Effective date: 14 August 2026
This is the privacy policy we are currently adhering to. It reflects the personal data we actually process. The wording is under ongoing review with our solicitor and may be refined; when material changes are made, we will update the effective date above. If you have any questions in the meantime, please contact us at hello@bristechtonic.co.uk.
1. Who we are
BrisTechTonic is a trading name of Bryley Ltd, a company registered in England and Wales (company number 13175466, registered office Paintworks, Bristol, BS4 3AS, United Kingdom). We are a UK SEO and digital marketing consultancy. For the personal data described in this policy, Bryley Ltd is the data controller, except where we act as a processor on behalf of a client or partner agency (see section 9).
If you have any questions about this policy or how we handle your personal data, contact us at hello@bristechtonic.co.uk or write to us at the registered office above. You can also reach our data protection contact at the same address.
2. What this policy covers
This policy explains how we collect and use personal data about people we deal with as a business: visitors and enquirers on our website, people who request a free visibility check (our teardown tool), our clients and their staff contacts, business prospects we contact, and our suppliers and partners. Our own employees are covered by a separate staff privacy notice. Where we process data on behalf of a client (for example running their marketing analytics), that client is the controller and section 9 applies.
Our free visibility check runs on a dedicated site at check.bristechtonic.co.uk. That site is operated by us and this policy applies to it in full.
3. The personal data we collect, and why
Website visitors and enquirers
If you contact us through our website, complete our contact form, or request a free SEO audit by booking a discovery call, we collect the details you give us, typically your name, email address, website and a short description of your business. We use this to respond to you and, where relevant, to prepare and send the audit or proposal you asked for. Lawful basis: legitimate interests, and steps taken at your request prior to entering into a contract.
Free visibility check (the teardown)
If you request a free visibility check through check.bristechtonic.co.uk, we collect the details you enter: your website address, your work email, your first name, and optionally your firm name. We use these to run the check, to send you the resulting report, and to follow up about a discovery call if you have asked us to.
To produce the report, our system carries out an automated analysis of the website address you submit. This looks at publicly available signals about that website, for example how it appears in Google search and in AI answer tools, its technical setup and page performance, and how it compares with similar businesses. This analysis is of publicly accessible information about a business and its website. It is not an analysis of your customers or their personal data.
The report is generated automatically, but it does not make any decision that produces legal or similarly significant effects for you. It is an informational summary that a person then uses as the basis for a conversation. Lawful basis: steps taken at your request prior to entering into a contract, and our legitimate interests in introducing our services. If you also ask us to follow up, we rely on your consent for that follow-up, which you can withdraw at any time.
Where you optionally choose to grant us read-only access to your own Google Analytics or Google Search Console so we can include your real performance data, we access that data only to prepare your report, we do not change anything, and you can remove our access at any time.
Clients and their staff contacts
When you become a client, or are a contact at a client, we hold your name, work email, phone, company details, and the history of our dealings (deals, notes, correspondence). We use this to deliver our services, manage the relationship, send reports, and handle billing. Lawful basis: contract, and legitimate interests in managing the business relationship. Billing records are also kept to meet our legal accounting obligations.
Business prospects we contact
We carry out business-to-business outreach. If we have contacted you as a decision-maker at a UK business, we obtained your professional contact details (name, job role, work email and company information) from publicly available professional sources and reputable business-data providers, including Apollo, LinkedIn and DataForSEO. We process these details to introduce our services, under our legitimate interests in B2B marketing, and consistent with the Privacy and Electronic Communications Regulations for corporate subscribers. Every message we send tells you how to stop hearing from us, and you can object at any time using the unsubscribe link in any email or by contacting us. If you object, we add you to a permanent suppression list so we do not contact you again. We keep prospecting research data for up to 180 days unless you become a client or ask us to stop.
Suppliers and partners
We hold contact and account details for our suppliers and partner agencies to manage those relationships and meet our contractual and accounting obligations.
4. Analytics, meetings and AI
Client website analytics
To deliver our SEO and reporting services we access aggregate performance data from a client’s own analytics and search tools (for example Google Analytics and Google Search Console). This is aggregate, site-level data. We do not collect the client’s own website visitors’ personal data.
Meeting recordings
We may record, transcribe and summarise calls and meetings for note-taking and follow-up, using a third-party meeting-assistant tool. The person recording will make this clear at the start of the meeting. Lawful basis: legitimate interests. You can ask us not to record.
AI-assisted processing
We use trusted AI tools (including Anthropic’s Claude) to help draft and analyse documents such as reports and summaries, and to help generate the free visibility check report described in section 3. Personal data is only ever used here as context for the same purpose it was collected for, our AI provider does not use our inputs to train its models, and we do not use AI to make solely automated decisions that have legal or similarly significant effects on you.
5. Who we share your data with
We do not sell your personal data. We share it with service providers who process it on our behalf under contract (our sub-processors). For the free visibility check and our wider services these currently include:
- HubSpot — our CRM, which stores your enquiry and contact record.
- DataForSEO and Google (including Google PageSpeed Insights and Google Places) — search, ranking and performance data used to analyse the website you submit.
- Anthropic (Claude) — our AI provider, which helps generate the report. Our inputs are not used to train its models.
- Cloudflare — provides the anti-bot check (Turnstile) on the check form, which processes your IP address and browser signals to tell humans from bots.
- Google Ads / Google Analytics — advertising measurement, as described in section 10.
- Our hosting (SiteGround for the main site, Google Cloud for the visibility-check platform), email-delivery and accounting / payment providers.
A current and complete list of sub-processors is available on request. We may also disclose data where required by law.
6. International transfers
Our primary data storage is in the European Union. Some of our providers are based outside the UK and EU. Where personal data is transferred internationally, we rely on an approved safeguard, such as the UK extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement or the UK Addendum to the standard contractual clauses. [The specific mechanism for each provider is being confirmed as part of legal review.]
7. How long we keep your data
| Data | Retention |
|---|---|
| Prospecting research data | Up to 180 days, unless you become a client |
| Opt-out / suppression list | Kept permanently (this is the record of your opt-out) |
| Enquiry and lead data | While the enquiry is live, then reviewed periodically |
| Free visibility check reports | Up to 24 months, then deleted, unless you become a client |
| Free visibility check request logs (technical logs of a submission) | 90 days |
| Client and CRM records | For the relationship, then up to 6 years (limitation period) |
| Accounting and billing records | 6 years (Companies Act / HMRC) |
| Reports and client history | For the duration of the client relationship |
| Backups | 90-day rolling window |
When a retention period ends, we delete or anonymise the data. You can ask us to delete your visibility-check report and the details you submitted at any time by emailing hello@bristechtonic.co.uk, and we will do so unless we are required to keep a record for a legal reason.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data, where the law allows;
- restrict or object to our processing, including objecting to direct marketing at any time;
- ask us to transfer your data (portability), where applicable;
- withdraw consent where we rely on it.
To exercise any of these, contact us at hello@bristechtonic.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we would welcome the chance to resolve your concern first.
9. When we act as a processor
For some services we process personal data on behalf of a client or a partner agency, for example when we run a client’s marketing intelligence dashboard. In those cases the client is the data controller and we act as a processor (or sub-processor) under a data processing agreement, processing the data only on their instructions. That data is held in an access-controlled, EU-hosted environment, and for regulated clients in a database dedicated to them. We do not ingest their customers’ personal data, financial data or special-category data.
10. Cookies, advertising and security
Our website uses cookies as described in our cookie notice.
Advertising and measurement
Some visitors reach our free visibility check by clicking one of our ads. When you arrive from an ad, we store identifiers from the ad click (such as a Google click identifier, “GCLID”) and campaign tags in first-party cookies on the bristechtonic.co.uk domain, so we can understand which campaigns are working and measure whether a check request resulted. These advertising and analytics cookies are only set where you have given consent through our cookie banner, in line with Google Consent Mode.
If you request a check and later become a qualified lead or a customer, we may upload a record of that conversion back to Google Ads so the advertising is measured accurately. Where we do this, your email address is cryptographically hashed before it is sent, and it is matched against the original ad click. This is done under your consent for advertising cookies. You can withdraw consent at any time through the cookie banner, and you can object to this processing by contacting us.
Security
We take appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, least-privilege connections to any systems we are given access to, and anti-abuse checks on our public forms.
11. Changes to this policy
We may update this policy from time to time. The effective date at the top shows when it was last revised, and we will highlight material changes where appropriate.
Contact details
Email: hello@bristechtonic.co.uk
Registered address: Paintworks, Bristol, BS4 3AS, United Kingdom
Phone: 01172 052 046
Data protection contact: Available at the registered office address above