Who is responsible
Brackenfold AI Services Ltd is the controller of personal information received through website-related correspondence and business enquiries. Our registered address is 27 Alderweft Street, Ancoats, Manchester, M4 6JP, United Kingdom. Contact [email protected] for privacy questions or requests. Please identify your request as a privacy matter.
Information collected
When you email us, we receive the information you choose to provide, which may include your name, email address, organisation, project description and subsequent correspondence. The contact form prepares an email draft within your browser. Its entries are not uploaded by the form; we receive them only if you send the resulting email.
Delivering a website involves technical information such as IP address, requested page, browser information and request time. Hosting and security services may process this information to deliver pages, investigate faults and protect the service. Do not send passwords, customer datasets or sensitive personal records in an initial enquiry.
Purposes and lawful bases
We use enquiry information to respond, clarify requirements and discuss possible services. Where you request steps towards a contract, processing may be necessary for those steps. For general business correspondence, administration and proportionate security measures, we rely on legitimate interests, subject to considering your rights and reasonable expectations.
Information may also be processed to meet a legal obligation. Where consent is required for an optional activity, it must be requested separately and can be withdrawn. Reading this policy or acknowledging it on the contact form is not consent to unrelated marketing.
Cookies and service providers
Browser storage and related technologies are explained in the cookie policy. Optional storage requires an appropriate choice before use where the law requires consent. Technical server logs are distinct from cookies and may be necessary for reliable delivery and security.
Hosting, email and technical support providers may process information on our behalf under appropriate contractual arrangements. Access should be limited to what is necessary for their task. An initial enquiry is not authorisation to submit its contents to an AI model. Any project involving external AI processors requires separate consideration of the data, purposes and contractual protections.
Transfers, security and retention
If a service provider processes personal information outside the United Kingdom, applicable transfer requirements must be addressed, for example through an adequacy arrangement or appropriate contractual safeguards. You can ask for information about safeguards relevant to your correspondence. Technical and organisational measures are used to limit unauthorised access, but no communication method is entirely risk-free.
Enquiries are retained while they are being handled and for a proportionate period afterwards where needed for follow-up, business records or dispute handling. Contract records may need longer retention for legal and accounting purposes. Technical logs should be kept only as long as needed for their operational purpose. Information should be deleted or anonymised when the relevant need ends, subject to necessary backup cycles and legal holds.
Your rights and complaints
Under UK GDPR and the Data Protection Act 2018, applicable rights include access, correction, erasure, restriction, objection and data portability. These rights depend on the circumstances and lawful basis. We may need information to establish your identity before acting on a request. You may complain to the Information Commissioner’s Office.
Where EU GDPR applies to a visitor’s circumstances, its relevant protections also apply. California residents may have rights under the CCPA, as amended, where that legislation applies to the business and processing concerned. We do not sell enquiry information or share it for cross-context behavioural advertising. Contact us to request access, correction or deletion, or to raise an objection. This policy may be revised to reflect changes in processing or legal requirements.