Privacy Policy

1. Who we are

Brytin Ltd, trading as Brytin Growth Labs, company number 14806911, registered in England and Wales, registered office 5 Cleveland Place West, Bath, BA1 5DG, is the controller of the personal data described in this policy. We are registered with the UK's data protection regulator, the Information Commission (formerly the ICO), under number ZC256170. Contact: hello@brytin.co.uk.

2. When this policy applies

It covers people who:

• visit our website;
• make an enquiry or book an audit;
• receive our business-to-business emails;
• work for our clients and suppliers.

When we run automation systems for our clients, we act as their processor. Their privacy notice then applies to their customers' data, not this one.

3. What we collect and where it comes from

• Enquiries and bookings: your name, work email, phone number, job title, company and what you tell us. This comes from you.
• Business contact data for outreach: the name, job title, work email and company of people at limited companies and LLPs. It comes from publicly available sources: company websites and the Companies House register.
• Clients and suppliers: contact details, contract and billing records, and correspondence.
• Website analytics: browser type, operating system, approximate country or region, and pages visited, collected by Vercel Web Analytics. It uses no cookies or persistent identifiers, and visits are counted in aggregate.

4. Why we use it, and our lawful bases

• Replying to enquiries and running audits: our legitimate interests, or steps you ask us to take before a contract.
• Delivering our services and billing: performance of a contract.
• Business-to-business marketing emails: our legitimate interests, which we have assessed and balanced against your rights. We email corporate addresses (limited companies and LLPs) only, and our emails tell you how to opt out.
• Accounting, tax and legal records: legal obligation.
• Website security and improvement: our legitimate interests.

5. Your right to object to direct marketing

You can object to our marketing at any time, and we will stop. Reply "no" or "unsubscribe" to any email from us, or email hello@brytin.co.uk. We keep a minimal record of your email address on a suppression list so that we do not contact you again.

6. AI-assisted processing

We may use AI tools to help research publicly available information about businesses and to draft emails. A person reviews every message before it is sent. No client personal data is entered into these tools. We do not make decisions about you with legal or similarly significant effects by automated means alone.

7. Who we share data with

Service providers that help us run our business, under contracts that protect your data:

• email and document hosting;
• website hosting and analytics;
• form handling and appointment scheduling;
• our CRM;
• AI research and drafting tools (see section 6);
• e-signature;
• payment processing by Stripe Payments UK Ltd, which handles card data. We never store card data.

We name any of these providers on request. We do not sell personal data.

8. International transfers

Some providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework for certified recipients), the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. Ask us for details.

9. How long we keep it

• Enquiries and audit notes that don't lead to a contract: 12 months.
• Outreach contact data: 12 months from collection, unless you reply.
• Suppression list: for as long as needed to respect your objection.
• Client and supplier records: for the contract, then as long as needed for legal, tax and accounting purposes and to deal with claims.

10. Security

Data sent to and from our website and providers is encrypted in transit (TLS). Our providers encrypt stored data under their own controls. We use multi-factor authentication where it is available, individual accounts and access controls.

11. Your rights

You can ask for access to, correction or erasure of your data. You can ask us to restrict processing, object to processing based on legitimate interests, or receive your data in a portable form. You can withdraw consent where we rely on it. Email hello@brytin.co.uk.

12. Complaints

If you are unhappy with how we have handled your data, please tell us first by emailing hello@brytin.co.uk with "Data protection complaint" in the subject, or by using the contact form on our website. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome. You can also complain to the Information Commission at ico.org.uk.

13. Changes

We update this policy when our practices change. The date at the top shows the current version.