Privacy Policy

This policy applies to this website only. It explains what information we collect when you visit the site or contact us through it, where that information is stored, how we use it and the choices you have.

It does not cover the software we build or operate for clients, or the apps and websites shown on our Work page. Each of those has its own terms, and any product we deliver carries its own privacy policy where one is needed.

You can send us information in two ways:

• Through the contact form, which asks for your name, company, email address, phone number, the service you are interested in, an approximate budget and a message. Only your name, email address and message are required.
• By emailing us directly at support@brightonsolution.com, in which case we receive whatever you include in the email together with your email address.

When you send the form, we also record a few technical details with your message so that we have context for it: the page you sent it from, the page that referred you to the site, your browser’s user-agent string, your browser language and time zone and, if your browser has one, the random visitor ID described under Website analytics. That ID links your enquiry to the page views and clicks recorded from the same browser.

We use this information to:

• Reply to your enquiry and answer your questions.
• Prepare an estimate or proposal if you ask for one, which may involve discussing your company, project and budget within our team.
• Keep a record of our correspondence so that we have the context if you come back to us later.
• Recognise and discard automated or abusive submissions.

We do not add you to a mailing list or send you marketing because you contacted us. If we follow up, it is about the enquiry you made.

When you press send, the form sends your message over an encrypted connection to Cloud Firestore, a database service that Google operates for us as part of Firebase. The submission is stored there until we delete it.

The database is configured so that visitors can add a new enquiry but cannot read, change or delete any. Only members of our team, signed in with a verified company account, can read submissions.

If the form cannot reach the database, it may offer to open your own email application instead, addressed to support@brightonsolution.com and pre-filled with what you typed. In that case nothing leaves your device until you choose to send that email, and the message travels through your own email provider.

To understand which pages are useful and how people find the site, we run our own first-party analytics. It uses no cookies and is not shared with advertisers. Each record is stored in Cloud Firestore and contains:

• A random visitor ID, created in your browser and kept in its local storage, so that repeat visits can be counted. On its own it does not identify you, but it is also stored with any contact-form enquiry you send from that browser.
• A session ID kept in your browser’s session storage, which changes after 30 minutes of inactivity or when you close the tab.
• The pages you view and their titles, the order in which you view them, how long you stay on each page and how far you scroll, and whether this is your first visit.
• The referring page and any campaign tags in the link you followed (UTM parameters).
• Your screen and browser-window size, device type (desktop, tablet or phone), browser and operating-system family, language and time zone.
• Clicks on key links, such as contact buttons, email links, project links and Google Play links, and whether a contact-form submission succeeded (never its contents).

We do not record your name, email address or what you type into the form as part of analytics, and we do not store IP addresses. Google’s infrastructure necessarily processes your IP address in order to deliver your requests to this site and to the database, as any web server does.

Analytics is switched off entirely when your browser sends a Global Privacy Control signal. In that case no visitor ID is created and no page views or clicks are recorded.

The site itself sets no cookies unless you accept Google Analytics. It does use storage built into your browser, which stays on your device:

Local storage

The random visitor ID used for analytics and, where a consent banner is shown, your choice about Google Analytics so that we do not ask again on every page.

Session storage

The session ID used to group the pages you view in one visit. Your browser removes it when the tab is closed.

Service worker

A small script that keeps copies of pages and files in your browser’s cache, so the site opens quickly and still works if your connection or our hosting has a problem. It does not send anything to us.

If we enable Google Analytics, a banner asks for your permission first. Only if you accept does Google Analytics (Firebase Analytics) load. It then sets Google Analytics cookies, such as _ga, to measure visits, and Google processes that data under its own terms and privacy policy. If you decline, or ignore the banner, Google Analytics never loads. When Google Analytics is not in use, no banner is shown.

We keep the number of services involved in running this site small. The ones that may handle your information are:

Firebase Hosting

Google’s hosting service, which stores and serves the website’s files and keeps standard request logs for security and reliability.

Cloud Firestore

Google’s database service, which stores contact-form submissions and the analytics records described above on our behalf.

Google Analytics

Optional. Used only if it is enabled and you accept it in the consent banner.

Email

The provider that hosts our mailbox, where email enquiries and our replies are stored.

The typefaces used on this site are bundled with the site when it is built and served from the same place as the rest of its files. Your browser does not request fonts from a third-party font service when you visit.

Where data-protection law such as the GDPR applies, we rely on the following grounds:

Steps before a contract

Handling your enquiry, answering your questions and preparing a proposal that you have asked for.

Legitimate interest

Keeping a record of our correspondence, measuring how the site is used through cookieless first-party analytics, protecting the site from abuse and running our business in an orderly way, where that does not override your own rights and interests.

Consent

Google Analytics, which runs only after you accept it, and any information you choose to send us that we have not asked for. You can withdraw consent at any time.

Legal obligation

Where we are required by law to keep or disclose information.

Contact enquiries

As long as we need them to deal with your enquiry and any work that follows from it. If a project goes ahead, correspondence is kept for the engagement and a reasonable period afterwards. If nothing comes of an enquiry, we delete it once it is no longer needed.

Analytics records

Page views and click records are deleted once they are 26 months old.

Google Analytics

Kept according to the data-retention setting of our Google Analytics property, if it is in use.

Hosting logs

Kept according to Google’s own schedule for Firebase Hosting, which we do not control.

You can ask us to delete your enquiry sooner at any time.

• Turn on Global Privacy Control in your browser or a privacy extension. Our analytics will then record nothing about your visits.
• Decline Google Analytics in the consent banner, or change your choice later with Analytics settings at the foot of every page.
• Clear this site’s data in your browser settings. That removes the visitor ID, your consent choice and the cached pages; a new random ID is created on your next visit unless analytics is switched off.
• Email support@brightonsolution.com to ask us to delete an enquiry or anything else we hold about you.

Analytics records do not contain your name or email address, so unless you have sent the contact form we cannot tell which of them relate to you. If you have, your enquiry is stored with the same visitor ID, which links it to the page views and clicks recorded from that browser, and we include those records when you ask for a copy of your data or for its deletion. Clearing site data or using Global Privacy Control is the most reliable way to stop analytics.

We never sell personal information, and we do not share it with anyone for their own marketing.

We share it only:

• With the service providers named above, to the extent needed for them to host the site, store enquiries and analytics, and run our email. They act on our instructions and may not use your information for anything else, except Google Analytics, which Google also processes under its own terms when you accept it.
• When we are required to by law, a court order or a public authority with the right to ask.

We work with clients worldwide, and Google and our email provider may store and process data in countries other than yours. That means your information may be processed outside the country you live in.

Where a transfer is subject to data-protection law, we rely on the safeguards that law provides, such as an adequacy decision or the standard contractual clauses our providers have put in place. Email us if you would like to know more about where your information is held.

Depending on where you live, you may have the right to:

• Ask for a copy of the personal information we hold about you.
• Have inaccurate information corrected.
• Have your information deleted.
• Object to, or ask us to restrict, how we use it.
• Receive the information you gave us in a portable format.
• Withdraw consent you have given, such as for Google Analytics.
• Complain to the data-protection authority in your country.

To exercise any of these rights, email support@brightonsolution.com. We may need to confirm your identity before acting on a request, and we will reply within the time the applicable law allows.

We take reasonable technical and organisational measures to protect the information we hold. The site is served only over HTTPS with strict security headers, database rules allow visitors to add records but not to read them, and access to enquiries and analytics is limited to our team through a verified company account.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your information has been compromised, tell us at support@brightonsolution.com so that we can look into it.

This website is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has sent us information through this site, email us and we will delete it.

This site links to other websites and to Google Play listings, including client websites and our own products and apps. Each has its own privacy practices, and this policy does not apply to them. Check their privacy policies before giving them any information.

We may update this policy as the site or the law changes. The date at the top of this page shows when it was last revised. If we make a change that materially affects how we use your information, we will say so clearly on this page.