Privacy policy

Bredon West Limited. Last updated 11 November 2026.

1. Who we are

Bredon West Limited ("we", "us") is the controller of the personal data described in this policy. We are a technology consultancy registered in England and Wales, company number 07459627. Our registered office is 9 Wheatstone Court, Waterwells Business Park, Davy Way, Gloucester GL2 2AQ.

We are registered with the UK data protection regulator, registration number ZA691951.

For any question about this policy or your personal data, email contact_us@bredonwest.com.

2. What personal data we collect

People who use our website contact form: First name, last name, email address, phone number and your message. You give us this through the form.

People who email or call us: Name, contact details and what you tell us. You give us this.

Contacts at our clients and prospective clients: Name, job title, business email and phone, correspondence and invoicing details. You or your employer give us this.

Contacts at our suppliers: Name, job title, business contact details and correspondence. You or your employer give us this.

Website visitors: Usage data such as pages viewed, device, browser and approximate location. This comes from our website provider's analytics.

Please do not include sensitive information, such as health details or bank details, in a contact form message or email.

This policy does not cover personal data we process on behalf of a client under a client contract. The client is the controller of that data, and its own privacy notice applies.

3. How we use it and our lawful basis

Replying to your enquiry through the contact form, email or phone: Legitimate interests: responding to people who contact us. If you are asking about our services, also steps before entering a contract.

Providing our services and managing our relationship with clients: Contract, or legitimate interests where the contract is with your employer.

Buying and managing services from suppliers: Legitimate interests: running our business.

Invoicing, accounts and tax records: Legal obligation.

Understanding how our website is used: Legitimate interests: improving our website.

Keeping our systems secure, and dealing with legal claims: Legitimate interests: protecting our business.

Where we rely on legitimate interests, you can object (see section 8, Your rights).

We do not send marketing emails. We do not sell your data. We do not make decisions about you by automated means.

You do not have to give us your data. If you do not, we may not be able to reply to you or work with you.

4. Who we share it with

We use these service providers to run our business. They process personal data on our instructions under a contract.

  • Website hosting and analytics: US
  • Email and file storage: UK
  • Customer records: UK
  • Accounting and invoicing: EU
  • Backups: EU We may also share personal data with our professional advisers, such as our accountant, insurer or lawyers, and with HMRC or other authorities where the law requires it.

Squarespace also uses some technical data from visits to our website, such as IP addresses, for its own purposes, including keeping its services secure. Squarespace's privacy policy covers that use.

5. International transfers

Some of our providers process data outside the UK. Transfers to the EU rely on UK adequacy regulations. Transfers to the US rely on the UK Extension to the EU-US Data Privacy Framework, or on the UK International Data Transfer Addendum to the EU standard contractual clauses. Email contact_us@bredonwest.com for details of the safeguard that applies.

6. How long we keep it

  • Contact form messages and enquiries that do not lead to work with us: 12 months from our last contact
  • Client and supplier contact records and correspondence, including support requests: 6 years after the relationship ends, unless a contract with the client requires us to delete it sooner
  • Invoices and accounting records: 6 years from the end of the financial year they relate to
  • Website analytics: kept by Squarespace while our website account is active, under its data retention policy
  • Backups: deleted when the backup retention period of 12 months ends. Until then, we do not use them We delete data or anonymise it at the end of these periods.

7. Cookies on our website

Our website uses cookies set by Squarespace.

  • Strictly necessary cookies make the site work and keep it secure. They do not need your consent.
  • Analytics cookies tell us how visitors use the site, such as pages viewed. We only set them if you accept them in the cookie banner. You can change your choice at any time through the cookie settings link on our website. A list of the cookies is on Squarespace's cookie page.

We do not use advertising or tracking cookies.

8. Your rights

You have the right to:

  • ask for a copy of your personal data
  • ask us to correct it
  • ask us to delete it
  • ask us to restrict how we use it
  • object to how we use it
  • ask us to transfer it to you or another organisation, where this applies To use any of these rights, email contact_us@bredonwest.com. We will reply within one month. We may ask you to confirm your identity first.

Complaints

If you are unhappy with how we have handled your personal data, please email contact_us@bredonwest.com first. We will acknowledge your complaint within 30 days and tell you the outcome.

You can also complain to the UK data protection regulator, the Information Commission, at ico.org.uk or on 0303 123 1113.

9. Changes to this policy

We review this policy at least once a year. The date at the top shows when it was last updated.