Terms of Business
Please note that a copy of these Terms of Business will be provided to you before any work is commenced. By completing the final declaration and tick box on the registration form, you confirm that you have read, understood and agree to these Terms of Business.
For the purposes of these Terms:
“Bumblebee Paraplanning” or “Bumblebee” means Bumblebee Paraplanning.
“Client” means the mortgage adviser, broker, appointed representative, directly authorised firm or other business instructing Bumblebee Paraplanning.
“Customer” or “Applicant” means the Client’s customer whose mortgage, protection, insurance or related case Bumblebee Paraplanning is assisting with.
GENERAL
• Our standard hourly rate is £25 per hour, unless otherwise agreed in advance.
• Case-based fees are detailed on our Case & Client Services page.
• Like-for-like Product Transfers (PTs) are charged at a 20% discount from the applicable standard case fee.
• Cases assessed as complex are charged at a 20% increase from the applicable standard case fee. Where possible, we will confirm that a case is being treated as complex before the additional charge is incurred.
• Clients expecting to submit 10 or more cases per month are invited to contact us to discuss available loyalty pricing.
• Additional services can be added to a package through the relevant case submission form. Any additional charges will be made clear before the additional work is undertaken.
• Fees and services shown on the website may be updated from time to time. Any changes affecting existing Clients will be communicated in accordance with these Terms of Business.
BOOKING AND SERVICE TERMS
• A registration form and initial consultation will need to be completed before Bumblebee Paraplanning begins accepting work from a new Client.
• Cases should be submitted using the agreed submission process and must contain sufficient information and documentation for Bumblebee Paraplanning to carry out the requested work.
• Documents and information may be sent and received through our website, email or an agreed secure cloud-sharing method.
• Where a Customer or Applicant sends documentation directly to Bumblebee Paraplanning, this will be made available to the Client using the agreed method for that Client’s cases.
• Depending on the services selected and the Client’s instructions, Bumblebee Paraplanning may communicate directly with Customers or Applicants, lenders, providers, solicitors, conveyancers and other relevant third parties for the purposes of obtaining information, progressing applications, providing factual updates and completing agreed administration or paraplanning services.
• Where Bumblebee Paraplanning communicates directly with a Customer or Applicant, it does so as an outsourced support service for the Client and in accordance with the Client’s instructions, agreed processes and applicable regulatory or network requirements.
• The Client remains responsible for the regulated advice provided to its Customers, including the suitability of any mortgage, protection or insurance recommendation, and for the regulatory oversight and approval of the case.
• Bumblebee Paraplanning does not independently provide regulated mortgage, protection or insurance advice or make personal recommendations directly to Customers in its own capacity.
• The Client must not instruct Bumblebee Paraplanning to undertake any activity outside the agreed scope of service or any activity which the Client knows would require Bumblebee Paraplanning to hold a regulatory permission that it does not hold.
• The Client is responsible for ensuring that its use of Bumblebee Paraplanning, including any direct Customer contact requested from us, is permitted by its own regulatory permissions, Principal, network, compliance department and/or internal outsourcing requirements where applicable.
• Bumblebee Paraplanning will use reasonable care to complete work within the agreed or expected timescales. However, we cannot be held responsible for delays outside our reasonable control, including delays caused by Customers, Clients, lenders, providers, solicitors, conveyancers, valuers or other third parties.
• Bumblebee Paraplanning reserves the right to decline, suspend or cease any work which we reasonably believe is unethical, unlawful, misleading, outside our agreed scope of service or skill set, or could place Bumblebee Paraplanning in breach of its legal, data-protection or other obligations.
• Bumblebee Paraplanning reserves the right to amend its fees or service structure by providing existing Clients with at least one month’s written notice of any change that will affect them. Changes will not retrospectively alter fees already agreed for work undertaken before the change takes effect.
PAYMENT TERMS
• Fees will be agreed with the Client before work is undertaken. Fees may be charged on a case basis, according to the services selected and complexity of the case, or at the agreed hourly rate.
• Current standard fees are published on our website. Where a fee differs from the standard published fee, this will be agreed with the Client before the relevant work is undertaken.
• Invoices are issued monthly at the beginning of each month and will normally cover work completed or chargeable during the previous month.
• Invoices must be paid by the due date shown on the invoice.
• Where a business-to-business invoice becomes overdue, Bumblebee Paraplanning reserves the right to charge statutory interest and any applicable fixed-sum compensation and reasonable debt-recovery costs in accordance with the legislation applying to late commercial payments.
• Where an invoice remains outstanding, Bumblebee Paraplanning may suspend further work or decline to accept additional cases until the account has been brought up to date.
• Where reasonable attempts to recover an overdue payment have been unsuccessful, Bumblebee Paraplanning reserves the right to refer the outstanding balance for formal debt recovery or legal action. The Client may also be liable for recoverable costs associated with that action where permitted by law.
• Any query or dispute relating to an invoice should be raised with Bumblebee Paraplanning as soon as reasonably possible after receipt of the invoice.
CONFIDENTIALITY AND DATA PROTECTION
• Bumblebee Paraplanning will treat all confidential information received from a Client or relating to a Client’s Customers with the strictest confidence.
• Bumblebee Paraplanning will not knowingly disclose or communicate confidential information to any third party except where this is necessary to carry out the services instructed by the Client, where the Client has authorised the disclosure, where disclosure is required by law or a competent authority, or as otherwise permitted under the applicable data-protection arrangements.
• Confidential information will not be used by Bumblebee Paraplanning for any purpose unrelated to the provision of its services.
• Confidentiality obligations will continue after the completion or termination of an individual case or the business relationship with the Client.
• Where Bumblebee Paraplanning processes personal information relating to a Client’s Customers on the Client’s behalf, Bumblebee Paraplanning will normally act as a data processor, with the Client or relevant regulated firm remaining responsible for determining the purposes for which that Customer information is processed.
• Bumblebee Paraplanning may act as a data controller for personal information processed for its own legitimate business purposes, including information relating to its own Clients, contacts, invoicing, accounting, business administration and legal obligations.
• Bumblebee Paraplanning may process confidential financial information and, where relevant to the work instructed, special-category or otherwise sensitive personal information supplied by the Client or Customer, including information relating to health, vulnerability or other personal circumstances.
• Personal data will only be processed for the purposes required to provide the agreed services or meet Bumblebee Paraplanning’s applicable legal obligations.
• Customer documentation received directly by Bumblebee Paraplanning will be shared with the relevant Client using the agreed secure method.
• Personal information and documentation processed on behalf of a Client will be retained, returned or securely deleted in accordance with the applicable data-processing agreement, the Client’s documented instructions, Bumblebee Paraplanning’s retention procedures and any legal requirements applying to the information.
• Bumblebee Paraplanning will maintain appropriate technical and organisational measures designed to protect personal and confidential information from unauthorised access, loss, alteration or disclosure.
• The Client is responsible for ensuring it has an appropriate lawful basis for providing Customer personal data to Bumblebee Paraplanning and for ensuring that its Customers receive the appropriate privacy information regarding the use of outsourced service providers.
• Where required, Bumblebee Paraplanning will enter into an appropriate confidentiality agreement, non-disclosure agreement and/or data-processing agreement with the Client.
• Bumblebee Paraplanning is registered with the Information Commissioner’s Office (ICO) under registration number ZC011236 and processes personal information in accordance with applicable UK data-protection legislation, including the UK GDPR and Data Protection Act 2018.
LIABILITY AND RESPONSIBILITY
• Bumblebee Paraplanning will exercise reasonable care and skill when carrying out the services agreed with the Client.
• The Client is responsible for providing Bumblebee Paraplanning with complete, accurate and legible information and documentation required to complete the requested work.
• Bumblebee Paraplanning cannot accept responsibility for errors, delays or losses arising from inaccurate, incomplete, outdated or misleading information supplied by the Client, Customer or another third party.
• The Client remains responsible for reviewing and approving any work where regulatory, compliance or adviser approval is required before it is issued, submitted or relied upon.
• Bumblebee Paraplanning will correct, at no additional charge, any material error in its work which has been caused directly by Bumblebee Paraplanning, provided the error is brought to our attention within a reasonable period.
• Bumblebee Paraplanning cannot accept responsibility for interruptions, loss or damage arising from circumstances outside its reasonable control, including failure of third-party systems, lenders, providers, portals, email services or cloud-storage providers.
• Bumblebee Paraplanning uses appropriate security and anti-malware measures for its systems. However, the Client remains responsible for maintaining appropriate security, anti-virus protection and access controls on its own systems and devices.
• Bumblebee Paraplanning reserves the right not to open, download or process unsolicited, suspicious or potentially harmful files, attachments, links or communications.
• Nothing within these Terms of Business excludes or limits any liability which cannot legally be excluded or limited.
Bumblebee Paraplanning – Terms of Business Updated 10/08/2026
PRIVACY NOTICE
This Privacy Notice explains how Bumblebee Paraplanning collects, uses, stores and protects personal information.
It applies to visitors to our website, our business Clients and contacts, and, where relevant, Customers or Applicants whose personal information we process while providing outsourced mortgage, protection, insurance, paraplanning, administration and client-support services.
Our website and services are primarily intended for business users and adult Customers. We do not knowingly collect personal information directly from children through our website. However, we may process limited information relating to children or dependants where this is relevant to a mortgage, protection or insurance case and has been provided to us by the Client or Customer.
1. WHO WE ARE AND OUR DATA PROTECTION ROLE
Bumblebee Paraplanning is operated by Leah Thomas.
Contact details: Bumblebee Paraplanning
Business address: Unit 159650, PO Box 7169, Poole BH15 9EL
Email: leah@beeplan.co.uk
ICO registration number: ZC011236
Our role under data protection law depends on the circumstances in which we are processing personal information.
Where Bumblebee Paraplanning determines how and why personal information is used for its own business purposes, Bumblebee Paraplanning acts as the data controller.
This includes information relating to our own Clients, enquiries, contacts, invoicing, accounting, website administration and business management.
Where we process personal information relating to a Client’s Customer or Applicant solely for the purpose of providing services on the Client’s instructions, Bumblebee Paraplanning will normally act as a data processor.
In these circumstances, the mortgage adviser, broker, regulated firm or other organisation instructing us will normally remain the data controller and will be responsible for determining how and why the Customer’s personal information is processed.
If you are a Customer or Applicant and have questions about how your information is being used in connection with your mortgage, protection or insurance case, you may also wish to contact the adviser or regulated firm responsible for your case.
It is important that the personal information we hold is accurate and up to date. Please let us know if any information you have provided to us changes.
2. WHAT PERSONAL INFORMATION WE MAY PROCESS
The personal information we process will depend on your relationship with Bumblebee Paraplanning and the services we have been instructed to provide.
We may process the following types of information:
Identity Data
This may include your name, title, date of birth, marital status and other information used to identify you.
Contact Data
This may include your address, email address, telephone number and other contact details.
Business and Client Data
This may include your business name, job title, regulatory or network information, contact details, service preferences, case submissions and information relating to our working relationship with you.
Customer and Applicant Data
Where we are assisting with a mortgage, protection or insurance case, this may include information relating to:
• Personal circumstances
• Address history
• Employment and occupation
• Income and expenditure
• Assets and liabilities
• Credit commitments and credit history
• Property and mortgage details
• Bank statements and financial information
• Identification documents
• Mortgage, protection or insurance requirements
• Lender or provider applications
• Existing financial products
• Dependants and household information
• Case notes, correspondence and supporting documentation
Financial and Transaction Data
This may include payment information, invoices, account details and records of payments made to or received from Bumblebee Paraplanning.
Special Category Data
Where relevant to the services we have been instructed to provide, we may process special category personal information.
This can include information relating to:
• Health or medical conditions
• Disabilities
• Vulnerability
• Racial or ethnic origin
• Religious or philosophical beliefs
• Sexual orientation or other information protected as special category data
This type of information will only be processed where it is relevant and necessary for the work we have been instructed to complete.
Criminal Offence Data
In some cases, information relating to criminal convictions, offences, allegations or related matters may be relevant to a mortgage, protection or insurance application.
Where this information is provided to us, it will only be processed where necessary and in accordance with applicable data protection requirements.
Technical and Usage Data
When you use our website, we may collect technical information such as your IP address, browser type, device information and information about how you use the website.
Marketing and Communications Data
This may include your preferences regarding communications from us and records of any marketing communications sent to you.
3. HOW AND WHY WE USE PERSONAL INFORMATION
We will only process personal information where we have a lawful reason for doing so.
Depending on the circumstances, we may use personal information:
• To respond to enquiries and communicate with prospective Clients.
• To register and onboard new Clients.
• To provide the services a Client has requested.
• To carry out mortgage, protection, insurance, paraplanning, administration and client-support work on behalf of a Client.
• To communicate with Customers and Applicants where instructed to do so by the Client.
• To obtain information and documentation required to progress a case.
• To communicate with lenders, providers, solicitors, conveyancers and other relevant third parties where required to progress a case.
• To manage our contractual relationship with Clients.
• To issue invoices and manage payments.
• To maintain appropriate business, accounting and tax records.
• To maintain and protect our website, systems and business.
• To prevent fraud, misuse and security incidents.
• To comply with legal, regulatory or other applicable obligations.
• To establish, exercise or defend legal rights where necessary.
• To send business communications and marketing where permitted by law.
Our lawful bases may include:
Contract
Where processing is necessary to enter into or perform a contract with you.
Legitimate Interests
Where processing is reasonably necessary for our legitimate business interests or those of another organisation, provided those interests do not override your rights and interests.
Legal Obligation
Where we need to process information to comply with a legal obligation.
Consent
Where consent is the appropriate lawful basis, including for certain marketing activities where consent is required.
Where we process personal information solely as a data processor for a Client, we process that information on the Client’s documented instructions. The Client, as data controller, is responsible for establishing the appropriate lawful basis for that processing.
Where special category or criminal offence information is processed, the appropriate additional conditions required under data protection law must also apply.
4. HOW WE COLLECT PERSONAL INFORMATION
We may receive personal information:
• Directly from you when you contact us, complete a form, send an email, submit a case or provide documentation.
• From the mortgage adviser, broker, regulated firm or other Client instructing us.
• Directly from a Customer or Applicant where they have been asked to provide information or documentation to us.
• From lenders, mortgage providers, insurance providers, protection providers, solicitors, conveyancers or other organisations involved in a case where appropriate.
• Automatically through our website and the use of cookies or similar technologies.
Where we receive personal information about a Customer from a Client, we will process that information in accordance with the Client’s instructions and the applicable data-processing arrangements.
5. MARKETING COMMUNICATIONS
We may use contact information to send relevant information about Bumblebee Paraplanning and our services where this is permitted by law.
Depending on the circumstances, we may rely on consent or our legitimate interests when processing personal information for marketing purposes.
Different rules may apply depending on whether the recipient is an individual, sole trader, partnership or corporate organisation.
Where consent is required, we will obtain the appropriate consent before sending marketing communications.
You can ask us to stop sending marketing communications at any time by contacting: leah@beeplan.co.uk
Where you opt out of marketing communications, we may retain limited information on a suppression list to ensure that your preference continues to be respected.
6. WHO WE MAY SHARE PERSONAL INFORMATION WITH
We will only share personal information where this is necessary and appropriate.
Depending on the services being provided, information may be shared with:
• The Client or regulated firm responsible for the case.
• Mortgage lenders and other finance providers.
• Protection and insurance providers.
• Solicitors and conveyancers.
• Valuers and other parties involved in a mortgage transaction.
• Technology, website, email, cloud-storage and other service providers that support our business.
• Accountants, legal advisers and other professional advisers.
• Debt-recovery providers where necessary.
• HM Revenue & Customs, regulators, law-enforcement agencies or other authorities where disclosure is required or permitted by law.
Where a third party processes personal information on our behalf, appropriate contractual and data-protection arrangements will be used where required.
7. INTERNATIONAL TRANSFERS
Some of the technology and service providers used by Bumblebee Paraplanning may process or make personal information accessible from locations outside the United Kingdom.
Where personal information is subject to a restricted international transfer, we will take appropriate steps to ensure that the transfer is lawful and that appropriate protection is in place.
Depending on the circumstances, this may include reliance on UK adequacy regulations, recognised contractual safeguards or another permitted transfer mechanism under UK data protection law.
8. DATA SECURITY
We take the security of personal information seriously and use appropriate technical and organisational measures designed to protect information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.
Access to personal information is limited to those who have a genuine business need to access it.
Where third-party systems or service providers are used, we take reasonable steps to ensure appropriate data-protection and security arrangements are in place.
If a personal data breach occurs, we will take appropriate action in accordance with applicable data-protection requirements.
9. DATA RETENTION
We will not retain personal information for longer than is reasonably necessary for the purpose for which it was collected.
The appropriate retention period will depend on the type of information and the purpose for which it is being processed.
Where we process Customer or Applicant information on behalf of a Client, information will be retained, returned or securely deleted in accordance with the Client’s documented instructions, the applicable data-processing agreement and any legal requirements.
Business, contractual, invoicing and accounting records may be retained for the period required to meet legal, tax, accounting, contractual or dispute-resolution requirements.
Marketing information will be retained for as long as it remains relevant or until you opt out, subject to retaining limited suppression information where necessary to respect your preference.
10. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances and the lawful basis being relied upon, you may have rights including:
• The right to be informed about how your personal information is used.
• The right to request access to the personal information held about you.
• The right to ask for inaccurate or incomplete information to be corrected.
• The right to request deletion of your personal information in certain circumstances.
• The right to request that processing is restricted in certain circumstances.
• The right to object to certain types of processing.
• The right to request transfer of your personal information in certain circumstances.
• The right to withdraw consent where processing is based on consent.
• Rights relating to certain forms of automated decision-making and profiling where applicable.
These rights do not apply in exactly the same way in every situation and some rights are subject to legal exemptions.
If Bumblebee Paraplanning is acting as the data controller for the information concerned, you can exercise your rights by contacting:
Where Bumblebee Paraplanning is processing your information as a data processor on behalf of a Client or regulated firm, the relevant Client will normally be responsible for dealing with your request.
If you send a data-protection request to us in relation to information we process on behalf of a Client, we will assist the relevant Client in dealing with the request as appropriate.
11. COMPLAINTS
If you have any concerns about how Bumblebee Paraplanning has used your personal information, please contact us in the first instance so that we can investigate your concerns.
Email: leah@beeplan.co.uk
You also have the right to make a complaint to the Information Commissioner’s Office, which is the UK supervisory authority for data protection.
12. THIRD-PARTY LINKS
Our website may contain links to third-party websites, plug-ins or applications.
We do not control third-party websites and are not responsible for their privacy notices or how they process personal information.
We recommend that you read the privacy notice of any third-party website you visit.
13. COOKIES
Our website may use cookies and similar technologies to operate correctly, understand how visitors use the website and improve the website experience.
Some cookies may be essential for the operation of the website, while others may require your consent.
You can control cookies through the options provided on our website and through your browser settings.
For further information, please see our Cookie Policy.
14. CHANGES TO THIS PRIVACY NOTICE
We may update this Privacy Notice from time to time to reflect changes to our services, systems, legal requirements or the way in which we process personal information.
The current version will be published on our website together with the date it was last updated.
Last updated: 10 August 2026
Data Protection
Bumblebee Paraplanning is not directly authorised by the Financial Conduct Authority (FCA).
We provide outsourced paraplanning, administration and client-support services to mortgage advisers and regulated firms.
Depending on the services agreed, this may include back-office support as well as direct communication with Customers, lenders, providers, solicitors and other parties involved in a case.
Where we provide services on behalf of a regulated firm, the regulated firm remains responsible for its regulatory obligations, including the advice and recommendations provided to its Customers and the appropriate oversight of any outsourced activities.
Bumblebee Paraplanning will carry out work within the agreed scope of service, in accordance with the Client’s instructions and any applicable procedures or requirements notified to us.
Because regulated firms rely on us to process confidential Customer information, maintaining appropriate standards of data protection, confidentiality and security is an important part of our service.
UK GDPR AND DATA PROTECTION ACT 2018
Bumblebee Paraplanning processes personal information in accordance with applicable UK data-protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The UK GDPR places obligations on both organisations that determine how and why personal information is processed, known as data controllers, and organisations that process personal information on their behalf, known as data processors.
Where a regulated firm instructs Bumblebee Paraplanning to process Customer information solely for the purpose of providing agreed outsourced services, the regulated firm will normally act as the data controller and Bumblebee Paraplanning will normally act as its data processor.
Whether an organisation is a controller or processor depends on the circumstances and the specific processing activity being undertaken.
Where Bumblebee Paraplanning acts as a data processor, we process Customer information only in accordance with the Client’s documented instructions, unless we are required by law to do otherwise.
Bumblebee Paraplanning may separately act as a data controller for information processed for our own legitimate business purposes, such as Client registration details, business correspondence, invoicing, accounting and legal or administrative records.
Appropriate contractual arrangements will be maintained between Bumblebee Paraplanning and the Client where required under data-protection legislation.
WHERE DOES BUMBLEBEE PARAPLANNING ACCESS AND HOLD DATA?
During the course of an engagement, Bumblebee Paraplanning may access and process personal information supplied or made available by the regulated firm.
The systems used will depend on the Client, the services selected and the way in which the Client wishes us to work.
This may include access through:
• The Client’s CRM or back-office system
• Secure cloud-based document storage
• Lender or provider portals
• Protection or insurance provider systems
• Secure document-sharing systems
• An email account or mailbox provided by the Client
• The Client’s server, hosted desktop or remote working environment
• Bumblebee Paraplanning’s approved business systems
Where Bumblebee Paraplanning accesses a system controlled by the regulated firm, the regulated firm remains responsible for controlling access permissions and determining whether that system is appropriate for its business.
Bumblebee Paraplanning will only access Client systems where authorised to do so and will use reasonable security measures to protect the information accessed.
In the normal course of business, information may also be received into Bumblebee Paraplanning’s own business systems, including email, secure cloud storage, website forms and document-sharing facilities.
Access to Bumblebee Paraplanning systems is restricted to authorised users and protected using appropriate access controls and security measures.
Information relating to different Clients will be handled in a manner designed to maintain confidentiality and prevent unauthorised access.
CUSTOMER INFORMATION RECEIVED DIRECTLY
Where agreed with the regulated firm, Customers may provide information or documentation directly to Bumblebee Paraplanning.
This may include identification documents, payslips, bank statements, mortgage documents, property information, financial information or other documentation required for their case.
Information received directly from a Customer will be processed on behalf of the relevant Client and made available to that Client through the agreed secure method.
Bumblebee Paraplanning will not independently use Customer information for purposes unrelated to the services it has been instructed to provide.
USE OF THIRD-PARTY SYSTEMS AND SERVICE PROVIDERS
Bumblebee Paraplanning uses carefully selected technology and service providers to operate its business and deliver services to Clients.
These may include services such as Microsoft 365, OneDrive, Squarespace and other secure technology, communication, document-storage or business-management systems.
Some third-party providers may act as sub-processors where they process Customer information in connection with services provided by Bumblebee Paraplanning.
Where Bumblebee Paraplanning is acting as a data processor, sub-processors will only be used in accordance with applicable data-protection requirements and the contractual arrangements agreed with the Client.
We take reasonable steps to ensure that third-party providers handling personal information have appropriate data-protection and security arrangements in place.
INTERNATIONAL DATA TRANSFERS
Some technology and cloud-service providers may store, process or permit access to personal information from locations outside the United Kingdom.
Where Bumblebee Paraplanning makes or authorises a restricted international transfer of personal information, appropriate safeguards will be used as required by UK data-protection legislation.
Where Bumblebee Paraplanning is acting as a data processor, international transfers will only be made in accordance with the Client’s documented instructions and applicable contractual arrangements.
Depending on the circumstances, appropriate safeguards may include UK adequacy regulations, approved contractual protections or another lawful international-transfer mechanism.
Further information regarding the systems and providers used by Bumblebee Paraplanning can be provided to Clients as part of their due-diligence process.
DATA RETENTION AND END OF ENGAGEMENT
Bumblebee Paraplanning will retain personal information only for as long as reasonably necessary for the purpose for which it is being processed or where retention is required for legal, accounting or other legitimate purposes.
Where Bumblebee Paraplanning acts as a data processor, Customer information will be returned, retained or securely deleted in accordance with:
• The Client’s documented instructions
• The applicable Data Processing Agreement
• Any agreed retention schedule
• Applicable legal requirements
When a Client stops using our services, we will work with the Client to ensure that Customer information held specifically on their behalf is returned or securely deleted as appropriate.
We will not retain Customer information indefinitely simply because we previously worked on the case.
WHO DOES BUMBLEBEE PARAPLANNING SHARE DATA WITH?
Bumblebee Paraplanning will not disclose Customer information unnecessarily.
Where we are acting on behalf of a regulated firm, information may be shared where this is necessary to provide the instructed service.
Depending on the case, this may include sharing information with:
• The regulated firm or adviser responsible for the Customer
• Mortgage lenders
• Protection or insurance providers
• Solicitors and conveyancers
• Valuers
• Other third parties involved in progressing the Customer’s application
• Approved technology or service providers acting on our behalf
Information will only be shared where there is an appropriate business, contractual or legal reason for doing so.
Where Bumblebee Paraplanning is acting as a data processor, information will normally be shared in accordance with the Client’s instructions.
SECURE TRANSMISSION OF DATA
Bumblebee Paraplanning takes appropriate steps to protect confidential and personal information during transmission and storage.
Depending on the circumstances, we may use Microsoft 365, OneDrive, secure email, secure website forms, encrypted services or other approved systems to send, receive and store confidential information.
Our systems and devices use appropriate security controls, which may include:
• Multi-factor authentication
• Password protection
• Device encryption
• Access restrictions
• Security monitoring
• Anti-malware protection
• CAPTCHA or similar website security measures
• Secure cloud-based storage
Where Bumblebee Paraplanning is asked to access or use systems provided by a regulated firm, the regulated firm remains responsible for the configuration, maintenance and security of those systems.
Clients are expected to provide appropriate secure methods for sharing Customer information with Bumblebee Paraplanning.
Where a Client does not have a suitable secure transmission method available, we can agree an alternative secure process before sensitive Customer information is exchanged.
Personal or confidential Customer information should not be sent through an unsecured method where a reasonable secure alternative is available.
OUR DATA-PROTECTION RESPONSIBILITIES
Where Bumblebee Paraplanning acts as a data processor, we will:
• Process personal information only on the documented instructions of the Client, unless required by law to do otherwise.
• Ensure that anyone authorised to process Customer information is subject to appropriate confidentiality obligations.
• Maintain appropriate technical and organisational security measures.
• Assist the Client, where reasonably required, with data-subject rights requests.
• Assist the Client with relevant data-protection obligations where required by law or the applicable Data Processing Agreement.
• Notify the Client appropriately where we become aware of a personal data breach affecting information processed on its behalf.
• Use sub-processors only in accordance with applicable data-protection requirements and agreed contractual arrangements.
• Provide reasonable information required to demonstrate our compliance with our processor obligations.
• Return or securely delete Customer information at the end of the processing arrangement in accordance with the Client’s instructions and applicable legal requirements.
CLIENT RESPONSIBILITIES
The regulated firm remains responsible for determining the purposes for which its Customer information is processed and for establishing the appropriate lawful basis for that processing.
The Client is responsible for:
• Ensuring that it has an appropriate lawful basis for collecting and processing Customer information.
• Providing Customers with appropriate privacy information.
• Ensuring that Bumblebee Paraplanning is appropriately authorised to process Customer information on its behalf.
• Providing Bumblebee Paraplanning with appropriate documented instructions.
• Ensuring that its own systems and security arrangements are appropriate.
• Maintaining appropriate oversight of its outsourced service providers.
• Informing Bumblebee Paraplanning of any specific data-protection, network or compliance requirements applicable to the work being undertaken.
• Informing us promptly where access to its systems needs to be amended or withdrawn.
INTERNAL POLICIES AND SECURITY STANDARDS
Bumblebee Paraplanning maintains appropriate internal procedures for handling confidential and personal information.
These procedures cover areas including:
• Data protection and privacy
• Cyber security
• Email and electronic communications
• Confidentiality
• Remote working
• Authentication of communications
• Clear desk and information-security practices
• User IDs and passwords
• Multi-factor authentication
• Confidential waste
• Computers, laptops and mobile devices
• Access to Client systems
• Data retention and secure deletion
• Personal data breaches
When working with a Client, Bumblebee Paraplanning will also follow relevant Client procedures that have been communicated to us, provided these do not conflict with applicable legal requirements or appropriate security practices.
We aim to maintain an appropriate audit trail of the work we complete and communications undertaken on behalf of the Client.
DATA PROCESSING AGREEMENT AND DUE DILIGENCE
Where Bumblebee Paraplanning processes personal information on behalf of a Client, appropriate written contractual provisions will be maintained in accordance with UK data-protection requirements.
The agreement will address matters including the nature and purpose of the processing, confidentiality, security, Client instructions, sub-processors, data-subject rights, assistance with compliance obligations, data retention and deletion.
We are happy to provide reasonable information to assist regulated firms with their supplier and outsourcing due-diligence requirements.
DATA PROTECTION REGISTRATION
Bumblebee Paraplanning is registered with the Information Commissioner’s Office for data-protection purposes.
ICO registration reference: ZC011236
NON-DISCLOSURE AND CONFIDENTIALITY
Confidentiality requirements form part of our Terms of Business and contractual arrangements with Clients.
Bumblebee Paraplanning will treat confidential business and Customer information appropriately throughout the engagement and after the relationship ends.
Where a Client requires an additional Non-Disclosure Agreement or confidentiality agreement as part of its supplier due-diligence requirements, we are happy to consider and sign an appropriate agreement.
Cookies
This Cookie Policy explains how Bumblebee Paraplanning uses cookies and similar technologies when you visit www.bumblebeeparaplanning.co.uk.
Cookies are small files or pieces of information stored on your computer, phone, tablet or other device when you visit a website.
Cookies can help a website operate correctly, remember preferences and provide information about how visitors use the website.
We use cookies and similar technologies only where they are necessary for the operation of our website or for the purposes described below.
TYPES OF COOKIES WE USE
Necessary Cookies
Necessary cookies help our website operate securely and correctly.
These cookies may be required for functions such as:
• Website security
• Forms and website functionality
• Remembering your cookie preferences
• Protecting the website against fraudulent or malicious activity
• Allowing pages and website features to operate correctly
Necessary cookies may be placed automatically because they are required for the website or service you have requested to work properly.
Analytics and Performance Cookies
We use website analytics to understand how visitors use our website and to help us improve its content, performance and usability.
Analytics information may include:
• Pages visited
• Number of visits
• How visitors arrived at the website
• Time spent on pages
• General device and browser information
• Approximate location information
• Website interactions and navigation
We may use Squarespace Analytics and Google Analytics for these purposes.
Where consent is required for analytics or performance cookies, these cookies will not be placed until you have made the appropriate choice through our cookie controls.
Where an analytics technology meets an applicable legal exception for statistical purposes, it may be used without prior consent where permitted by law. Where we rely on such an exception, the information will only be used for qualifying statistical purposes and appropriate options will be provided for visitors to object.
Marketing Cookies
We do not use cookies for personalised advertising unless specifically stated through our website cookie controls.
If marketing or advertising technologies are introduced in the future, we will update this Cookie Policy and obtain consent where required before using them.
SQUARESPACE COOKIES
Our website is hosted by Squarespace.
Squarespace may place necessary cookies to enable the website to operate correctly.
Depending on the website features being used, Squarespace may also use analytics and performance cookies.
Squarespace analytics cookies may include:
ss_cid
Purpose: Helps identify unique visitors and visitor sessions.
Typical duration: Up to 2 years.
ss_cpvisit
Purpose: Helps identify unique visitors and visitor sessions.
Typical duration: Up to 2 years.
ss_cvisit
Purpose: Helps identify visitor sessions.
Typical duration: Approximately 30 minutes.
ss_cvr
Purpose: Helps identify unique visitors and visitor sessions.
Typical duration: Up to 2 years.
ss_cvt
Purpose: Helps identify visitor sessions.
Typical duration: Approximately 30 minutes.
Squarespace may also use cookies or similar technologies to remember the choices you make about analytics, performance or marketing cookies.
GOOGLE ANALYTICS
We may use Google Analytics to help us understand how visitors interact with our website.
Google Analytics may collect information including the number of visitors, session information, general device and browser information and approximate geographical information.
Google Analytics may use cookies including:
_ga
Purpose: Used to distinguish website visitors.
Default duration: Up to 2 years.
ga<container-id>
Purpose: Used to maintain information about a visitor’s session.
Default duration: Up to 2 years.
The actual duration of these cookies may vary depending on browser restrictions, settings and the configuration of Google Analytics.
We use analytics information to understand and improve our website rather than to make decisions about individual visitors.
COOKIE CONSENT AND YOUR CHOICES
When you first visit our website, you may be shown a cookie notice allowing you to make choices about the use of non-essential cookies.
Depending on the cookies and technologies in use, you may be able to:
• Accept non-essential cookies
• Decline non-essential cookies
• Manage your cookie preferences
Necessary cookies cannot normally be disabled through our website because they are required for essential website functionality.
Where consent is required, we will not treat continued use of the website as consent to non-essential cookies.
You can change or withdraw your cookie preferences at any time using the cookie preference controls available on our website.
ANALYTICS AND THE STATISTICAL PURPOSES EXCEPTION
UK data-protection and electronic communications rules allow certain technologies used solely to collect statistical information about the use of a website for the purpose of improving that website to be used without consent in specific circumstances.
Where Bumblebee Paraplanning relies on this exception, the information must only be used for the qualifying statistical purpose and visitors must be provided with clear information and a simple way to object.
If the use of an analytics technology goes beyond the scope of this exception, including where it is used for advertising, profiling or other non-exempt purposes, we will obtain consent where required.
THIRD-PARTY SERVICES
Some features of our website may be provided by third parties.
These services may use cookies or similar technologies when you interact with them.
Third-party services used by Bumblebee Paraplanning may include:
• Squarespace
• Google Analytics
• Website security and anti-spam services
• Other services required to operate website forms or functionality
Where required, we will ensure that appropriate cookie controls are used before non-essential third-party cookies are activated.
HOW TO CONTROL COOKIES
You can control your cookie choices through the cookie controls provided on our website.
You can also use your browser settings to block, restrict or delete cookies.
Please be aware that blocking necessary cookies may affect the operation or functionality of some parts of the website.
COOKIES AND PERSONAL INFORMATION
Some cookie and analytics information may constitute personal information under UK data-protection legislation.
Where personal information is processed through cookies or similar technologies, it will be handled in accordance with our Privacy Notice.
Our Privacy Notice provides further information about how we collect, use, protect and share personal information and the rights available to you.
CHANGES TO THIS COOKIE POLICY
We may update this Cookie Policy where our website, cookie usage, technology providers or legal requirements change.
The current version will be published on our website together with the date it was last updated.
CONTACT US
If you have any questions about our use of cookies or similar technologies, please contact:
Bumblebee Paraplanning
Email: leah@beeplan.co.uk
Last updated: 10 August 2026