PRIVACY INFORMATION

Privacy notice

Last updated: 30 July 2026

This notice explains how BrackenFort uses personal information supplied through the register-interest form and related enquiry correspondence.

Who is responsible for your information?

Matthew Lakin, trading as BrackenFort, is the data controller. You can contact BrackenFort about privacy or your information through the register-interest form. In your message, state that your enquiry concerns data protection. Do not include passwords, security codes or sensitive security information.

What information is collected?

• your name and business name;
• your email address and, if supplied, telephone number;
• the contents of your enquiry and subsequent correspondence;
• basic submission and security information generated by the hosting platform, such as date, time and technical information used to protect the form from abuse.

Please do not use the form to send passwords, payment-card details, authentication codes, special-category information or detailed descriptions of exploitable security weaknesses.

Why the information is used

Enquiries and requested steps

Information is used to assess and respond to your enquiry, discuss suitable services, prepare a quote if requested and take steps at your request before entering a contract. The lawful basis is taking steps at your request before a possible contract and, where appropriate, BrackenFort’s legitimate interests in managing genuine business enquiries and protecting the service from misuse.

No unrelated marketing

Submitting the form does not subscribe you to a marketing list. BrackenFort will not use the form details for unrelated promotional emails without a separate lawful basis and any consent required by the Privacy and Electronic Communications Regulations.

Who receives the information?

Enquiries are handled by BrackenFort. Necessary service providers may process information on BrackenFort’s behalf, including Netlify for website hosting and form delivery, Cloudflare for domain and security services, and Apple iCloud Mail for email. Information may also be disclosed where required by law or where reasonably necessary to establish, exercise or defend legal claims.

Some providers may process information outside the UK. Where this happens, BrackenFort relies on the provider’s applicable contractual and legal safeguards for international transfers.

How long is it kept?

An enquiry that does not become a client engagement is normally kept for no longer than 12 months after the last meaningful contact, then deleted unless there is a legal, security or dispute-related reason to keep it longer. If you become a client, relevant information is retained under the client and business-record retention arrangements explained in the engagement documents.

Your rights

Depending on the circumstances, you may have rights to ask for access to your personal information, correction, erasure, restriction, objection or transfer. You may also complain to the Information Commissioner’s Office. To exercise a right, use the contact form and clearly mark the message as a data-protection request. BrackenFort may need to verify your identity before acting.

You can find out more or make a complaint at ico.org.uk/make-a-complaint.

Security and changes

BrackenFort uses proportionate technical and organisational measures intended to protect enquiry information. No internet service is completely risk-free. This notice will be reviewed when the form, providers or uses of personal information change. Material changes will be shown on this page.