Legal Information

Privacy Policy

Last updated: August 2026

1. Data Controller

The data controller for the personal data collected through this site is Bernal Trading Partners, based in London, United Kingdom. The controller may be contacted at info@bernaltrading.com.

2. Data Collected

Through this website, the Company may collect personal data provided voluntarily by the user, such as name, email address and any information included in the body of a message. Technical browsing data may also be collected automatically.

3. Purpose of Processing

Personal data is processed for the purpose of responding to enquiries and information requests, managing commercial communication with interested parties and, where appropriate, maintaining a contractual or service relationship. No data is transferred to third parties without consent, except where required by law.

4. Lawful Basis

The lawful basis for processing the data is the data subject's consent when providing it, as well as —where applicable— the performance of a contract or pre-contractual measures requested by the user, and the Company's legitimate interest in conducting its commercial activity.

5. Data Retention

Data will be retained for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the applicable statutory periods. Once these obligations have lapsed, the data will be deleted.

6. Data Subject Rights

The data subject may exercise at any time their rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to info@bernaltrading.com. The data subject also has the right to withdraw their consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.

7. Security Measures

Bernal Trading Partners adopts appropriate technical and organisational measures to ensure the security of personal data and to prevent its alteration, loss, unauthorised processing or access.

8. Applicable Law

The processing of data is carried out in accordance with the data protection legislation applicable in the United Kingdom, including the Data Protection Act 2018 and the General Data Protection Regulation (GDPR).