Last updated: 26 August 2025
Halo Deals, Ltd (“we”, “our”, “us”), trading as BOFLO, is committed to protecting your privacy. This notice explains how we process business contact data in line with the UK GDPR and the Data Protection Act 2018.
1. Who we are
Data Controller:
Halo Deals, Ltd (trading as BOFLO)
Registered in England & Wales, Company No. 16045881
Registered address: 128 CITY ROAD, LONDON, EC1V 2NX
Contact email: info@boflo.uk
2. What personal data we collect
For business outreach and client relationship management, we may collect:
- Name
- Business email address
- Job title / role
- Company name
- Business phone (if available)
- Publicly available professional profile information (e.g., LinkedIn)
We do not collect sensitive (“special category”) datafor this purpose.
3. How we collect your data
We obtain contact details from:
- Public business listings and company websites
- Professional networking platforms such as LinkedIn
- Business databases
- Direct interactions with you (e.g., responding to our outreach)
4. Why we process your data
We process business contact details to:
- Identify and contact relevant professionals within real estate and related industries
- Introduce BOFLO’s automation and operational efficiency services
- Manage ongoing communications with prospective and existing clients
5. Our lawful basis
We rely on Legitimate Interests (Article 6(1)(f) UKGDPR).
- It is in our legitimate interest to grow our business by contacting relevant professionals.
- Recipients benefit from learning about services that can improve efficiency.
- Our Legitimate Interests Assessment (LIA) ensures that your rights and freedoms are respected.
You have the right to object at any time to the processing of your personal data for direct marketing.
6. Who we share data with
Your data may be shared with trusted service providers(Processors) who help us deliver outreach, CRM, and communication services, such as:
- Email and calendar providers (Google Workspace, Outlook)
- CRM and automation platforms (Airtable, Make.com, Instantly)
- Communication tools (Slack, Twilio)
All vendors are bound by Data Processing Agreements and, where applicable, Standard Contractual Clauses (SCCs).
We do not sell or trade your personal data.
7. International transfers
Some vendors are based outside the UK/EU (e.g., US).
Where transfers occur, we rely on:
- UK-approved Standard Contractual Clauses (SCCs)
- Vendor security certifications (e.g., ISO 27001, SOC 2)
8. Retention
- Prospect data is kept for up to 12 months from the date of collection if no response is received.
- If you opt out, we maintain a suppression list indefinitely to ensure your request is respected.
9. Your rights
You have the right to:
- Access your personal data (Art. 15)
- Request rectification (Art. 16)
- Request erasure (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing for direct marketing (Art. 21)
To exercise these rights, contact us at: info@boflo.uk
We will respond within 30 days.
10. Complaints
If you are dissatisfied with how we handle your data, youmay lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk
11. Updates to this notice
We may update this Privacy Notice from time to time.
- Date of issue: 26/08/2025
- Next review: 25/08/2026, or sooner if our practices change.
.png)