You are viewing our UK and European legal terms (for the UK, EU/EEA, Switzerland, the Crown Dependencies, and Gibraltar). If you are in the United States or another jurisdiction outside those territories, view our International version.
Privacy Policy
Bretalon Ltd (Company Number: 16253606)
Last updated: 18 October 2026
1. Who We Are
Bretalon Ltd (“Bretalon”, “we”, “us” or “our”) is a strategic research and advisory company registered in England and Wales.
| Detail | Information |
|---|---|
| Company name | Bretalon Ltd |
| Company number | 16253606 |
| Registered office | 71-75 Shelton Street, Covent Garden, London WC2H 9JQ |
| Data protection contact | [email protected] |
We are the data controller for personal data processed through our website (bretalon.com) and our advisory services. This policy is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.
2. What This Policy Covers
This policy explains how we collect, use, store and share personal data when you:
- Visit our website
- Enquire about or use our services
- Communicate with us by email or other means
3. Personal Data We Collect
Data you provide directly:
| Category | Examples | When collected |
|---|---|---|
| Contact information | Name, email address, organisation, job title | Our contact form, email enquiries, service agreements |
| Enquiry details | The topic you choose and your message | Our contact form |
| Business information | Company details, project requirements | Service scoping, engagement onboarding |
| Communication records | Emails, messages, meeting notes | Correspondence with us |
| Payment information | Bank details, billing address | Invoicing |
Data collected automatically:
| Category | Examples | Mechanism |
|---|---|---|
| Technical data | IP address, browser type, operating system, pages requested | Server and network logs kept by our hosting and network providers |
We do not run analytics, advertising or tracking technologies on this website, and we set no cookies for ordinary visitors (see our Cookie Policy). Fonts and the news ticker are served from bretalon.com itself, so your browser does not contact Google or any other third party when you read our pages.
4. How and Why We Use Your Data
| Purpose | Legal basis (UK GDPR) | Data used |
|---|---|---|
| Responding to enquiries | Legitimate interests (Art. 6(1)(f)): answering business communications; or steps you ask us to take before a contract (Art. 6(1)(b)) | Contact information, enquiry details |
| Website operation and security | Legitimate interests: keeping the website available and secure | Technical data |
| Providing contracted services | Contract performance (Art. 6(1)(b)) | Contact, business and communication data |
| Service proposals and scoping | Legitimate interests: pre-contractual business activity | Contact and business information |
| Invoicing and payment | Contract performance; legal obligation (Art. 6(1)(c), tax and accounting) | Payment and contact information |
| Legal compliance | Legal obligation (Art. 6(1)(c)) | As required by law |
We do not send direct marketing without your consent, and you can object to direct marketing at any time.
5. Who We Share Data With
We do not sell personal data. We share it only as follows:
- Technology provider: PureTensor (PureTensor Ltd, England and Wales, and PureTensor, Inc., United States) hosts this website and runs, on our behalf, the inbox that receives website enquiries and emails sent to [email protected]. It acts as our data processor.
- Other service providers: Amazon Web Services (website hosting in London), Cloudflare (network delivery and security), FormSubmit (formsubmit.co, which relays contact-form messages by email) and Google (email hosting). They act as data processors under their data processing terms.
- Professional advisers: lawyers, accountants and auditors, under professional confidentiality obligations.
- Legal authorities: when required by law or in response to lawful requests from courts or regulators.
- Business transfers: if Bretalon Ltd is involved in a merger, acquisition or sale, your data may be transferred as part of that process, and we will tell you.
6. International Data Transfers
This website is hosted on servers in London. Some of our providers are based in the United States: PureTensor, Inc., FormSubmit, Google and Cloudflare. Where personal data goes to the United States, we rely on the UK-US Data Bridge for recipients certified under it, on the ICO’s International Data Transfer Addendum where a provider includes it in its data processing terms, and, for an enquiry you send us, on the transfer being necessary to take the steps you asked for before any contract (Art. 49(1)(b) UK GDPR).
7. Data Retention
| Data category | Retention period | Basis |
|---|---|---|
| Contact form enquiries | 2 years from last contact | Legitimate interests; deleted if no relationship follows |
| Client records | Duration of engagement plus 6 years | Legal obligation (Limitation Act 1980); tax records |
| Payment and invoicing data | 6 years from transaction | Legal obligation (tax and accounting) |
| Server and network logs | Up to 90 days | Security monitoring |
| Communication records | Duration of engagement plus 2 years | Legitimate interests; professional records |
We review retained data periodically and delete it when it is no longer needed for the stated purpose.
8. Your Rights
Under UK GDPR, you have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: request correction of inaccurate data
- Erasure: request deletion of your data
- Restriction: ask us to limit how we use your data
- Data portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests, and to direct marketing at any time
- Withdraw consent: where consent is the legal basis, withdraw it at any time
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
To exercise your rights, email [email protected], use our contact form, or write to Bretalon Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We will respond within one month. For more detail, see our Data Subject Rights page.
Complaints to us: if you are unhappy with how we have handled your personal data, please complain to us first by any of the routes above. We will acknowledge your complaint within 30 days, investigate it, and tell you the outcome without undue delay.
Complaints to the regulator: you can also complain to the Information Commissioner’s Office (ICO): ico.org.uk, 0303 123 1113.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (TLS), access controls and secure hosting. No online transmission is completely secure, but we take reasonable steps to protect your data from unauthorised access, loss or misuse.
10. Children’s Data
Our services are directed at businesses and professional clients, not individuals under 18. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this policy from time to time. The “Last updated” date at the top shows when it was last revised, and we will flag material changes on the website.
12. Contact
Email: [email protected]
Post: Bretalon Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ