Privacy Policy

Who We Are

This website is operated by Bigrise Ltd (Company No. 17072286). We are committed to protecting your privacy and handling your personal data responsibly and transparently.

For any questions about this privacy policy or how we handle your data, please contact us at [enable JavaScript to see email].

What Data We Collect

In most cases we collect personal data only when you provide it to us. The one exception is described below, under "If We Contact Your Business First". We collect data through:

• Contact form: we ask for your company name, email address, phone number (optional), and details about what you'd like help with. When you submit this form, the submission is sent to a function running on Cloudflare, which checks with Cloudflare Turnstile that it is not automated before delivering it to us by email through Resend, an email delivery provider. The details you send arrive in our email inbox. We do not add you to a marketing list
• Anti-spam checks and your IP address: the Cloudflare Turnstile check loads when the contact page or the Approach page opens, not only when you submit, so Cloudflare receives your IP address and basic browser information from the moment the page loads. When a form is submitted, the function that receives it also sees your IP address and uses it to limit how many submissions come from one connection. To do that it keeps a count against your IP address in Cloudflare KV, Cloudflare's temporary storage. That record holds a number and your IP address, never the details you submitted, and it expires on its own within the hour
• "Ask a question" form: on the Approach page you can send a question without giving a company name or a phone number. We ask only for your email address and the question itself. It goes the same way as the contact form, through the same Cloudflare function and the same Turnstile check, and arrives in our email inbox. We use it to answer your question and for nothing else

We do not collect sensitive personal data such as health information, political opinions, or biometric data.

If We Contact Your Business First

Sometimes we get in touch with a business before it has contacted us. We run systems that look for businesses that may want the kind of work Bigrise does, based on things they have published: a job advert, a tender, an article, or the services described on their website. When one looks like a good fit, we look for published information about the business and a published way to contact it.

In doing that we may note the name, job title and work email address or phone number of the person who appears to run the relevant part of the business. We take these only from public sources: the company's own website, Companies House, and occasionally a trade article or the company's page on a professional network. We do not buy lists, we do not guess email addresses, and we do not use personal email addresses. We follow the rules on electronic marketing: where the law requires consent before we email a business, we do not email it without that consent, and where it does not, we may email a published business address.

We use what we note for one purpose: a single, relevant approach about work we think could help. Our legal basis is legitimate interests, which UK law recognises for business to business marketing. We keep what we noted for as long as we have a business reason to, we review what we hold regularly, and we remove details we no longer need. If a conversation starts, the retention periods below apply.

You can say no at any time. Reply to the email, or contact us using the details below, and we will not contact you again. We keep your details on our do not contact list, and nothing more than we need in order to honour that.

How We Use Your Data

We use the personal data you provide for the following purposes:

• To respond to enquiries submitted through our contact form, and to answer questions sent through the Approach page
• To provide practical guidance based on the business information you share with us
• To make a single, relevant approach to a business that has published something suggesting our work could help, as described under "If We Contact Your Business First"

We will never sell your personal data to third parties. We will never share your email address with other companies for their marketing purposes.

Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

• Steps at your request: when you send us an enquiry or a question, we use your details to reply to it and to discuss whether we can help
• Legitimate interests: we may use your data to improve our services and website, and to make a single business approach as described under "If We Contact Your Business First", provided this does not override your rights

How We Store and Protect Your Data

Your personal data is stored securely using industry-standard measures. We use reputable third-party services that comply with UK GDPR requirements and maintain appropriate security certifications.

We retain your data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Specifically:

• Contact form enquiries and questions: enquiries and questions both reach us as email, so the information you submit is held in our business email inbox. We keep it while we are dealing with your enquiry and for a period afterwards, in case you come back to us or a question arises about what we discussed. Once there is no longer a reason to keep it, we remove it
• Call and meeting notes: if we speak by phone or video call, we keep any notes or follow-up information on the same basis as enquiries above
• Business approaches: details we note about a business contact from public sources are kept for as long as we have a business reason to hold them, reviewed regularly, and removed when no longer needed. Do not contact requests are kept for as long as we make business approaches, so that we honour them
• Client engagements: if we work with you, we may keep your business information for as long as is required, depending on the work, the client and our business duties
• Google Analytics data: Google holds this for 14 months, which is the setting on our account, and deletes it after that

If you would like your data deleted sooner, you can contact us at any time using the details below.

Analytics and Cookies

We use Google Analytics 4 to see how the site is used: which pages people read, how long they stay, and roughly where in the world they are (country or city level, not an address). It does this by setting a cookie in your browser that gives your visit an ID, and it processes your IP address.

That is not your name or your email, but it is still information about you, so we ask before we load it. You can accept or decline when you first visit the site, using the cookie banner.

If you decline, none of it happens. You can change your mind at any time using the "Cookie Settings" link in the footer of any page, which also deletes the analytics cookies already on your device.

Your choice itself is stored in your browser, not in a cookie, under the name cookie-consent. It holds one word, either accepted or declined, so the banner knows not to ask again. It stays until you clear your browser data or change your choice. We cannot see it and it is never sent to us.

The contact form also uses Cloudflare Turnstile to check you are a person and not a bot. Turnstile may set its own cookie in your browser for that check. It is set by Cloudflare, we do not read it, and it is used only to stop automated spam reaching the form.

You can learn more about how Google handles analytics data at Google Analytics privacy overview.

Your Rights Under UK GDPR

Under UK data protection law you have the following rights regarding your personal data:

• Right of access: you can request a copy of the personal data we hold about you
• Right to rectification: you can ask us to correct any inaccurate or incomplete data
• Right to erasure: you can request that we delete your personal data (also known as the "right to be forgotten")
• Right to restrict processing: you can ask us to limit how we use your data
• Right to data portability: you can request your data in a commonly used, machine-readable format
• Right to object: you can object to our processing of your data for certain purposes
• Right to withdraw consent: if you've given consent for us to process your data, you can withdraw it at any time

To exercise any of these rights, please contact us at [enable JavaScript to see email]. We will respond within one month. If your request is complex, or you have made several, we may extend that by up to two further months, and we will tell you why. If we need to confirm who you are, or ask you something to narrow the request down, that pause does not count towards the time.

How to Complain to Us

If you are unhappy with how we have handled your personal information, please tell us. You can use our contact form, or email or phone us using the details at the bottom of this page.

We will acknowledge your complaint within 30 days of receiving it, look into it, and tell you the outcome without undue delay. You can also complain to the Information Commissioner's Office at any time, and you do not have to come to us first.

Third-Party Services

We use the following third-party services to help operate this website and deliver our services:

• Google Analytics 4 (website analytics: only loaded with your consent via our cookie banner)
• Google Workspace (our business email, where contact form enquiries arrive and are kept)
• Cloudflare Turnstile (anti-spam verification on our contact form: Turnstile may process your IP address and browser data to verify you are not a bot. See Cloudflare's Privacy Policy for details)
• Resend (email delivery). Resend sends your contact form enquiry to our inbox, so it processes the details you submitted as part of delivering that email
• Cloudflare (hosting for this website, and the function that receives contact form submissions)

We choose providers that we understand to meet UK data protection requirements, and we keep that under review. We do not share more data with them than they need in order to provide their service.

International Data Transfers

The following third-party services we use are based in the United States and may process your data outside the UK:

• Google (Analytics, Workspace): Google operates under a UK GDPR data processing agreement and is certified under the UK Extension to the EU-US Data Privacy Framework, the arrangement the UK government recognises for sending personal data to certified US companies
• Cloudflare (hosting, Turnstile, and the function that receives contact form submissions): Cloudflare is certified under the same UK Extension. See their privacy policy for details
• Resend (email delivery). Resend is based in the United States, so your enquiry passes through a US provider on its way to our inbox. Resend acts as our processor for sending that email, and our contract with them uses the UK Addendum to the standard contractual clauses approved for this purpose

We only use providers that maintain appropriate safeguards for international data transfers as required by UK data protection law, and we check that those safeguards are still in place.

Children's Privacy

Our contact form is designed for business owners and professionals. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from someone under 18, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

How to Contact Us

If you have any questions about this privacy policy, want to exercise your data rights, or have concerns about how we handle your personal information, please contact us:

Email: [enable JavaScript to see email]
Phone: [enable JavaScript to see phone]
Business: Bigrise Ltd (Company No. 17072286)
Registered in: England and Wales
Registered Office: 45 Gold Street, Suite 913, Northampton, NN1 1RA, United Kingdom
ICO Registration: ZC103530

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk.