Privacy, in plain English.
Who is responsible?
Bramlo Digital is the controller for its own enquiries, customer relationships and billing records. Our legal supplier/controller details must be completed before launch. For a request in the sandbox, use your project support form. The proposed public address hello@bramlodigital.co.uk is not represented as active until verified.
What we collect and why
We store names, business details, contact information, the brief, optional asset-folder links, domain preferences, preview approvals, scope, revision requests and support messages to handle your request and provide the agreed service. Our lawful basis is steps requested before a contract and performance of that contract where you are the contracting individual; legitimate interests in managing business contacts, responding to enquiries and securing our service apply to other business contacts. We retain necessary billing and tax records to meet legal obligations. Acknowledging this notice is not consent to marketing.
Payments and access
Stripe hosts card entry; we do not receive or store full card details. We keep Stripe customer/subscription identifiers and billing status. Private project links contain random access tokens; protect them like a password. We store their hashes, short-lived session hashes, access expiry and an audit of key project changes. Rate limiting uses a hashed network address and short time window.
Recipients and international transfers
The intended infrastructure is Cloudflare Pages and D1 for hosting/storage, Stripe for billing, and an approved transactional email provider if configured. Email is queued in the application; sandbox email, if enabled, is redirected only to the owner’s nominated test inbox. Outbound emails include contact and project information necessary for the message. Before live use, confirm the provider list, processing locations, DPAs and any UK international-transfer safeguards, including an appropriate adequacy arrangement or UK IDTA/Addendum where required. No recipient list or transfer assessment is assumed completed.
Proposed retention
Unconverted enquiries: review after 12 months. Inactive website files: proposed 30 days after service ends. Security rate-limit records: delete on an operational cleanup schedule; customer sessions expire after eight hours and must be purged. Email content and audit retention must be approved and implemented before live use. Keep accounting/contract evidence only for the period justified by applicable tax, limitation and dispute needs; proposed six-year accounting retention requires confirmation. Nothing in this draft means a deletion job has already been configured.
Your choices and rights
Depending on the applicable basis and circumstances, you may request access, correction, erasure, restriction, portability or object to processing, and withdraw any separate consent. Contact the verified Bramlo route or project support form. We verify identity proportionately and respond within applicable time limits, normally one month. You may complain to the Information Commissioner’s Office at ico.org.uk. We do not sell your information or make automated decisions with legal or similarly significant effects.
Customer website visitors
If we host or administer your website’s visitor data on your instructions, you may be the controller and Bramlo a processor. A completed data processing schedule is required before that processing. Your own website needs an accurate privacy notice. Please do not upload special-category information or credentials through the brief.