This Privacy Policy is general website and service wording for BrighouseSec / Brighouse Security Labs. It should be reviewed before production use. Brighouse Security Labs / BrighouseSec is a trading name operated from the United Kingdom. Registered office: Not applicable unless incorporated. Company number: Not currently incorporated as a limited company. Contact email: sales@brighousesec.com.
Data We Collect
When you use the website, submit an enquiry or work with BrighouseSec, we may collect:
- Name, email address and communications.
- Company, brand, website, domain, product or project details.
- Message content and information needed to agree scope.
- Service records, findings, report notes and support history.
- Billing, invoice and payment details if a paid engagement goes ahead.
- Technical metadata such as IP address, browser, device, timestamps, referral path and form submission metadata.
How We Use Data
We process personal data to:
- Respond to enquiries and decide whether a request fits the service.
- Agree authorised scope, timing, limitations and next steps.
- Provide passive external security snapshot services and generate reports.
- Provide customer support and maintain legal, security and accounting records.
- Prevent abuse, unauthorised testing, spam and unsafe use of the service.
UK GDPR Legal Bases
Depending on the context, we rely on the following legal bases under UK GDPR:
- Contract, where processing is needed to respond to a request, agree scope or provide services.
- Legitimate interests, including operating the website, handling enquiries, keeping proportionate business records and preventing misuse.
- Legal obligations, including tax, accounting, dispute, security and regulatory record keeping where applicable.
- Consent, where we ask for it for a specific optional purpose.
Contact Forms And Formspree
Contact form submissions are processed through Formspree so enquiries can be delivered to BrighouseSec. Formspree may process form fields and technical metadata needed to route, secure and manage the submission.
Do not submit passwords, credentials, secrets, private keys, sensitive personal data or unnecessary confidential information through the form.
Providers And Subprocessors
Providers may include Formspree, hosting providers, email providers, payment or invoicing providers if used, and professional advisers where necessary. Providers should only process data for the relevant service purpose.
Retention
Enquiries and project records are kept only as long as necessary for service delivery, customer support, legal, security, abuse prevention and accounting purposes. Records that are no longer needed should be deleted or anonymised where appropriate.
Your Rights
Under UK data protection law, you may have rights to access, correct, delete, object to, restrict or transfer your personal data. You may also withdraw consent where processing is based on consent.
You can contact sales@brighousesec.com to make a privacy request. You also have the right to complain to the UK Information Commissioner's Office.