Last updated: 6 October 2026.

Who we are

This policy covers BrainWeb Ltd (company number 10361227), registered office The Old Post Office, Yarmouth Road, Smallburgh, Norwich, Norfolk, NR12 9AD (“BrainWeb”, “we”, “us”). We are the data controller for the personal data described here.

When we host or look after a website for a client, the client decides what data their site collects from its visitors. For that data the client is the controller and we act on their instructions as a processor. Their own privacy policy applies to it, not this one.

What we collect

Enquiries. Your name, email address, phone number if you give one, and whatever you write in your message, when you use the contact form, email us, or call.
Client and supplier records. Contact and billing details for the people and businesses we work with, and the emails and documents that go with the work.
Website analytics. We use Umami Cloud. It counts visits and page views without cookies and without storing anything that identifies you.
Hosting and email logs. For clients on a BrainWeb hosting or email plan, standard technical logs, such as server access logs, kept for security and troubleshooting.

This website does not set advertising or tracking cookies, so there is no cookie banner.

Why we use it, and our legal basis

To reply to an enquiry and prepare a quote. Our legal basis is our legitimate interest in answering people who contact us, and taking steps you have asked for before entering a contract.
To do the work you have hired us for. Our legal basis is the contract between us.
To keep accounts and tax records. Our legal basis is a legal obligation.
To keep our services secure and working. Our legal basis is our legitimate interest in running a reliable service.

We do not use personal data for automated decisions about you, and we do not sell it.

How long we keep it

If an enquiry does not lead to any work, we delete it two years after our last contact. Client records are kept while we work together and for six years afterwards, because UK law requires financial records to be kept for that long. Technical logs are kept only as long as they are useful for security and troubleshooting.

Who we share it with

We share personal data only with the service providers we need to run the business, and only as far as they need it. Each is bound by its own data protection obligations.

Google: our email (Google Workspace), and the hosting for this website and its images (Google Cloud).
Turso: the database behind this website, which stores contact form messages. The data is held in Ireland.
Umami: website analytics, which holds no personal data.
FreeAgent: our accounting software, which holds client billing details.

We do not put personal or contact details into AI tools.

Where a provider processes data outside the UK, we rely on a safeguard that UK law recognises, such as adequacy regulations or the provider’s standard contractual clauses.

Your rights

Under UK data protection law you can ask us for a copy of your personal data, ask us to correct or delete it, ask us to restrict how we use it or object to our using it, and ask for it in a form you can take elsewhere. To do any of these, email us at the address below. We will reply within one month.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.

Contact

For any question about this policy or your personal data, email hello@brainweb.co.uk, or write to BrainWeb Ltd, The Old Post Office, Yarmouth Road, Smallburgh, Norwich, Norfolk, NR12 9AD.

Privacy Policy