Privacy Policy
Effective: 4 June 2026 Last updated: 4 June 2026
Brixial Technologies ("Brixial", "we", "us", "our") is a small, independent web engineering studio. This policy explains, in plain English, what information we collect through brixial.net, why we collect it, and how we handle it. If anything is unclear, email [email protected] and we'll explain.
1. Summary in 30 seconds
- No marketing cookies. No advertising trackers. No analytics that profile you.
- One form, one email. If you send us an enquiry, it goes to our inbox via a relay called Web3Forms and nowhere else.
- We don't sell or rent your data. Ever.
- You can ask us to delete your data at any time. We aim to respond within 30 days.
- This policy may change as the business grows. The "Last updated" date at the top reflects the current version.
2. Who we are
Brixial Technologies is a remote-first web engineering studio. For the purposes of UK GDPR, EU GDPR, and the California Consumer Privacy Act (CCPA / CPRA), Brixial is the data controller for any information you send us through this website.
Contact for any privacy matter: [email protected].
3. What we collect
We only collect information you choose to give us. Specifically:
3.1 Information you submit through the enquiry form
- Required: your name, your email address, and a short description of your project.
- Optional: your company name and an indicative budget range.
3.2 Information we receive automatically
- Server access logs kept by our hosting provider — your IP address, the URL you requested, the timestamp, and your browser's user-agent string. Used for security, abuse prevention, and basic troubleshooting only.
- No client-side analytics. The site does not run Google Analytics, Meta Pixel, Hotjar, or any equivalent. We do not build behavioural profiles of visitors.
3.3 Information we do not collect
- We do not collect payment information through this website.
- We do not collect special-category data (health, biometrics, political opinions, etc.).
- We do not knowingly collect information from anyone under 16 (see Children).
4. How we use it
We use the information you send us to:
- Reply to your enquiry and discuss the work you described
- Prepare a scope, proposal, and quote
- Carry out the engagement if we work together
- Keep a record of correspondence for tax, accounting, and audit purposes
- Detect and prevent abuse of the website (e.g. spam, scraping, attacks)
We do not use your information to send marketing emails, add you to a newsletter, or share it with third parties for their own marketing.
5. Legal basis (UK / EU GDPR)
Where UK GDPR or EU GDPR applies, the lawful bases on which we process your personal data are:
- Article 6(1)(b) — taking steps at your request before entering into a contract (replying to your enquiry, preparing a proposal).
- Article 6(1)(f) — our legitimate interest in running the studio safely (security, abuse prevention, internal record-keeping). We have balanced this against your rights and freedoms.
- Article 6(1)(c) — compliance with our legal obligations (e.g. tax law, which requires keeping correspondence relating to invoices for a set period).
6. Sharing & processors
We do not sell, rent, or trade your personal information. We share it only with a small number of data processors who help us run the studio:
| Processor | Purpose | Where it's based |
|---|---|---|
| Web3Forms | Relays the enquiry form submission to our inbox & applies basic spam filtering. | Global (see their policy) |
| Our email provider | Stores and delivers email correspondence with you. | Standard business email provider |
| Our VPS / hosting provider | Serves the website and keeps short-lived access logs. | Standard cloud provider (EU/US regions) |
We may also disclose information where required by law, a valid court order, or a regulatory authority — and only the minimum information necessary.
7. Retention
- Enquiry where we end up working together: we keep the correspondence for the duration of the engagement plus up to 7 years afterwards, to meet tax, accounting, and professional-liability requirements.
- Enquiry where we don't work together: we keep the correspondence for up to 24 months, then delete it. You can ask us to delete it sooner at any time.
- Server access logs: rotated on our hosting provider's standard schedule (typically 14–90 days).
8. Cookies & tracking
brixial.net does not set any cookies of its own. We do not use marketing cookies, advertising cookies, cross-site trackers, fingerprinting, or session-replay tools.
Our web font stylesheet is loaded from Google Fonts. Google may receive your IP address and user-agent when your browser requests the font files; according to Google's documentation, this connection does not set cookies and the data is not used for advertising. You can block this request at the browser level if you prefer — the site will fall back to a system font without breaking.
9. Hosting & server logs
This site is served as static HTML, CSS, and a small amount of JavaScript from a VPS we operate. The hosting environment may keep short-lived access logs containing your IP address, the URL you requested, the timestamp, and your browser's user-agent string. These logs are used solely for security, abuse prevention, and operational troubleshooting. They are not used for marketing and not shared with third parties except where legally required.
10. International transfers
Brixial works with clients and processors across the US, UK, EU, Canada, and Australia. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards under UK / EU GDPR — most commonly the European Commission's Standard Contractual Clauses, the UK Addendum to those clauses, and adequacy decisions where they apply (e.g. UK ↔ EU, UK ↔ US under the Data Privacy Framework, where relevant).
11. Security
We take reasonable, modern technical and organisational measures to protect the information you send us, including TLS for all traffic, strict security headers (HSTS, CSP, frame-ancestors), restricted access to our email inbox, and least-privilege access for processors. No internet service is perfectly secure, but we treat the small amount of data you trust us with the way we treat client production systems.
12. Children
brixial.net is a business-to-business website. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information through the website, email [email protected] and we will delete it.
13. Your rights
Depending on where you live, you have some or all of the following rights over the personal information we hold about you:
- Access — ask for a copy of the information we hold.
- Rectification — ask us to correct anything inaccurate.
- Erasure — ask us to delete your information (subject to legal retention requirements such as tax law).
- Restriction — ask us to pause processing while a query is resolved.
- Objection — object to processing based on legitimate interests.
- Portability — receive a copy in a structured, machine-readable format.
- Withdraw consent — where processing relies on your consent, you can withdraw it at any time.
- Lodge a complaint — with your local data protection authority. In the UK, that's the Information Commissioner's Office (ICO).
To exercise any of these rights, email [email protected] with the words "Privacy request" in the subject line. We respond within 30 days.
For California residents (CCPA / CPRA): you have the right to know what personal information we collect, to delete it, to correct it, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law.
14. Changes to this policy
We may update this policy as our processes change. When we do, we'll update the "Last updated" date at the top of this page and, where the change is material, we'll mention it on the homepage for a reasonable period. Previous versions are available on request.
15. Contact us
Brixial Technologies — Web Engineering Studio
Email: [email protected]
Web: brixial.net
This page is provided in good faith as a clear summary of how we handle the small amount of information you send us. It is not legal advice. For any specific compliance question, consult your own counsel.
