Privacy Policy
Last updated · 30 June 2026
This policy explains what personal data Brava Digital collects, why we collect it, how we keep it safe, and the rights you have over it. We keep data collection to the minimum needed to respond to your enquiry and deliver our services.
1. Who we are
Brava Digital (“we”, “us”, “our”) is a web studio based in Norwich, United Kingdom. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the data controller for the personal data described in this policy.
You can reach us about anything in this policy at hello@bravadigital.co.uk.
2. The data we collect
When you submit our contact form, we collect:
- Your name, so we know who we’re talking to.
- Email address, to reply to your enquiry.
- Phone number (optional), if you’d prefer a call.
- Business name (optional), to understand your context.
- The package you’re interested in and the message you write.
With your consent, we also use Google Analytics to collect anonymised statistics about how this website is used (pages visited, approximate location, device type). We also use Ahrefs Analytics, a privacy-friendly service that counts visits without cookies and without identifying individual visitors. We do not run advertising trackers or third-party marketing cookies, we do not collect special category data, and we don’t buy or sell personal data.
3. How and why we use your data
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Respond to your enquiry and prepare a quote or proposal | Legitimate interests / steps taken at your request prior to a contract |
| Store your enquiry so we can follow up | Consent (the tick-box on the form) and legitimate interests |
| Deliver and support a project you engage us for | Performance of a contract |
| Meet legal, accounting, and tax obligations | Legal obligation |
| Measure how the website is used (Google Analytics) | Consent (the cookie banner) |
We will only use your details to contact you about your enquiry and our services, and never to send unrelated marketing without your clear consent.
4. Who processes your data
We use a small number of carefully chosen service providers (“data processors”) to run our website and communications. Each only processes your data on our instructions:
- Google Workspace (Google Ireland Ltd): hosts our hello@bravadigital.co.uk mailbox where your enquiry is received and stored.
- Netlify (Netlify, Inc.): hosts this website and processes contact form submissions, which are stored securely in our hosting dashboard and forwarded to our inbox.
- Our website host and CDN providers (including jsDelivr and Cloudflare for fonts and scripts, and Google Fonts). When your browser loads this site, these providers may process your IP address as a normal part of serving the page. This is required for the website to display correctly.
- Google Analytics (Google Ireland Ltd): only if you accept analytics cookies, Google processes usage data (pages visited, device type, approximate location) on our behalf so we can understand how the site is used. IP addresses are anonymised.
- Ahrefs Analytics (Ahrefs Pte. Ltd): counts page visits using aggregated, cookieless measurement. It sets nothing on your device and cannot identify you, which is why it does not need a consent prompt.
Some providers may process data outside the UK. Where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent adequacy arrangements.
5. Cookies
This website sets no tracking or advertising cookies by default. If you accept analytics in
the cookie banner, Google Analytics sets cookies (_ga and _ga_*,
lasting up to 13 months) to count visits and distinguish returning visitors. If you decline,
or simply ignore the banner, no analytics cookies are set. You can
change your cookie choice here at any time.
6. How long we keep it
If your enquiry doesn’t lead to a project, we keep it for up to 12 months in case you come back to us, then delete it. If you become a client, we keep project and billing records for as long as needed to deliver the work and to meet our legal and accounting obligations (typically 6 years for financial records).
7. How we protect it
Form submissions are sent over an encrypted (HTTPS) connection. Access to your data is limited to the people at Brava Digital who need it, protected by strong authentication on our Google Workspace account. We review our security practices regularly.
8. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Ask us to correct anything inaccurate.
- Ask us to erase your data (“right to be forgotten”).
- Object to or restrict how we use it.
- Request a copy of your data in a portable format.
- Withdraw consent at any time, where we rely on it.
To exercise any of these, email hello@bravadigital.co.uk. We’ll respond within one month. There’s normally no charge.
9. Complaints
We’d always prefer to put things right ourselves, so please contact us first. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or on 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. When we do, we’ll change the “last updated” date at the top of this page. Significant changes will be made clear on the website.