PRIVACY INFORMATION

Privacy notice

Last updated: 30 July 2026

This notice explains how BrackenFort uses personal information supplied through the register-interest form, related enquiry correspondence and the private BrackenFort Data Register.

Who is responsible for your information?

The owner of BrackenFort is the data controller. You can contact BrackenFort about privacy or your information through the register-interest form. In your message, state that your enquiry concerns data protection. Do not include passwords, security codes or sensitive security information.

What information is collected?

• your name and business name;
• your email address and, if supplied, telephone number;
• the contents of your enquiry and subsequent correspondence;
• your customer status, marketing preference and, where relevant, evidence of when and how that preference was recorded or withdrawn;
• dates used to manage the relationship and retention period, including record, review and scheduled deletion dates;
• a limited audit history of changes made to the private data register;
• basic submission and security information generated by the hosting platform, such as date, time and technical information used to protect the form from abuse.

Please do not use the form to send passwords, payment-card details, authentication codes, special-category information or detailed descriptions of exploitable security weaknesses.

Why the information is used

Enquiries and requested steps

Information is used to assess and respond to your enquiry, discuss suitable services, prepare a quote if requested and take steps at your request before entering a contract. It is also used to maintain an accurate record of the relationship, honour communication preferences, apply the retention policy and demonstrate compliance. The lawful basis is taking steps at your request before a possible contract and, where appropriate, BrackenFort’s legitimate interests in managing genuine business enquiries, maintaining accurate records and protecting the service from misuse.

Marketing preferences

Submitting the form does not by itself subscribe you to a marketing list. If BrackenFort records a separate marketing permission, the private register stores the preference and supporting evidence so that it can be honoured. You can withdraw that permission at any time. BrackenFort will not send unrelated promotional communications without a lawful basis and any consent required by the Privacy and Electronic Communications Regulations.

Who receives the information?

Enquiries are handled by BrackenFort. Necessary service providers may process information on BrackenFort’s behalf, including Netlify for public website hosting and form delivery, Cloudflare for domain, security and D1 database services, OpenAI Sites for the authenticated private register application, and Apple iCloud Mail for email. The register is restricted to the authorised BrackenFort owner and is not intended for public access. Information may also be disclosed where required by law or where reasonably necessary to establish, exercise or defend legal claims.

Some providers may process information outside the UK. Where this happens, BrackenFort relies on the provider’s applicable contractual and legal safeguards for international transfers.

How long is it kept?

An enquiry that does not become a client engagement is normally kept for no longer than 12 months after the last meaningful contact, then deleted through BrackenFort’s retention process unless there is a legal, security or dispute-related reason to keep it longer.

If you become an annual customer, the enquiry record is not automatically deleted while the customer relationship remains active. It is reviewed at least annually and relevant information is retained under the client and business-record retention arrangements explained in the engagement documents. When the relationship ends, BrackenFort will set and apply an appropriate deletion or legal-retention date.

Your rights

Depending on the circumstances, you may have rights to ask for access to your personal information, correction, erasure, restriction, objection or transfer. You may also complain to the Information Commissioner’s Office. To exercise a right, use the contact form and clearly mark the message as a data-protection request. BrackenFort may need to verify your identity before acting.

You can find out more or make a complaint at ico.org.uk/make-a-complaint.

Security and changes

BrackenFort uses proportionate technical and organisational measures intended to protect enquiry information. No internet service is completely risk-free. This notice will be reviewed when the form, providers or uses of personal information change. Material changes will be shown on this page.