LEGAL
Privacy Policy
Last updated: 18 August 2026
This website (breccs.co.uk) is operated by Breccs Private Limited (Company No. 15139888), registered office at 128 City Road, London, EC1V 2NX ("Breccs", "we", "us", "our").
This policy explains what personal data we collect when you use this website, why we collect it, and how it's handled.
1. What we collect
When you submit our contact form, we collect:
- Name
- Email address
- Company name
- The service you're enquiring about
- Any details you choose to include in the message field
We do not collect any personal data beyond what you voluntarily submit through the contact form. This site does not use accounts, logins, or e-commerce checkout, so no payment or account data is processed via breccs.co.uk directly.
2. How we use it
We use the information you submit solely to respond to your enquiry and, if you choose to proceed, to discuss and deliver our services to you. We do not use it for marketing without your separate consent, and we do not sell or rent your data to third parties.
3. Legal basis
Under UK GDPR, we process this data on the basis of legitimate interest — responding to enquiries from people who have voluntarily contacted us — and, where a service engagement follows, in preparation for or performance of a contract.
4. How long we keep it
Contact form enquiries are retained for as long as necessary to respond to your enquiry and, where a business relationship develops, for the duration of that relationship plus any period required for legal, accounting, or tax purposes. Enquiries that do not lead to further engagement are deleted after a reasonable period, and in any case no longer than 24 months.
5. Who we share it with
We use the following third-party service providers to operate this website and process your enquiry:
- Vercel — website hosting
- Cloudflare — DNS, security, and bot protection (see Section 6 below)
- Resend — email delivery for contact form submissions
- Upstash — rate-limiting infrastructure to prevent spam form submissions
These providers process data on our behalf and are bound by their own data processing terms. We do not share your data with any other third party except where required by law.
6. Cloudflare Turnstile
This website uses Cloudflare Turnstile to protect our contact form against spam and automated abuse. Turnstile runs invisibly in the background and does not display a visual challenge to most visitors.
Turnstile processes limited technical signals (such as IP address, browser/device information, and site-specific data) solely to distinguish genuine visitors from bots. It does not identify you personally. Full details of what Turnstile collects and how Cloudflare processes it are set out in Cloudflare's Turnstile Privacy Addendum, which supplements Cloudflare's main Privacy Policy.
7. Your rights
Under UK GDPR, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to how we process your data
- Request a copy of your data in a portable format
To exercise any of these rights, contact us at info@breccs.com.
If you're unsatisfied with our response, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO): ico.org.uk.
8. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated "last updated" date.
9. Contact
Questions about this policy or how we handle your data:
Breccs Private Limited
128 City Road, London, EC1V 2NX
info@breccs.com