Privacy Policy

Who We Are

This website is operated by Bigrise Ltd (Company No. 17072286). We are committed to protecting your privacy and handling your personal data responsibly and transparently.

For any questions about this privacy policy or how we handle your data, please contact us at [enable JavaScript to see email].

What Data We Collect

We collect personal data only when you voluntarily provide it to us. We collect data through:

• Contact/assessment form — we ask for your company name, email address, business industry, team size, whether you currently use AI tools, and details about what you'd like help with. When you submit this form, your data is sent to and processed by Google Apps Script, then stored in a Google Sheet within our Google Workspace account
• Calendly booking widget — if you book a call through our website, Calendly collects your name, email address, and any information you provide in the booking questions. Calendly also sets its own cookies. See Calendly's Privacy Policy for details

We do not collect sensitive personal data such as health information, political opinions, or biometric data.

How We Use Your Data

We use the personal data you provide for the following purposes:

• To respond to enquiries submitted through our contact form
• To provide practical guidance based on the business information you share with us

We will never sell your personal data to third parties. We will never share your email address with other companies for their marketing purposes.

Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

• Consent — When you submit our contact form, you give us consent to contact you for the stated purposes
• Legitimate interests — We may use your data to improve our services and website, provided this does not override your rights

How We Store and Protect Your Data

Your personal data is stored securely using industry-standard measures. We use reputable third-party services that comply with UK GDPR requirements and maintain appropriate security certifications.

We retain your data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Specifically:

• Contact form enquiries — we retain the information you submit for up to 12 months after our last correspondence, after which it is securely deleted unless there is an ongoing reason to keep it
• Calendly bookings — booking data is held by Calendly according to their privacy policy. We retain any notes or follow-up information for up to 12 months after our last contact
• Google Analytics data — analytics data is anonymous and aggregated. Google retains it according to our account settings (currently 14 months), after which it is automatically deleted

If you would like your data deleted sooner, you can contact us at any time using the details below.

Analytics and Cookies

We use Google Analytics 4 to understand how visitors use this site. Google Analytics uses cookies to collect anonymous, aggregated data about website usage such as pages visited, time spent on the site, and general location (country/city level).

Google Analytics does not collect your name, email address, or other personally identifiable information through cookies. However, because it uses cookies to track browsing behaviour, we ask for your consent before loading it. You can accept or decline cookies when you first visit the site via our cookie consent banner.

If you decline cookies, no analytics data will be collected from your visit. You can change your preference at any time using the "Cookie Settings" link in the footer of any page.

You can learn more about how Google handles analytics data at Google Analytics privacy overview.

Your Rights Under UK GDPR

As a UK/EU resident, you have the following rights regarding your personal data:

• Right of access — You can request a copy of the personal data we hold about you
• Right to rectification — You can ask us to correct any inaccurate or incomplete data
• Right to erasure — You can request that we delete your personal data (also known as the "right to be forgotten")
• Right to restrict processing — You can ask us to limit how we use your data
• Right to data portability — You can request your data in a commonly used, machine-readable format
• Right to object — You can object to our processing of your data for certain purposes
• Right to withdraw consent — If you've given consent for us to process your data, you can withdraw it at any time

To exercise any of these rights, please contact us at [enable JavaScript to see email]. We will respond to your request within 30 days.

Third-Party Services

We use the following third-party services to help operate this website and deliver our services:

• Google Analytics 4 (website analytics — only loaded with your consent via our cookie banner)
• Google Sheets and Google Apps Script (to securely store and process contact form submissions within our Google Workspace account)
• Calendly (to allow you to book calls — Calendly may set its own cookies and process your data according to their privacy policy)
• Cloudflare Turnstile (anti-spam verification on our contact form — Turnstile may process your IP address and browser data to verify you are not a bot. See Cloudflare's Privacy Policy for details)
• Hosting providers (to serve this website)

We only work with providers that comply with UK GDPR and maintain appropriate data protection standards. We do not share more data with these providers than is necessary for them to perform their services.

International Data Transfers

The following third-party services we use are based in the United States and may process your data outside the UK:

• Google (Analytics, Sheets, Apps Script) — Google operates under a UK GDPR data processing agreement and relies on Standard Contractual Clauses for international transfers
• Calendly — Calendly processes booking data in the US under Standard Contractual Clauses. See their privacy policy for details
• Cloudflare (Turnstile) — Cloudflare processes verification data under Standard Contractual Clauses. See their privacy policy for details

We only use providers that maintain appropriate safeguards for international data transfers as required by UK GDPR.

Children's Privacy

Our contact and assessment form is designed for business owners and professionals. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from someone under 18, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

How to Contact Us

If you have any questions about this privacy policy, want to exercise your data rights, or have concerns about how we handle your personal information, please contact us:

Email: [enable JavaScript to see email]
Business: Bigrise Ltd (Company No. 17072286)
Registered Office: 45 Gold Street, Suite 913, Northampton, Northamptonshire, NN1 1RA, United Kingdom
ICO Registration: ZC103530

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk.