Privacy Policy

This policy explains what personal data Biztour collects, why we collect it, who we share it with and what rights you have. It covers this website and the enquiries that come through it.

Who we are

Biztour is a virtual tour, photography and video production company based at 86-90 Paul St, London EC2A 4NE. For anything in this policy, contact us via our contact form or 0330 1222 334.

Biztour is a trading name of Cornerstone Marketing Group Ltd, a company registered in England and Wales under company number 15190663, whose registered office is 86-90 Paul St, London EC2A 4NE.

For the data described here, Biztour is the data controller: we decide what is collected and why.

What we collect, and why

When you send an enquiry

Our contact form asks for your name, email address and message, and optionally your phone number, website and industry. If you reach the form from a link in our assistant, the message box starts with a summary of your chat, which you can edit or delete before sending.

If you send us your answers at the end of our tour quiz, it sends your name, email address and, if you give them, your phone number and a message, along with your answer to each quiz question and the recommendation the quiz gave you.

We use this only to respond to your enquiry, prepare a quotation and, if you go ahead, deliver the work. The lawful basis is legitimate interests: you have contacted us asking for a reply.

When you use the assistant on our website

The site has an AI assistant that answers questions about our services. What you type or say to it is sent to Anthropic, which generates the reply, and, if you use the spoken responses, the reply text is sent to ElevenLabs to be turned into audio. To stop the assistant being misused, we use your IP address to limit how much it can be used in a short space of time. Please do not enter confidential or sensitive information into the assistant.

We keep a record of each conversation: what you asked, what the assistant replied, the page you were on, the time, your approximate location (country and city) and the type of device and browser you used. We do not store your IP address with it. Instead we keep a one-way code (a hash) made from it, which only lets us tell that two conversations came from the same visitor. We read these records to see what people want to know, to improve the assistant's answers and to follow up if you ask us to. The lawful basis is legitimate interests. Conversations are not used to build a profile of you and are not linked to your identity unless you volunteer contact details.

When you visit a page

We do not set any cookies of our own, and we do not run advertising trackers. Our hosting provider, Vercel, records standard server logs, including IP addresses, for security and to keep the site running.

We use Vercel Web Analytics to count visits and see which pages people look at. It does not use cookies or store anything on your device. For each page view it records the page address, the site that sent you here (if any), your approximate location (country, region and city), your browser, operating system and device type, and the time. Instead of a cookie, it tells visitors apart using a one-way code (a hash) created from your request, and discards it after 24 hours. Page views are recorded anonymously and are not stored against your IP address, and we only see totals, never individual visitors. The lawful basis is legitimate interests: knowing which pages are useful helps us improve the site.

The site keeps two small notes in your browser's session storage, which is cleared when you close the tab: one so that the pop-up suggesting our assistant does not reappear in that tab once you have closed or used it, and the chat summary described above, if you follow a link from the assistant to the contact form. Neither is sent anywhere, except that the summary goes with your message if you submit the form.

Photography, video and virtual tours

Our work involves photographing and filming commercial premises. We plan every shoot so that identifiable people do not appear unless they have given consent, and we exclude sensitive areas, screens and records at your direction. Where a shoot involves a setting with children, patients or residents, we capture outside operating hours or in cleared areas.

Nothing is published until you have approved it, and we will remove or reshoot any scene you ask us to.

Who we share data with

We do not sell your data, and we do not share it for marketing. We use the following processors to run the website and deliver our work:

• Vercel- website hosting, server logs, visitor statistics (Vercel Web Analytics) and storing the assistant's conversation records
• Web3Forms - delivering contact form and tour quiz submissions to our inbox
• Anthropic - powering the website assistant, and helping us draft replies to enquiries
• ElevenLabs - spoken replies from the assistant
• Google - publishing virtual tours to Google Maps, Search and Business Profiles, and the embedded map on our contact page
• GoThru - hosting the live virtual tours embedded on this site
• Matterport - hosting 3D tours
• Vimeo - hosting the films embedded on this site

Some of these providers are based outside the UK. Where data is transferred internationally, it is done under the safeguards those providers have in place, such as standard contractual clauses.

Some pages embed content hosted by these providers, and most of it loads without you clicking anything: the map on our contact page comes from Google Maps, and the live virtual tours come from GoThru (tourmkr.com) or Matterport. When you view those pages your browser connects to those providers, which receive your IP address and may set their own cookies under their own privacy policies. Films are different: nothing is requested from Vimeo until you press play.

How long we keep it

Enquiries that do not become projects are kept for up to two years, so we can pick up a conversation if you come back to us. Conversations with the website assistant are also kept for up to two years, then deleted. Records relating to work we have carried out, including invoices, are kept for seven years to meet UK tax and accounting requirements. Server logs are kept for a short period by our hosting provider.

Your rights

Under UK GDPR you have the right to:

• ask what personal data we hold about you, and get a copy
• have inaccurate data corrected
• ask us to delete your data
• object to or restrict how we use it
• ask for your data in a portable format

To exercise any of these, contact us via our contact form. We will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Changes to this policy

If we change how we handle personal data we will update this page and the date at the top. Material changes affecting existing clients will be notified directly.

See also our terms and conditions.