Privacy Policy
Last updated · 30 June 2026
This policy explains what personal data Brava Digital collects, why we collect it, how we keep it safe, and the rights you have over it. We keep data collection to the minimum needed to respond to your enquiry and deliver our services.
1. Who we are
Brava Digital (“we”, “us”, “our”) is a web studio based in the United Kingdom. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the data controller for the personal data described in this policy.
You can reach us about anything in this policy at hello@bravadigital.co.uk.
2. The data we collect
When you submit our contact form, we collect:
- Your name — so we know who we’re talking to.
- Email address — to reply to your enquiry.
- Phone number (optional) — if you’d prefer a call.
- Business name (optional) — to understand your context.
- The package you’re interested in and the message you write.
We do not run advertising trackers, analytics profiling, or third-party marketing cookies on this website. We do not collect special category data, and we don’t buy or sell personal data.
3. How and why we use your data
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Respond to your enquiry and prepare a quote or proposal | Legitimate interests / steps taken at your request prior to a contract |
| Store your enquiry so we can follow up | Consent (the tick-box on the form) and legitimate interests |
| Deliver and support a project you engage us for | Performance of a contract |
| Meet legal, accounting, and tax obligations | Legal obligation |
We will only use your details to contact you about your enquiry and our services — never to send unrelated marketing without your clear consent.
4. Who processes your data
We use a small number of carefully chosen service providers (“data processors”) to run our website and communications. Each only processes your data on our instructions:
- Google Workspace (Google Ireland Ltd) — hosts our hello@bravadigital.co.uk mailbox where your enquiry is received and stored.
- Web3Forms — securely relays the contact form submission to our inbox. It processes the form fields in transit and does not use them for its own purposes.
- Our website host and CDN providers (including jsDelivr and Cloudflare for fonts and scripts, and Google Fonts) — when your browser loads this site, these providers may process your IP address as a normal part of serving the page. This is required for the website to display correctly.
Some providers may process data outside the UK. Where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent adequacy arrangements.
5. Cookies
This website does not set tracking or advertising cookies. We don’t need a cookie banner because we only use what’s strictly necessary to serve the page. If we add analytics in future, we’ll update this policy and ask for your consent first.
6. How long we keep it
If your enquiry doesn’t lead to a project, we keep it for up to 12 months in case you come back to us, then delete it. If you become a client, we keep project and billing records for as long as needed to deliver the work and to meet our legal and accounting obligations (typically 6 years for financial records).
7. How we protect it
Form submissions are sent over an encrypted (HTTPS) connection. Access to your data is limited to the people at Brava Digital who need it, protected by strong authentication on our Google Workspace account. We review our security practices regularly.
8. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Ask us to correct anything inaccurate.
- Ask us to erase your data (“right to be forgotten”).
- Object to or restrict how we use it.
- Request a copy of your data in a portable format.
- Withdraw consent at any time, where we rely on it.
To exercise any of these, email hello@bravadigital.co.uk. We’ll respond within one month. There’s normally no charge.
9. Complaints
We’d always prefer to put things right ourselves, so please contact us first. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or on 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. When we do, we’ll change the “last updated” date at the top of this page. Significant changes will be made clear on the website.