Privacy Policy
Bretalon Ltd (Company Number: 16253606)
Last updated: 12 February 2026
1. Who We Are
Bretalon Ltd (“Bretalon,” “we,” “us,” or “our”) is a strategic consultancy registered in England and Wales.
| Detail | Information |
|---|---|
| Company name | Bretalon Ltd |
| Company number | 16253606 |
| Registered address | 71-75 Shelton Street, Covent Garden, London WC2H 9JQ |
| Data protection contact | info@bretalon.com |
We are the data controller for personal data processed through our website (bretalon.com) and our consultancy services. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What This Policy Covers
This policy explains how we collect, use, store, and share personal data when you:
- Visit our website
- Enquire about or use our services
- Communicate with us by email, telephone, or other means
- Subscribe to our reports or publications
3. Personal Data We Collect
Data you provide directly:
| Category | Examples | When Collected |
|---|---|---|
| Contact information | Name, email address, phone number, job title, company | Contact forms, email enquiries, service agreements |
| Business information | Company details, project requirements | Service scoping, engagement onboarding |
| Communication records | Emails, messages, meeting notes | Correspondence with us |
| Payment information | Bank details, billing address | Invoicing |
Data collected automatically:
| Category | Examples | Mechanism |
|---|---|---|
| Technical data | IP address, browser type, operating system | Web server logs |
| Cookie data | Session identifiers (see Cookie Policy) | Strictly necessary cookies only |
We do not collect usage or analytics data. We do not use analytics cookies or tracking technologies on this website.
4. How and Why We Use Your Data
| Purpose | Legal Basis (UK GDPR) | Data Used |
|---|---|---|
| Responding to enquiries | Legitimate interest (Art. 6(1)(f)) — responding to business communications | Contact information, communications |
| Website operation and security | Legitimate interest — ensuring website availability and security | Technical data, server logs |
| Providing contracted services | Contract performance (Art. 6(1)(b)) | Contact, business, and communication data |
| Service proposals and scoping | Legitimate interest — pre-contractual business activity | Contact and business information |
| Invoicing and payment | Contract performance; legal obligation (Art. 6(1)(c) — tax/accounting) | Payment and contact information |
| Legal compliance | Legal obligation (Art. 6(1)(c)) | As required by applicable law |
We do not use your personal data for direct marketing without your explicit consent.
5. Who We Share Data With
We do not sell personal data. We share data only as follows:
- Professional advisers — Lawyers, accountants, and auditors, under professional confidentiality obligations
- IT service providers — Website hosting, email services, operating as data processors under our instructions and subject to data processing agreements
- Legal authorities — When required by law or in response to lawful requests from courts or regulatory bodies
- Business transfers — If Bretalon Ltd is involved in a merger, acquisition, or sale, your data may be transferred as part of that process, and you will be notified
6. International Data Transfers
Our website is hosted in the United Kingdom. Where data transfers outside the UK occur (for example, through email service providers), we ensure appropriate safeguards are in place, including:
- UK adequacy regulations (for transfers to countries with an adequate level of protection)
- International Data Transfer Agreement or Standard Contractual Clauses with UK Addendum
7. Data Retention
| Data Category | Retention Period | Basis |
|---|---|---|
| Contact form enquiries | 2 years from last contact | Legitimate interest; deleted if no ongoing relationship |
| Client records | Duration of engagement + 6 years | Legal obligation (Limitation Act 1980); tax records |
| Payment/invoicing data | 6 years from transaction | Legal obligation (tax and accounting requirements) |
| Server logs | 90 days | Security monitoring |
| Communication records | Duration of engagement + 2 years | Legitimate interest; professional records |
We review retained data periodically and delete it when no longer necessary for the stated purpose.
8. Your Rights
Under UK GDPR, you have the right to:
- Access — Request a copy of the personal data we hold about you
- Rectification — Request correction of inaccurate data
- Erasure — Request deletion of your data (“right to be forgotten”)
- Restriction — Request that we limit how we use your data
- Data portability — Receive your data in a structured, machine-readable format
- Objection — Object to processing based on legitimate interests
- Withdraw consent — Where consent is the legal basis, withdraw it at any time
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
To exercise your rights, contact us at info@bretalon.com or write to: Bretalon Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We will respond within one month. For detailed information about exercising your rights, see our Data Subject Rights page.
If you are unsatisfied with our response, you may lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk | 0303 123 1113
9. Security
We implement appropriate technical and organisational measures to protect your personal data, including encrypted communications (TLS), access controls, and secure hosting. No online transmission is completely secure, but we take reasonable steps to protect your data from unauthorised access, loss, or misuse.
10. Children’s Data
Our services are directed at businesses, not individuals under 18. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when the policy was last revised. Material changes will be communicated via a notice on our website.
12. Contact
Email: info@bretalon.com
Post: Bretalon Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ