required to deliver email services:
- Email address — provided directly by you or by our client platforms when you subscribe to a mailing list.
- Consent record — timestamp, IP and source of your opt-in confirmation.
- Engagement events — anonymised opens, clicks and bounce data.
- Suppression status — unsubscribe requests, hard bounces and spam complaints.
2. Legal basis
We process personal data under the following legal bases (GDPR Article 6):
- Consent — for marketing emails (double opt-in).
- Legitimate interest — for suppression list maintenance and abuse prevention.
- Contractual necessity — for transactional emails triggered by your account activity.
3. How we use your data
We use your email address exclusively to:
- Deliver messages you have consented to receive.
- Honour unsubscribe requests promptly.
- Maintain a suppression list to prevent unwanted sending.
- Detect and mitigate abuse or fraudulent sign-ups.
4. Data retention
We retain active subscriber records for as long as consent remains valid. Unsubscribe records are retained indefinitely to prevent re-adding suppressed contacts. Bounce and complaint records are retained for 24 months for reputation analysis.
5. Sharing with third parties
We share personal data only with the sending providers required to deliver your email (currently Amazon SES, SendGrid, Mailjet, Alibaba DirectMail and ElasticEmail). Each is bound by a data processing agreement. We do not sell personal information to any party.
6. Your rights
Under the GDPR you have the right to:
- Access the data we hold about you.
- Request correction of inaccurate data.
- Request deletion ("right to be forgotten").
- Withdraw consent at any time via one-click unsubscribe.
- Object to processing or request restriction.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at [email protected]. We respond within 30 days.
7. Security
Data is stored on encrypted infrastructure (AES-256 at rest, TLS 1.2+ in transit). Access is restricted by role and audited continuously.
8. Cookies
Our website (bcsnotify.com) does not set marketing cookies. Only strictly necessary session cookies are used and no third-party tracking is enabled on these pages.
9. Contact
For privacy inquiries: [email protected]
Data controller address: BCS·Notify, Karapet Ulnetsu Street, 1st Deadlock 5, 0069 Yerevan, Armenia.