Privacy Policy
Last updated: February 2026
1. Who We Are
This privacy policy explains how Biodiversity Units UK Ltd (company number 15194560, registered at Office, 31 Cattle Market Street, Norwich, Norfolk, NR1 3DY) collects, uses, and protects your personal information when you use our website at www.biodiversityunits.com and our related services.
We are a Biodiversity Net Gain (BNG) unit broker, working with property developers, planning consultants, ecologists, and landowners across England. For the purposes of data protection law, we are the data controller.
If you have any questions about this policy or how we handle your data, please contact us at: info@biodiversityunits.com or call 0203 105 0776.
2. What Information We Collect
We may collect the following types of personal information:
Information you provide directly
• Contact details: name, email address, phone number, company name
• Project information: site details, location/address information, and project requirements submitted via our enquiry and quote request forms
• Email sign-up: your email address when you subscribe to our mailing list or download the BNG Pricing Report
• Correspondence: any information you provide when you contact us by email, phone, or through the website
Information collected automatically
• Website usage data: pages visited, time spent on pages, click patterns, scroll behaviour, and navigation paths (collected via our analytics and user experience monitoring tools)
• Device and browser information: IP address, browser type, operating system, screen resolution, and device type
• Cookies: see Section 7 below for full details on cookies
How We Use Your Information
We use your personal information for the following purposes:
• To respond to your enquiries and provide quotes for BNG units
• To match you with suitable habitat bank suppliers based on your project requirements
• To manage our relationship with you, including sending project updates and relevant correspondence
• To send you our BNG Pricing Report, newsletters, and market updates (where you have opted in)
• To improve our website and services using analytics and user behaviour insights
• To carry out A/B testing to improve the website experience
• To comply with legal obligations
4. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases:
• Legitimate interests: to manage enquiries, provide our brokerage services, and improve our website. We have assessed that these interests do not override your rights and freedoms.
• Consent: where you have opted in to receive marketing communications, such as our mailing list or the BNG Pricing Report. You can withdraw consent at any time.
• Contractual necessity: to perform or take steps towards entering into a contract for our services.
• Legal obligation: where we need to process data to comply with a legal requirement.
5. Who We Share Your Information With
We may share your personal information with the following categories of recipients:
• Habitat bank suppliers: we may share your project details (such as location requirements and unit needs) with habitat bank suppliers in our network in order to source quotes for you. We will only share the information necessary to obtain relevant options for your project.
• Service providers: we use third-party tools to operate our business, including providers of website hosting, website analytics, user experience monitoring, email marketing, and customer relationship management
• Professional advisors: such as accountants or legal advisors where necessary
• Legal or regulatory bodies: where required by law
We do not sell your personal information to third parties.
6. How Long We Keep Your Information
We retain your personal information only for as long as necessary for the purposes set out in this policy:
• Enquiry and project data: for the duration of our business relationship and up to 6 years afterwards (to reflect the limitation period for contractual claims)
• Marketing data: until you unsubscribe or ask us to remove you
• Website analytics data: in accordance with the retention settings of our analytics tools (typically up to 26 months)
7. Cookies
Our website uses cookies and similar technologies. Cookies are small text files placed on your device when you visit our site.
Strictly necessary cookies
These are required for the website to function (e.g. Squarespace session cookies). They do not require your consent.
Analytics cookies
We use analytics tools to understand how visitors use our site. These cookies collect information such as pages visited, time on site, and referral sources. This data is aggregated and anonymised where possible.
User behaviour and testing cookies
We use user experience monitoring and A/B testing tools to record how users interact with our website, including mouse movements, clicks, and scrolling. This helps us identify usability issues and improve the experience. Session recordings may capture form inputs, but sensitive fields are excluded.
Marketing cookies
If you subscribe to our mailing list, our email marketing provider may set cookies to track email engagement (e.g. opens and clicks).
You can manage your cookie preferences through our cookie banner, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
8. Your Rights
Under UK data protection law, you have the following rights:
• Right of access: to request a copy of the personal information we hold about you
• Right to rectification: to ask us to correct inaccurate or incomplete information
• Right to erasure: to ask us to delete your personal information in certain circumstances
• Right to restrict processing: to ask us to limit how we use your data
• Right to data portability: to request your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please email us at info@biodiversityunits.com. We will respond within one month. If you are not satisfied with how we handle your request, you have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.
9. International Data Transfers
Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or the provider being certified under a recognised data protection framework.
10. Security
We take reasonable steps to protect your personal information from unauthorised access, loss, or misuse. This includes using secure hosting, encrypted connections (HTTPS), and limiting access to personal data to authorised personnel only. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
11. Links to Other Websites
Our website may contain links to third-party websites, including those of our habitat bank suppliers and partners. We are not responsible for the privacy practices of these external sites and recommend you review their privacy policies.
12. Children’s Privacy
Our services are aimed at businesses and professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected such data, we will take steps to delete it promptly.
13. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
Biodiversity Units UK Ltd
Unit 5, 113–117 Farringdon Road
London EC1R 3BX
Email: info@biodiversityunits.com
Phone: 0203 105 0776