Every highlighted field below needs your real details. This is a working draft built to cover GDPR Article 13 for the data this site actually collects — it is not legal advice, and you should have it checked before relying on it, particularly if you register a company.
Who is responsible for your data
The controller of personal data collected through this website is [LEGAL NAME — your name, or the registered company name], [FULL POSTAL ADDRESS], [COUNTRY].
You can reach us about anything on this page at hello@brighterloom.com.
[If you appoint a Data Protection Officer, name them here. Most sole traders and small firms are not required to — delete this line if you do not.]
What we collect, and why
We collect personal data in one place only: the enquiry form on the home page. Nothing else on this site gathers information about you.
| What | Why | Lawful basis |
|---|---|---|
| Your name | To reply to you as a person | Steps prior to a contract — Art. 6(1)(b) |
| Work email address | To send that reply | Steps prior to a contract — Art. 6(1)(b) |
| Firm name, sector, size | To judge whether we are the right fit before wasting your time | Legitimate interests — Art. 6(1)(f) |
| What you tell us broke | To answer usefully rather than generically | Steps prior to a contract — Art. 6(1)(b) |
Please do not put client names, personal data about other people, or anything confidential in the free-text field. A short description of the problem is enough.
Cookies
This site sets no cookies. There is no analytics, no tracking, no advertising technology and no third-party scripts. Fonts are served from our own domain rather than from a third party, so loading this site does not disclose your IP address to anyone but our host.
If you add analytics later, this section must change — and depending on the tool, you may then need a consent banner. Cookie-free, EU-hosted analytics avoid that.
Who else sees it
- Our hosting provider, Vercel Inc., which serves this website and processes server logs including IP addresses. Vercel is based in the United States; transfers rely on the European Commission's Standard Contractual Clauses.
- Our email provider, [NAME — e.g. Google Workspace, Fastmail, Proton], which stores the message you send.
- Our form provider, [NAME — e.g. Formspree — or delete this line if the form sends by email only].
We do not sell personal data, and we do not share it for advertising.
How long we keep it
If we do not end up working together, we delete your enquiry within [e.g. 12 months]. If we do, we keep the correspondence for as long as the engagement runs and for [e.g. 7 years] afterwards where tax or professional-record rules require it.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or send it to someone else. You can object to processing we carry out on the basis of legitimate interests. Exercising any of these is free, and we will respond within one month.
If you think we have handled your data badly, you can complain to your national data protection authority. In [COUNTRY] that is [AUTHORITY NAME AND WEBSITE].
Changes
If this notice changes materially we will update the date at the top of the page.