Privacy Policy — Bridgeplay

Our commitment to your privacy

Bridgeplay takes data protection seriously. This policy explains what personal information we collect when you use our website or contact us, how we use it, how long we keep it, and what rights you have over it. We've written it to be readable — not a wall of legalese.

This policy applies to the Bridgeplay website and the services we provide. Bridgeplay is the data controller responsible for your personal data.

1. What data we collect

We collect only what's needed to respond to enquiries and improve the site. This includes:

Contact form submissions: When you fill out our contact form, we receive your name, email address, optional subject, and the message you write. We use this to reply to your enquiry.
Usage data: If analytics cookies are accepted, we collect anonymised information about pages visited, time on site, and general device/browser type. This data cannot identify you personally.
Cookie preferences: Your cookie consent choices are stored locally in your browser. We do not transmit these preferences to external servers.
Service correspondence: If you engage with us for a paid service, we retain any communications needed to fulfil that engagement — project notes, feedback, and deliverable discussions.

We do not collect payment card details directly. Any payment processing, if applicable, is handled by third-party providers under their own privacy policies.

2. How we use your data

Responding to enquiries: Contact form data is used solely to reply to your message. We do not add you to mailing lists without explicit consent.
Service delivery: If you hire us for a service, we use project-related information to complete the work and communicate with you about it.
Site improvement: Aggregated, anonymised analytics data helps us understand which content is useful and where the site could be clearer.
Legal obligations: In some circumstances we may be required to retain or disclose data to comply with applicable law. We will inform you where legally permitted to do so.

Legal basis for processing: Contact form data is processed on the basis of your consent (submitting the form). Service engagement data is processed on the basis of contractual necessity. Analytics data (where cookies are accepted) is processed based on your consent.

3. Data sharing and third parties

We do not sell personal data. We do not share it with advertising networks for profiling purposes. Limited sharing may occur in these situations:

Analytics providers: If analytics cookies are accepted, anonymised usage data may be processed by third-party analytics tools operating under data processing agreements.
Hosting infrastructure: Our web hosting provider processes traffic data incidentally as part of serving the website. This is governed by their own privacy commitments.
Legal requirements: We may disclose data when required by law, a court order, or to protect the rights and safety of others.

4. Data retention

Enquiry messages: Retained for up to 12 months after the last contact, or until you request deletion.
Service project data: Retained for the duration of the engagement plus a reasonable period (typically 24 months) for reference purposes.
Analytics data: Aggregated and anonymised; retained per the analytics provider's standard retention settings.

5. How we protect your data

Data is transmitted over encrypted HTTPS connections.
Access to personal data is limited to people who need it to do their job.
Cookie preferences are stored locally in your browser, not on our servers.
In the event of a data breach that is likely to result in significant risk to individuals, we will notify affected parties and relevant authorities within 72 hours where required by law.

6. Your rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

Right of access: You can ask us what personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete information.
Right to erasure: You can ask us to delete your data, subject to any legal retention requirements.
Right to data portability: Where technically feasible, you can request your data in a portable format.
Right to object: You can object to processing where our basis is legitimate interest.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please reach out via our Contact page. We aim to respond within 30 days.

Your rights and opt-out instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may: avoid filling out contact forms or any data-submitting features; disable cookies through your browser settings (see our Cookie Policy for more details); or contact us directly to request the deletion of any previously shared personal data. We respect your privacy choices. If you would like us to delete your data, please reach out via the details provided on our Contact page. We will process your request promptly.

7. Changes to this policy

We may update this policy occasionally to reflect changes in our practices or applicable law. When we do, we'll revise the "last updated" date at the top of this page. Continued use of the site following any update constitutes acceptance of the revised policy.