Home / Privacy notice
Privacy notice
How BrightDragon Systems Ltd collects, uses and protects personal information provided through this website and when you buy from us, and the rights available to you under the UK General Data Protection Regulation.
Version 1.7 · Effective 19 October 2026
01 Who we are
BrightDragon Systems Ltd is the data controller for personal information collected through this website and for the order details we receive when you buy a product. BrightDragon Technology, BrightDragon Studios, BrightDragon Trading and BrightDragon Kids are trading names of BrightDragon Systems Ltd.
Registered with the Information Commissioner's Office, registration number ZC245545.
| Controller | BrightDragon Systems Ltd |
|---|---|
| Company number | 17419550, registered in England and Wales |
| Registered office | Office 1884, 60 Tottenham Court Road, Fitzrovia, London, W1T 2EW |
| ICO registration number | ZC245545 |
| Data protection contact | hello@brightdragonsystems.com |
02 What we collect
When you send an enquiry through the form or by email or phone: your name, email address, organisation (optional), enquiry type, how you heard about us (optional) and your message.
When you buy a product: our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. Paddle collects your payment details and billing information, and never shares your card details with us. Paddle sends us the details we need to supply and support your purchase: your name, email address, country, the product bought, the price paid and the order number.
The free tools on this website run entirely in your browser. Nothing you type into them is sent to us or stored by us.
03 Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Replying to enquiries and managing the correspondence | Legitimate interests, Article 6(1)(f): responding to someone who has contacted the business |
| Scoping, contracting and delivering agreed work | Contract, Article 6(1)(b) |
| Supplying a product you bought, sending download or access details, and helping you use it | Contract, Article 6(1)(b) |
| Keeping records of sales | Legal obligation, Article 6(1)(c): UK tax and company law |
We do not sell, rent or share your information for anyone else's marketing. Enquiry and order details are not used for marketing.
04 Who we share it with
Paddle. Paddle.com Market Limited is the reseller and Merchant of Record for our orders. It processes your purchase as an independent controller under its own privacy notice, which you see at checkout (paddle.com/legal/privacy).
Service providers who process data for us on our documented instructions, and not for their own purposes:
| Service | Provider | Where |
|---|---|---|
| Website and email hosting | Hostinger International Ltd | UK data centres; weekly backups in Germany |
| Enquiry form processing | Formspree, Inc. | United States |
| Business email | Microsoft Corporation (Outlook) | United States |
We may also share information with our professional advisers, or where the law requires it.
Transfers outside the UK. Where a provider processes information in the United States, the transfer is made under the safeguards in Chapter V of the UK GDPR, including the UK International Data Transfer Addendum and, where applicable, the UK Extension to the EU–US Data Privacy Framework. Backups held in Germany stay within the European Economic Area, which the UK treats as adequate.
05 How long we keep it
- Enquiries that do not lead to work: deleted within 12 months of the last correspondence.
- Work and sales records: six years after the end of the financial year they relate to, as UK tax and company law requires.
06 Cookies and browser storage
This website sets no cookies and uses no advertising or profiling technology. Typefaces are served from this website's own server. Checkout takes place on Paddle's own pages, which set the cookies Paddle needs to take payment securely; Paddle's notice explains them.
A single item of session storage is used on the homepage to record that the opening animation has already been shown, so that it does not repeat as you move between pages. It contains no personal information, is not sent to us or to anyone else, and is discarded by your browser when the session ends.
07 How we protect it
This website is served over an encrypted connection. Enquiry and order information is transmitted over encrypted channels and held in access-controlled accounts protected by multi-factor authentication. Access is limited to what is needed to respond to you or supply your product.
08 Your rights
Under the UK GDPR you have the right to access the personal information we hold about you, to have it corrected, to ask for it to be erased, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Send requests to hello@brightdragonsystems.com. We will respond within one month. There is no charge, and you do not have to give a reason.
For payment and billing information, you can also contact Paddle directly through paddle.net.
09 Complaints
If you are unhappy with how we have handled your information, email hello@brightdragonsystems.com, marked for the attention of the Director. We will acknowledge your complaint within 30 days, look into it properly and tell you the outcome and our reasoning.
You can also complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113, in any order.
10 Changes
This notice is reviewed whenever our processing changes. The version and effective date at the top identify the current version. Previous versions are available on request.