Privacy notice

BrightDragon Systems Ltd is the data controller for personal information collected through this website. Enquiries about this notice, or about the personal information we hold, should be directed to the contact address below.

We collect personal information only when you choose to provide it, by submitting the enquiry form on this website or by contacting us directly. The enquiry form collects:

• Name
• Email address
• Organisation (optional)
• Enquiry type
• The content of your message

Where you contact us by email or telephone instead, we hold the information contained in that correspondence.

Personal information provided through this website is used to respond to your enquiry and to manage the resulting correspondence. Where an enquiry proceeds to an engagement, the same information is used to scope, contract and deliver that work.

Our lawful basis is legitimate interests under Article 6(1)(f) of the UK GDPR — responding to a party who has contacted the business about its services. Where an engagement is agreed, processing is necessary for the performance of a contract under Article 6(1)(b).

We do not use enquiry information for direct marketing, and we do not sell, rent or otherwise disclose it for the marketing purposes of any third party.

We use a small number of service providers to operate this website and our business correspondence. Each acts as a processor on our documented instructions and is not permitted to use your information for its own purposes. We name them here because the Information Commissioner's Office regards identifying recipients as best practice.

We may also disclose personal information to our professional advisers, or where we are required to do so by law.

Formspree, Inc., Microsoft Corporation and Google LLC process personal information in the United States. Such transfers are made under the safeguards permitted by Chapter V of the UK GDPR, including the UK International Data Transfer Addendum and, where applicable, the UK Extension to the EU–US Data Privacy Framework.

Enquiries that do not result in an engagement are deleted within 12 months of the last correspondence.

Where an engagement proceeds, records are retained for six years following its conclusion, consistent with the periods for which UK tax and company law requires business records to be available.

This website sets no cookies and uses no advertising, profiling or analytics technology.

Typefaces are requested from Google Fonts when a page loads, which discloses your IP address to Google as described in Section 04. No cookie is set by this request.

A single item of session storage is used on the homepage to record that the opening animation has already been shown, so that it does not repeat as you move between pages. It contains no personal information, is not transmitted to us or to any third party, and is discarded by your browser when the session ends.

This website is served over an encrypted connection. Enquiry data is transmitted over encrypted channels and held in access-controlled accounts protected by multi-factor authentication. Access is limited to those who need it to respond to your enquiry or deliver an engagement.

Under the UK GDPR you have the right to request access to the personal information we hold about you, to have inaccurate information corrected, to request erasure, to restrict or object to processing, and to receive your information in a portable format.

Requests should be sent to hello@brightdragonsystems.com. We will respond within one calendar month. There is no charge, and you are not required to give a reason.

You also have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.

This notice is reviewed periodically and whenever our processing changes. The version number and effective date at the top of this page identify the current version. Previous versions are available on request.