We respect your privacy

Handling your enquiry.

The information entered into the enquiry form and

• the date and time on which the enquiry was made;
• the advert which was clicked if their enquiry came via Google AdWords;
• the IP address of the computer the enquiry was made enquiry on;
• and cookies for tracking, provided by Google AdWords,

will be transmitted to the business name appears at the bottom of this page so that they can respond to the enquiry.

Information, including personal information, is transmitted via:

• Email.
• SMS text message.
• Webhook.

BRE Innovations holds the following information about people who fill in the enquiry form on this site temporarily:

• Names
• Email address.
• Phone numbers.
• The nature of their enquiry.
• Date and time on which they enquired.
• The Google advert they clicked if their enquiry came via Google AdWords.
• The IP address of the computer they made the enquiry on.
• Cookies for tracking provided by Google AdWords.

BRE Innovations keeps identifying information (name, email address, phone number, IP address) for one month to allow for resending it if needed, and for reporting. Identifying information is deleted from BRE Innovations systems one month after it has been provided.

Anonymised enquiry information and meta information is kept for up to one year to allow for analysis and optimisation of the service BRE Innovations provides. After that it’s removed automatically.

Personal information is stored on a MySQL database hosted by Amazon Web Services in their EU-West (London) data centre. Backups are stored in the US-West (Oregon) data centre.

We backup information from the service to the backup service via the secure HTTPS protocol.

Staff have limited access to personal information.

Data protection officer.

Tim Forshaw is the data protection officer for BRE Innovations.

He may be contacted via email to: tmforshaw@gmail.com.

Sub processors.

BRE Innovations uses infrastructure and services provided by:

• Amazon Web Services (website hosting, database, backups).
• Stripe (payment processing).
• 20i (website hosting, email).
• Mailgun (outgoing email).
• Zapier (process leads by web hook).
• Clickatell (outgoing SMS text messages).
• Gmail (email).
• Google AdWords (online advertising and conversion tracking).

No personal data is shared with these service providers, but personal data is stored on their infrastructure or flows through it.

Reporting data breaches.

On becoming aware of a data breach BRE Innovations will:

• Notify the Information Commissioner’s Office following the procedure outlined here: https://ico.org.uk/for-organisations/report-a-breach/personal-data-breach/
• Notify affected data subjects by email if unencrypted data was breached.

Updating or deleting personal information.

Users of this site may request access to personal information the service holds by contacting the data protection officer at the addresses on this page.

Users of this site may provide updates to personal information the service holds by contacting the data protection officer at the addresses on this page.

Users of this site may may request deletion of personal information the service holds by contacting the data protection officer at the addresses on this page.

Users of this site may may request the cessation of processing of personal information the service holds by contacting the data protection officer at the addresses on this page.

Users of this site may may request delivery of personal information the service holds by contacting the data protection officer at the addresses on this page.

Users of this site may may withdraw consent by contacting the data protection officer at the addresses on this page.

We do not intentionally process children’s personal data. We require that users of this site be at least 18.

Changing the privacy policy.

BRE Innovations informs all users by email when the privacy policy is updated.