Privacy Policy
How we collect, use, and protect your personal information.
Who We Are
This website is operated by Bigrise Ltd (Company No. 17072286). We are committed to protecting your privacy and handling your personal data responsibly and transparently.
For any questions about this privacy policy or how we handle your data, please contact us at [enable JavaScript to see email].
What Data We Collect
We collect personal data only when you voluntarily provide it to us. We collect data through:
- Contact form: we ask for your company name, email address, phone number (optional), and details about what you'd like help with. When you submit this form, the submission is sent to a function running on Cloudflare, which checks with Cloudflare Turnstile that it is not automated before delivering it to us by email through Resend, an email delivery provider. The details you send arrive in our email inbox. They are not written to a spreadsheet or a database
- Anti-spam checks and your IP address: the Cloudflare Turnstile check loads when the contact page or the Approach page opens, not only when you submit, so Cloudflare receives your IP address and basic browser information from the moment the page loads. When a form is submitted, the function that receives it also sees your IP address and uses it to limit how many submissions come from one connection. To do that it keeps a count against your IP address in Cloudflare KV, Cloudflare's temporary storage. That record holds a number and your IP address, never the details you submitted, and it expires on its own within the hour
- "Ask a question" form: on the Approach page you can send a question without giving a company name or a phone number. We ask only for your email address and the question itself. It goes the same way as the contact form, through the same Cloudflare function and the same Turnstile check, and arrives in our email inbox. We use it to answer your question and for nothing else
We do not collect sensitive personal data such as health information, political opinions, or biometric data.
How We Use Your Data
We use the personal data you provide for the following purposes:
- To respond to enquiries submitted through our contact form, and to answer questions sent through the Approach page
- To provide practical guidance based on the business information you share with us
We will never sell your personal data to third parties. We will never share your email address with other companies for their marketing purposes.
Legal Basis for Processing
Under UK GDPR, we process your personal data based on the following legal grounds:
- Consent: when you submit our contact form, you give us consent to contact you for the stated purposes
- Legitimate interests: we may use your data to improve our services and website, provided this does not override your rights
How We Store and Protect Your Data
Your personal data is stored securely using industry-standard measures. We use reputable third-party services that comply with UK GDPR requirements and maintain appropriate security certifications.
We retain your data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Specifically:
- Contact form enquiries and questions: enquiries and questions both reach us as email, so the information you submit is held in our business email inbox. We keep it for up to 12 months after our last correspondence, after which it is deleted unless there is an ongoing reason to keep it
- Call and meeting notes: if we speak by phone or video call, we retain any notes or follow-up information for up to 12 months after our last contact
- Google Analytics data: Google holds this for 14 months, which is the setting on our account, and deletes it after that
If you would like your data deleted sooner, you can contact us at any time using the details below.
Analytics and Cookies
We use Google Analytics 4 to see how the site is used: which pages people read, how long they stay, and roughly where in the world they are (country or city level, not an address). It does this by setting a cookie in your browser that gives your visit an ID, and it processes your IP address.
That is not your name or your email, but it is still information about you, so we ask before we load it. You can accept or decline when you first visit the site, using the cookie banner.
If you decline, none of it happens. You can change your mind at any time using the "Cookie Settings" link in the footer of any page, which also deletes the analytics cookies already on your device.
Your choice itself is stored in your browser, not in a cookie, under the name cookie-consent. It holds one word, either accepted or declined, so the banner knows not to ask again. It stays until you clear your browser data or change your choice. We cannot see it and it is never sent to us.
The contact form also uses Cloudflare Turnstile to check you are a person and not a bot. Turnstile may set its own cookie in your browser for that check. It is set by Cloudflare, we do not read it, and it is used only to stop automated spam reaching the form.
Our hosting provider, Cloudflare, also runs its own bot detection on every page. It adds a small script to the page as it is served and that script looks at signals from your browser to tell people apart from automated traffic. It runs before you make any cookie choice, because it protects the site itself rather than measuring your visit. We do not receive or read what it collects. See Cloudflare's Privacy Policy.
You can learn more about how Google handles analytics data at Google Analytics privacy overview.
Your Rights Under UK GDPR
As a UK/EU resident, you have the following rights regarding your personal data:
- Right of access: you can request a copy of the personal data we hold about you
- Right to rectification: you can ask us to correct any inaccurate or incomplete data
- Right to erasure: you can request that we delete your personal data (also known as the "right to be forgotten")
- Right to restrict processing: you can ask us to limit how we use your data
- Right to data portability: you can request your data in a commonly used, machine-readable format
- Right to object: you can object to our processing of your data for certain purposes
- Right to withdraw consent: if you've given consent for us to process your data, you can withdraw it at any time
To exercise any of these rights, please contact us at [enable JavaScript to see email]. We will respond to your request within 30 days.
Third-Party Services
We use the following third-party services to help operate this website and deliver our services:
- Google Analytics 4 (website analytics: only loaded with your consent via our cookie banner)
- Google Workspace (our business email, where contact form enquiries arrive and are kept)
- Cloudflare Turnstile (anti-spam verification on our contact form: Turnstile may process your IP address and browser data to verify you are not a bot. See Cloudflare's Privacy Policy for details)
- Resend (email delivery). Resend sends your contact form enquiry to our inbox, so it processes the details you submitted as part of delivering that email
- Cloudflare (hosting for this website, and the function that receives contact form submissions)
We only work with providers that comply with UK GDPR and maintain appropriate data protection standards. We do not share more data with these providers than is necessary for them to perform their services.
International Data Transfers
The following third-party services we use are based in the United States and may process your data outside the UK:
- Google (Analytics, Workspace): Google operates under a UK GDPR data processing agreement and relies on Standard Contractual Clauses for international transfers
- Cloudflare (hosting, Turnstile, and the function that receives contact form submissions): Cloudflare processes this data under Standard Contractual Clauses. See their privacy policy for details
- Resend (email delivery). Resend is based in the United States, so your enquiry passes through a US provider on its way to our inbox. Resend acts as our processor for sending that email
We only use providers that maintain appropriate safeguards for international data transfers as required by UK GDPR.
Children's Privacy
Our contact form is designed for business owners and professionals. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from someone under 18, please contact us immediately.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
How to Contact Us
If you have any questions about this privacy policy, want to exercise your data rights, or have concerns about how we handle your personal information, please contact us:
Email: [enable JavaScript to see email]
Business: Bigrise Ltd (Company No. 17072286)
Registered in: England and Wales
Registered Office: 45 Gold Street, Suite 913, Northampton, NN1 1RA, United Kingdom
ICO Registration: ZC103530
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk.