Last Updated: 5 December 2025
BCR Group respects your privacy and is committed to protecting your personal data. This Website Privacy Notice explains how we collect, use, store, and protect personal data when you visit our website, including through cookies, contact or careers enquiry forms, and any other online interactions. It also sets out your rights under the Data Protection (Jersey) Law 2018 ("DPJL").
This notice should be read alongside our main Privacy Notice, which provides a broader explanation of how we handle personal data as part of our legal and business operations. Our website is not intended for children, and we do not knowingly collect personal data relating to them.
BCR Group comprises the following entities registered with the Jersey Financial Services Commission (JFSC) and the Jersey Office of the Information Commissioner (JOIC):
BCR Group Limited acts as the data controller for the purposes of this notice.
Enquiries about how your data is processed may be directed to the Data Protection Officer at BCR Group, 12 Hill Street, St Helier, Jersey, JE2 4UA, by email at dpo@bcrlawllp.com. Alternatively, you may contact our external Data Protection Officer, Paul Byrne of Propelfwd, at dpo@propelfwd.com.
When you visit our website or interact with us online, we may collect information such as your name, email address, and telephone number if you submit an enquiry form or apply for a position. We may also collect professional details including your company name or job title, together with technical information such as your IP address, browser type, device details, and the pages you visit on our site. Usage data helps us understand how visitors interact with our website, and we may also record your preferences regarding marketing and communications.
We do not intentionally collect any special category data through our website.
Your data may be collected directly when you submit a form, subscribe to updates, or communicate with us by email or telephone. It may also be collected automatically through cookies, server logs, and similar technologies that help us monitor and improve website performance. In addition, we may receive information from third parties, including Google Analytics and other providers of website analytics and performance tools.
Further details about our use of cookies can be found in our Cookie Notice, which is accessible through the cookie banner on our website.
We process your personal data only when permitted by the DPJL. The data you provide is used to respond to your enquiries, manage and improve our website, communicate with you about updates or events, maintain website security, and comply with legal or regulatory obligations.
Where processing is based on consent, for example, through the acceptance of non-essential cookies or the receipt of marketing emails, you may withdraw that consent at any time by adjusting your preferences through the cookie banner or by contacting us directly.
Our lawful bases for processing include legitimate interests, contractual necessity, consent, and compliance with legal obligations.
Our website uses cookies and similar technologies to improve your browsing experience, analyse site usage, and personalise content. We use CookieScan to identify, manage, and categorise all cookies active on our website. When you first visit the site, you will be asked whether you wish to accept or reject non-essential cookies. These preferences can be changed at any time.
We also use Google Analytics to understand how visitors use our site and to improve the quality and relevance of our content. Google Analytics collects anonymised data such as page views, device type, and geographic location. This information may be transferred to servers outside Jersey and the European Economic Area (EEA), but it is safeguarded through approved contractual protections.
You can manage your cookie settings at any time using the banner displayed on our website or through your browser controls.
We share data only with trusted third parties who help us operate and maintain our website or provide related technical support. These include Electric Sheep, our website hosting and development provider; Webflow, which hosts our contact and careers forms; Comtech Solutions, which provides the CookieScan and YourDataSafe platforms; and Propelfwd, which provides Data Protection Officer services.
All third parties are contractually required to process your data securely, confidentially, and only for the purposes defined by BCR Group. We do not sell or rent your personal data to any other organisation.
Some of our service providers, such as Webflow and Google, may store or process data outside Jersey or the EEA. Where this occurs, we ensure that appropriate safeguards are in place, such as adequacy decisions or Standard Contractual Clauses approved by the European Commission, together with risk assessments in line with JOIC guidance.
We take data security seriously and apply appropriate technical and organisational measures to prevent unauthorised access, alteration, or loss of data. Access is limited to authorised personnel who require it for legitimate business purposes and who are subject to confidentiality obligations.
If a data breach occurs that is likely to result in a risk to your rights or freedoms, we will notify you and the JOIC as required by law.
We will retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Data submitted through contact or careers enquiry forms will generally be kept for up to six months from receipt, unless a continuing relationship requires further retention. Analytics data is retained in accordance with Google's data retention policies. When information is no longer needed, it will be securely deleted or anonymised.
You have the right to request access to the personal data we hold about you, to request correction or deletion of your data, to object to or restrict its processing, to withdraw consent where applicable, and to request a copy of your data in a portable format.
To exercise these rights, contact us at dpo@bcrlawllp.com or complete this on-line form. We will acknowledge your request within 72 hours and provide a full response within four weeks, unless an extension is necessary in complex cases.
If you are dissatisfied with our response, you have the right to contact JOIC at 2nd Floor, 5 Castle Street, St Helier, Jersey JE2 3BT, by email at enquiries@jerseyoic.org or by telephone on +44 (0)1534 716530. Further information is available on their website at www.jerseyoic.org.
We may update this notice periodically to reflect changes in our operations or in legal requirements. The most recent version will always be available on our website, and where appropriate, we will notify you of any significant changes.