1. Who we are

BPO Mantra operates a connected business-growth ecosystem covering lead generation, performance marketing, digital marketing, websites and landing pages, email marketing, BPO and outsourcing, technology, AI, advertiser services and publisher/call-centre partnerships.

For privacy purposes, the organisation responsible for your personal information should be identified as:

2. Information we collect

The information we collect depends on how you interact with BPO Mantra.

3. How we use personal information

Depending on the relationship and applicable law, we may use personal information to:

• respond to enquiries, requests and service opportunities;
• provide, manage and improve our websites and services;
• operate advertiser, publisher, call-centre, BPO and technology partnerships;
• evaluate and manage campaign, lead, call and appointment activity;
• communicate about services, proposals, partnerships, campaigns and account matters;
• send marketing communications where permitted and in accordance with applicable consent and opt-out requirements;
• operate CRM, email, analytics, advertising, security and technology systems;
• maintain business records and perform administrative, accounting and contractual activities;
• recruit and evaluate candidates;
• prevent fraud, abuse, security incidents and unlawful activity;
• comply with legal, regulatory and contractual obligations; and
• understand website and campaign performance and improve our customer experience.

4. Legal bases for processing

Where laws such as the UK GDPR or EU GDPR apply, the legal basis for processing depends on the particular activity. Possible bases may include consent, performance of a contract or steps requested before entering a contract, legitimate interests, and compliance with a legal obligation.

We do not intend to rely on one legal basis for every processing activity. The applicable basis should be determined from the actual purpose, relationship, data and jurisdiction involved.

5. When we share information

We may share personal information where appropriate and lawful with:

• technology, hosting, CRM, email, analytics and communications providers;
• advertising, marketing and campaign technology providers;
• business partners, advertisers, publishers or service providers where sharing is necessary for a campaign, enquiry or contracted service and permitted by law;
• professional advisers, auditors, insurers and payment or financial service providers where relevant;
• government bodies, regulators, courts or law-enforcement authorities where required or legally permitted; and
• a buyer, investor or successor in connection with a merger, acquisition, restructuring or transfer of business assets, subject to applicable law.

We aim to share only information that is reasonably necessary for the relevant purpose and to use appropriate contractual or organisational safeguards with service providers.

6. International data transfers

BPO Mantra serves international markets. Depending on our systems, suppliers and business relationships, personal information may be processed in countries other than the country where it was originally collected.

Where applicable law requires safeguards for international transfers, we will use an appropriate transfer mechanism or other lawful safeguard. The exact mechanism depends on the countries involved and the applicable privacy law.

7. Marketing communications

We may use personal information to communicate about BPO Mantra services, partnerships, campaigns, events or relevant business opportunities where permitted by applicable law.

Where consent is required, we will seek it appropriately. Where applicable law permits another basis for marketing, we will follow the relevant requirements and provide the required opportunity to object or unsubscribe.

You can unsubscribe from marketing emails using the unsubscribe mechanism included in the communication or by contacting us. Service, security, transactional or other non-marketing communications may still be sent where necessary.

8. Cookies, analytics and tracking technologies

Our website may use cookies and similar technologies for functions such as website operation, security, preferences, analytics, performance measurement and marketing.

Where consent is legally required for non-essential cookies or similar technologies, the website should provide an appropriate consent mechanism. The actual cookies and technologies used on the live website should be documented in a separate Cookie Policy or cookie notice where appropriate.

9. Data security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Depending on the system, measures may include access controls, authentication, encryption, secure hosting, monitoring, backups and staff/process controls.

No internet transmission or storage system can be guaranteed to be completely secure. You should avoid submitting sensitive information through an ordinary website form unless the form specifically requests it and appropriate safeguards are in place.

10. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain business records, fulfil contractual obligations, resolve disputes, enforce agreements, meet legal or regulatory requirements, or protect our legitimate interests.

Retention periods vary by data type and purpose. Where a fixed period is not appropriate, we may use criteria such as the relationship with the individual, the nature of the information, legal requirements, operational needs and whether a dispute or investigation is ongoing.

11. Your privacy rights

Depending on where you live and which law applies, you may have rights including:

• access to personal information we hold about you;
• correction of inaccurate or incomplete information;
• deletion or erasure in circumstances provided by law;
• restriction of processing in circumstances provided by law;
• objection to certain processing, including certain direct marketing;
• withdrawal of consent where processing relies on consent;
• data portability where applicable; and
• the right to complain to a relevant data protection authority.

Rights are not absolute and may vary by jurisdiction and processing activity. We may need to verify your identity before completing a request.

12. Children’s privacy

Our business services and website are not generally directed at children. We do not knowingly seek to collect personal information from children where doing so would be unlawful. If you believe a child has provided personal information to us improperly, please contact us so the matter can be reviewed.

13. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology, data practices or legal requirements change. We will publish the updated version on this page and update the “Last updated” date. Where applicable law requires additional notice or consent for a material change, we will take the required steps.

14. Contact us

If you have a privacy question, want to exercise an applicable privacy right, or want more information about how your personal information is handled, contact: