Privacy Policy
Last updated: 19 October 2026
This Privacy Policy explains how BRENNOVAL LTD ("Brennoval", "we", "us") collects and uses personal data when you visit brennoval.com, contact us or work with us. We process personal data in line with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
1. Who we are
BRENNOVAL LTD is a private limited company registered in England and Wales under company number 17516226, with its registered office at Collingwood Buildings, 38 Collingwood Street, Newcastle, United Kingdom, NE1 1JF.
For the personal data described in this policy, Brennoval is the data controller. You can contact us about privacy at support@brennoval.com.
2. Personal data we collect
Data you give us. When you use the contact form or write to us, we receive the information you choose to send:
- your name and email address;
- your phone number and company name, if you provide them;
- the content of your message and any later correspondence.
Data collected automatically. When you send the contact form or record a cookie choice, our server stores your IP address, your browser's user-agent string and the time of the request. These records help us protect the form against abuse and show which cookie choice was made.
Data from client projects. If you become a client or a partner, we process the contact and project information needed to perform the contract, such as the names and business contact details of your representatives.
We do not ask for special category data (for example, health or biometric data) through this website. Please do not send identity documents or payment card details through the contact form.
3. How and why we use personal data
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and preparing a proposal | Steps taken at your request before entering into a contract; our legitimate interest in answering business enquiries |
| Performing a contract with you or your organisation | Performance of a contract |
| Protecting the website and the contact form against spam and misuse | Legitimate interests |
| Recording your cookie choices | Legal obligation (PECR) and legitimate interests |
| Measuring website use with analytics cookies | Consent |
| Keeping records and meeting legal, tax, anti-money laundering and sanctions obligations | Legal obligation |
We do not use personal data for automated decision-making or profiling that produces legal effects for you, and we do not sell personal data.
4. Who we share data with
We share personal data only where necessary and under written agreements that require the recipient to protect it:
- service providers that host the website and its database, and deliver our email (for example, Resend, operated by Resend, Inc.);
- project partners and payment providers, only when you have engaged us and only to the extent the project requires;
- professional advisers, such as lawyers and accountants;
- authorities, regulators and courts, where the law requires it.
5. International transfers
Some of our service providers process data outside the United Kingdom. Where data is transferred to a country without a UK adequacy decision, we rely on appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.
6. How long we keep data
- Enquiries that do not lead to a contract: up to 24 months after our last correspondence.
- Client and partner records: for the duration of the relationship and up to six years afterwards, to meet legal and accounting obligations.
- Cookie choice records: up to 12 months, after which we ask again.
- Technical security logs: up to 90 days, unless needed to investigate an incident.
After these periods, data is deleted or anonymised.
7. Cookies
We use cookies and similar technologies as follows:
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
brennoval.consent | Strictly necessary | Stores your cookie choice | 12 months |
brennoval.visitor-id | Strictly necessary | Anonymous identifier that links your cookie choice to our consent record | 12 months |
_ga, _ga_* | Analytics | Google Analytics 4 statistics on how the site is used, if enabled | Up to 24 months |
Strictly necessary cookies are always active because the site cannot record your choice without them. Analytics cookies are set only after you allow them in the cookie banner. You can change your choice at any time through the "Cookie settings" link in the footer.
8. Security
We use encrypted connections (HTTPS), access controls and restricted administrative access to protect personal data. If a personal data breach is likely to result in a risk to your rights, we will notify the Information Commissioner's Office and, where required, you.
9. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to erase your data;
- ask us to restrict or object to its processing;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent.
To exercise these rights, write to support@brennoval.com. We may ask you to confirm your identity and will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes, we will show a notice on this website.
11. Contact
BRENNOVAL LTD, Collingwood Buildings, 38 Collingwood Street, Newcastle, United Kingdom, NE1 1JF. Email: support@brennoval.com.