Privacy Policy

We are committed to protecting your personal information and take your right to privacy very seriously. This Privacy Policy is applicable to this website and to other websites owned and operated by Bravr Limited.

Data Controller Information

Bravr Ltd

Company Registration Number: 6045335

VAT ID: GB 917 288 301

Registered Address: 33a Cambridge Green, London, SE92AN, United Kingdom

Scope of This Policy

This Privacy Policy describes how we collect, use, store, and protect your personal data when you access or use our website (bravr.com), referred to as the “Service”. By accessing or using the Service, you consent to the collection, use, and disclosure of your information in accordance with this Privacy Policy.

Information We Collect

We collect the following types of personal data:

1. Information You Provide Directly

Contact information (name, email address, phone number)
Communications and correspondence
Information submitted through forms, surveys, or applications
Account credentials and preferences

2. Information Collected Automatically

Device information (IP address, browser type, operating system)
Usage data (pages visited, time spent, navigation patterns)
Cookies and similar tracking technologies
Location data (with your consent)

Lawful Basis for Processing

We process your personal data under the following lawful bases as specified in UK GDPR Article 6:

Consent: Where you have given clear consent for us to process your data for a specific purpose
Contract: Where processing is necessary for the performance of a contract with you
Legal Obligation: Where processing is necessary for compliance with a legal obligation
Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., website security, analytics, business operations)

Purposes of Processing

We use your personal data for the following purposes:

To provide and maintain our services
To respond to your inquiries and provide customer support
To improve our website and services through analytics
To communicate with you about updates, offers, and relevant information (with consent where required)
To comply with legal obligations
To protect the rights, property, and safety of Bravr Limited and our users
For marketing purposes (only with your explicit consent)

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Specific retention periods:

Account data: For the duration of your account plus 7 years for tax/legal purposes
Marketing data: Until you withdraw consent
Analytics data: 13 months (in line with cookie policy)
Correspondence: 6 years from last interaction

Data Sharing and Third Parties

We do not sell your personal data. We may share your information with:

Service Providers: Trusted third parties who assist in operating our website (hosting, analytics, payment processing)
Legal Requirements: Where required by law or to protect our legal rights
Business Transfers: In connection with a merger, acquisition, or asset sale

All third-party processors are subject to appropriate data protection agreements and security measures.

International Data Transfers

Your data may be processed outside the UK. When transferring data internationally, we ensure appropriate safeguards are in place:

UK adequacy decisions
Standard Contractual Clauses (SCCs)
UK International Data Transfer Agreement (IDTA)

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data (“right to be forgotten”)
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time where we rely on it
Automated Decision-Making: Right not to be subject to automated decision-making producing legal effects
Right to Lodge a Complaint: Contact the Information Commissioner’s Office (ICO)

To exercise these rights, please use the contact form available on our website. We will respond within one month in accordance with UK GDPR.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. For detailed information about our cookie usage and how to manage your preferences, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

Encryption of data in transit (TLS/SSL)
Secure server infrastructure
Access controls and authentication
Regular security assessments and testing
Staff training on data protection

While we take reasonable measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If we become aware of such collection, we will take steps to delete the information.

Data Protection Impact Assessments (DPIAs)

We conduct DPIAs for processing activities that are likely to result in high risks to individuals’ rights and freedoms, as required by UK GDPR Article 35.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last Updated” date. The revised policy will be effective 30 days after posting.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please use the contact form available on our website.

You may also lodge a complaint with the Information Commissioner’s Office at ico.org.uk/make-a-complaint/

Transparency Notes

Last Updated: 2026-03-16
Effective Date: 2026-04-15 (30-day notice period)