Privacy notice
Plain English, short as we can make it. Last updated October 2026.
Who we are
BrightWave Digital (“BrightWave”, “we”) is the controller of the personal data described here. Contact us at services@thebrightwave.co.uk.
What we collect and why
- Enquiries. When you use our contact form we collect your name, email, and anything else you choose to give us (business, phone, website, message). We use it to reply and, if you go ahead, to deliver the work. Lawful basis: steps taken at your request before entering a contract, and our legitimate interest in replying to enquiries.
- Newsletter. Only if you tick the box. We record the wording you agreed to, when, and on which page, then ask you to confirm by email. Lawful basis: consent, which you can withdraw at any time with the unsubscribe link.
- Site analytics. We use cookieless analytics that count visits without identifying you. We don’t use advertising cookies or tracking pixels, so there’s no cookie banner.
Who processes it for us
Cloudflare (hosting and spam protection), Supabase (database, London region), Notion (our lead tracker), Brevo (email) and, if you book a call, Cal.com. Each acts on our instructions under a data processing agreement.
How long we keep it
Enquiries that don’t become projects are deleted after 24 months. Client records are kept for 6 years for accounting. Newsletter details are kept until you unsubscribe.
Your rights
You can ask to see, correct or delete your data, or object to how we use it, by emailing us. You can also complain to the Information Commissioner’s Office at ico.org.uk.