STUDIO
Privacy Policy
How we collect, use, and protect personal data, and what rights you have over your information.
Last updated: DRAFT, not yet published.
Who we are
This policy covers BrainWeb Ltd (company number 10361227), registered office The Old Post Office, Yarmouth Road, Smallburgh, Norwich, Norfolk, NR12 9AD ("BrainWeb", "we", "us"). We are the data controller for the personal data described below.
What we collect
We collect personal data in a small number of ways:
Enquiry and contact forms. Name, email address, phone number, and any message content you provide when you get in touch.
Client and supplier records. Contact and billing details for anyone we work with, kept for the duration of the relationship and as required for accounting and tax purposes.
Website analytics. We use Umami, a privacy-first, cookieless analytics platform. It does not collect personal data or set cookies, and does not require a cookie banner. Some third-party embeds or services on client sites may set their own cookies; those are covered separately where relevant.
Hosting and email logs. For clients on a BrainWeb hosting or email plan, standard technical logs (e.g. server access logs) are retained for security and troubleshooting purposes.
Why we collect it, and our legal basis
We use personal data to respond to enquiries, deliver contracted services, meet our legal and accounting obligations, and keep our own records straight. Depending on the situation, our legal basis is your consent, the performance of a contract, or our legitimate business interest in running the studio properly.
How long we keep it
We keep enquiry data long enough to respond and follow up, and delete it if nothing comes of it. Client and financial records are kept for as long as UK law requires (typically six years for accounting records), after which they are securely deleted.
Who we share it with
We do not sell personal data. We share it only with the suppliers needed to run the services you use, such as hosting providers, email platforms, and payment or accounting software, each acting under their own data protection obligations. We do not transfer personal data outside the UK/EEA without appropriate safeguards in place.
Your rights
Under UK GDPR, you have the right to access, correct, or ask us to delete your personal data, to object to or restrict certain processing, and to complain to the Information Commissioner's Office (ICO) if you believe we have handled your data incorrectly. To exercise any of these rights, contact us using the details below.
Contact
For any question about this policy or your personal data, email hello@brainweb.co.uk or call 01603 244130.
A note on this page
This page is a draft placeholder pending legal review, and has not yet been reviewed by a solicitor. It is not published live.