Template notice. This is a working template fitted to Bridgefront's planned operations as a UK Limited Company offering services on the Spain corridor. It will be reviewed and finalised by a UK solicitor before launch. Items marked [placeholder] are pending confirmation.
1. Who we are
Bridgefront LTD ("Bridgefront", "we", "us") is a private limited company registered in England and Wales.
- Registered office: 128 City Road, London EC1V 2NX, United Kingdom.
- Companies House number:
[number]. - VAT registration number:
[if applicable]. - ICO registration number:
[if applicable]. - Contact for privacy matters: bridgefront@bridgefront.co.uk.
We are the controller of the personal data described below. We do not sell personal data and we do not use it for automated decision-making with legal effects.
2. What we collect, why, and on what legal basis
We only collect the personal data we need to operate the website and respond to enquiries.
- Contact form submissions (name, work email, company, country, area of interest, timeline, message). Legal basis: legitimate interests (responding to your enquiry) and, where you opt in, consent for the newsletter.
- Newsletter subscriptions (email, language preference, timestamp, opt-in record). Legal basis: consent. We use double opt-in.
- Booking a discovery call via Cal.com (name, email, time slot, any context you share). Legal basis: performance of a step taken at your request prior to entering a contract.
- Analytics (aggregated, non-cookie page-view data via Cloudflare Web Analytics). Legal basis: legitimate interests in understanding traffic. No tracking cookies are set.
- Server logs (IP address, user agent, request path) for security and abuse prevention. Legal basis: legitimate interests in keeping the service secure.
3. How long we keep it
- Contact form messages: up to
[24 months]after the last interaction, then deleted. - Newsletter subscribers: until you unsubscribe. Consent records retained for
[6 years]after unsubscribe to evidence lawful basis. - Booking records: as long as Cal.com retains them; we keep our own copy for the duration of the engagement plus
[6 years]for tax/audit purposes. - Analytics: aggregated data only, retained per Cloudflare's published retention.
- Server logs: 7 days by default.
4. Who we share data with (processors)
We use a small set of vendors to run the website and respond to you:
- Cloudflare, Inc. — hosting, DNS, edge functions, analytics, anti-spam (Turnstile). Data processed in Cloudflare's global edge network.
- Resend — transactional email delivery for contact form notifications.
- Buttondown — newsletter subscription management and double opt-in.
- Cal.com — discovery-call booking.
- GitHub — source-code hosting and deployment pipeline (does not process visitor personal data).
Where any of these vendors process personal data outside the UK or EEA, we rely on UK/EU Standard Contractual Clauses or equivalent safeguards. A current list of sub-processors is available on request at bridgefront@bridgefront.co.uk.
5. Cookies and tracking
bridgefront.co.uk does not set tracking cookies. We use Cloudflare Web Analytics, which measures aggregate traffic without cookies or fingerprinting. See our Cookies Policy.
6. Your rights
Under UK GDPR and (where applicable) EU GDPR you have the right to:
- Access the personal data we hold about you.
- Ask us to correct or delete it.
- Object to or restrict our processing.
- Receive your data in a portable format.
- Withdraw consent at any time (this does not affect lawfulness of processing already carried out).
- Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
To exercise any of these rights, email bridgefront@bridgefront.co.uk. We respond within 30 days.
7. Security
We rely on Cloudflare's edge security (TLS, WAF, rate limiting, Turnstile), least-privilege secret management, and minimal data retention. We do not store payment information on this site.
8. Changes to this policy
We update this policy when our processing changes or when we add new vendors. The "Last updated" date at the top reflects the most recent change. Material changes are notified to active newsletter subscribers by email.
9. Contact
Bridgefront LTD
128 City Road, London EC1V 2NX, United Kingdom
bridgefront@bridgefront.co.uk