Draft
Privacy Notice
Last updated: [publication date]
This notice explains how Brisk Site collects, uses and looks after personal information when you visit our website, create an account or use our service.
Who we are
Brisk Site is operated by Miles Wheeler-Smith, trading as Brisk Site.
We are responsible for how personal information is used to manage Brisk accounts, subscriptions, support and the security of our service. In data protection law, this makes us the “controller” for those activities.
Email: hello@brisksite.co.uk
Business address: [confirmed business address]
When we host website content or deliver enquiries for a customer business, we also handle personal information on that business’s behalf. That business is responsible for its own use of the information. Please read the Privacy Notice on its website for more details.
Information we collect
Depending on how you use Brisk Site, we collect:
- Account information, including your email address, account identifiers and verification information.
- Website content, including business details, contact information, descriptions, services, photographs and testimonials. We save working drafts before you publish.
- Subscription and billing information, including billing contact details, subscription status and payment, invoice and refund records. Our payment provider handles payment-card details; Brisk does not store full card numbers.
- Messages and requests, including support emails, complaints, privacy requests and requests to hear when a trade or feature becomes available.
- Technical information, including IP addresses, browser and request information, session identifiers and security or error records.
We receive information directly from you, from your use of the service, and from providers that help us manage authentication, payments and email delivery.
Customers may also include other people’s information in their website content, such as testimonial authors or people appearing in photographs.
How and why we use information
Scroll the table to read both columns.
| Purpose | Legal basis |
|---|---|
| Create your account, save your draft, provide your website and manage your subscription | Performing our contract with you, or taking steps you request before entering into it |
| Deal with someone acting on behalf of a business customer | Our legitimate interest in providing and administering services for that business |
| Provide support and essential account or service notifications | Performing our contract, or our legitimate interest in responding to enquiries and supporting business contacts |
| Protect accounts, prevent abuse, investigate faults and maintain the service | Our legitimate interest in running a secure and reliable service |
| Keep records required for tax and accounting, and meet applicable legal duties | Compliance with legal obligations |
| Manage disputes and retain necessary evidence of transactions or permissions | Our legitimate interest in resolving disputes and demonstrating what happened |
| Send a trade or feature availability notification you requested | Your consent |
| Feature your website in our marketing where personal information is involved | Your consent |
Where we rely on legitimate interests, we consider whether the use is necessary and balance it against your rights and interests.
Some information is needed to create an account, process payment or provide your website. If you do not provide it, we may be unable to offer that part of the service. Optional website content and requests for availability notifications are your choice.
Publishing your website
When you publish, the content you approve becomes publicly accessible. This may include your business contact details, photographs and testimonials.
Only include information you are entitled to publish. Consider whether photographs or text reveal someone’s identity, home address or other private details.
Search engines and other people may copy published information. Removing it from Brisk does not automatically remove copies held elsewhere.
Visitor enquiries
Where a customer website has an enquiry form enabled, Brisk receives the visitor’s name, postcode, contact details and enquiry information, stores it temporarily and sends it to the business’s designated email address.
We handle this information on the business’s behalf to deliver the enquiry. We also process limited technical information to prevent spam and abuse.
Brisk’s stored enquiry copy is deleted after 90 days, or sooner when the business’s Brisk account deletion is accepted. Copies delivered to the business’s inbox are managed by that business and may be kept for a different period.
For questions about how a business uses your enquiry, contact that business using the details on its website. You can also contact us about Brisk’s handling of the information.
Who receives information
We use specialist providers to operate the service. Depending on the activity, these include providers of:
- Website hosting, databases and file storage.
- Account authentication and security.
- Payment processing and billing.
- Email delivery and business email services.
They receive the information needed for their role. Some providers also have their own responsibilities for activities such as fraud prevention and financial recordkeeping.
Information included in a published website is available to the public. Enquiry information is shared with the business receiving the enquiry and the services used to deliver its email.
We may also disclose relevant information to professional advisers, authorities or other parties where necessary to meet a legal obligation or establish, exercise or defend legal claims.
International processing
Some service providers process information outside the UK, including in the United States.
[Before publication: confirm the relevant destinations and applicable UK transfer safeguards. Explain which safeguards are used and how someone can obtain information or a copy of them. Do not publish a generic assurance before these arrangements have been verified.]
How long we keep information
The following periods apply to information held in Brisk’s application, unless a legal obligation or an unresolved dispute requires specific records to be retained longer.
Scroll the table to read both columns.
| Information | Retention |
|---|---|
| Anonymous drafts and uploads | Scheduled for deletion 30 days after creation, unless claimed by an account |
| Drafts belonging to accounts that have never subscribed | Scheduled for deletion after 90 days without a meaningful saved content change; unchanged saves and sign-ins do not restart the period |
| Former subscribers’ website content and uploads | Retained for 12 months after the end of your last paid billing period, unless you delete your account sooner or actively resubscribe |
| Visitor enquiries | 90 days, or until the customer’s account deletion is accepted, whichever comes first |
| Trade or feature interest registrations | Deleted within 30 days after the requested notification is sent, or 12 months from registration if no notification has been sent; you can withdraw sooner |
| Support, privacy-request and complaint correspondence | 12 months after resolution, unless needed for an ongoing dispute or legal obligation |
| Showcase permission records | While the material is being used and for 12 months after that use ends |
We send a reminder 30 days before scheduled deletion of an account’s inactive unpaid draft or retained website content. The relevant expiry date is also shown in your account. We do not delete account-owned content until at least 30 days after the reminder has been successfully submitted for delivery to your verified account contact. A delayed reminder extends the date shown in your account. Provider acceptance does not guarantee inbox receipt. Deleting this content does not itself delete your login account. Active subscriptions, including manually unpublished websites, are excluded. The seven-day unpaid-renewal access window does not extend the last paid billing period. File removal may continue after the scheduled date, including during provider interruptions.
Basic account information remains while your account is open. You can request account deletion through your dashboard.
Financial records are normally retained for five years after the applicable 31 January Self Assessment filing deadline. Later transactions, unresolved billing issues or legal requirements may extend the period for particular records.
Completed account-deletion audit records are normally retained for 24 months. Limited technical identifiers used to prevent deleted websites from reappearing and to reserve previously used website addresses are retained indefinitely.
[Before publication: confirm routine log retention, backup and restoration periods, and any additional retained technical records. Include verified periods or meaningful retention criteria here.]
What happens when you delete your account
Once your deletion request is accepted, your website becomes unavailable through Brisk and account cleanup begins.
Deleting stored files and information held by service providers can take longer, particularly during service interruptions. Financial records and the limited records described above may remain after your account has been deleted.
Account deletion does not remove information already copied by website visitors, search engines or the businesses receiving enquiries.
Cookies and similar technologies
Brisk uses cookies and similar technologies to support account sign-in, security, draft access and onboarding progress.
Our own draft-access and onboarding-progress cookies last for up to 30 days. Authentication cookies have their own lifetimes.
Blocking necessary cookies may prevent sign-in or saved-draft features from working.
[Before publication: complete the deployed cookie check and add accurate authentication-cookie details or a linked cookie table. Update this section for the chosen analytics setup before tracking is enabled.]
Emails and optional publicity
We send emails needed to operate your account and service, including relevant billing, security and content-deletion notifications.
We do not send general promotional newsletters. If you ask to hear when a particular trade or feature becomes available, we use your email for that requested notification. You can withdraw the request by emailing us.
We ask for separate permission before featuring your website in our marketing. Declining does not affect your service. You can withdraw permission by emailing us; we will stop future use and remove material we control where reasonably possible. Copies shared by others may remain.
Your rights
Depending on the information and why we use it, you may have the right to:
- Ask for access to your personal information.
- Have inaccurate information corrected.
- Ask for information to be deleted.
- Ask us to restrict its use.
- Object to processing based on legitimate interests.
- Receive certain information in a portable format.
- Withdraw consent where we rely on it.
These rights have conditions and exceptions. Withdrawing consent does not affect processing that was lawful before withdrawal.
To make a request, email hello@brisksite.co.uk. We may need to verify your identity before acting.
Where we hold information on behalf of a customer business, we will help direct your request to that business and assist it where appropriate.
Questions or complaints
Please email hello@brisksite.co.uk if you have a question or concern about your information.
We will acknowledge a data protection complaint within 30 days, investigate it and explain the outcome.
You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk/make-a-complaint.
Changes to this notice
We will update this notice when our handling of personal information changes. The date at the top shows when it was last updated. Where a change materially affects you, we will bring it to your attention through an appropriate channel.