Skip to main content

Privacy Policy

This Privacy Policy explains how Brilliant Digital® collects, uses, and protects your personal data when you visit brilliant.digital. We've written it in plain language - no unnecessary jargon.

If you have any questions, contact us at info@brilliant.digital or by post at: Bourne, Lincolnshire, PE10 0ZJ, United Kingdom.

1. Who we are

Data Controller: Brilliant Digital®
Address: Bourne, Lincolnshire, PE10 0ZJ, United Kingdom
Phone: 01778 428987
Email: info@brilliant.digital

We are responsible for deciding how and why your personal data is used when you interact with this website.

2. What data we collect and why

Contact form enquiries

When you submit an enquiry via our contact form, we collect:

  • Name - required, so we know who we're talking to
  • Email address - required, so we can respond to you
  • Company name - optional, to understand your business context
  • Phone number - optional, in case you'd prefer a call
  • Message - required, to understand your enquiry

Legal basis: Legitimate interest (responding to a business enquiry you've initiated) and your explicit consent, given by ticking the checkbox on the form confirming you're happy for us to store your details in order to respond.

Your form submission is processed by Formspark, a third-party form processing service. Your data is transmitted to and stored on Formspark's servers. We do not operate a separate database of contact form submissions - your data is held by Formspark subject to their Privacy Policy and retention schedule. You can request deletion at any time by contacting us.

A honeypot field is included on the form for spam protection. This is invisible to humans and captures no personal data - it simply helps us filter out automated bots.

Website analytics

We use Plausible Analytics, self-hosted on our own server at analytics.brilliant.digital. Plausible is a privacy-first analytics tool - it collects no personal data, sets no cookies, and does not track you across sites. We use it to understand aggregate traffic patterns (e.g. page popularity, referral sources) without ever identifying individual visitors.

Legal basis: Legitimate interest. No personal data is processed by our analytics.

Infrastructure and security

This website is hosted on Cloudflare Pages. Cloudflare provides our content delivery network (CDN), DNS, and DDoS protection. As part of standard internet infrastructure, Cloudflare may process your IP address when routing requests to our site. See Cloudflare's Privacy Policy for details.

Our contact form is protected by Cloudflare Turnstile, a bot detection tool. Turnstile may set a strictly necessary security cookie (cf_clearance) to verify that form submissions come from humans. This cookie is essential for the form to function securely and cannot be opted out of.

3. Third-party services

The following third-party services may be involved when you use this website. We've described what each one does and what data (if any) it touches.

Formspark

Processes and stores contact form submissions on our behalf. Receives your name, email, company, phone number, and message when you submit an enquiry. Based in the EU. See their Privacy Policy.

Cloudflare

Hosts this website and provides CDN and security services. May process your IP address as part of normal HTTP request routing. See Cloudflare's Privacy Policy.

Trust Index

We display a reviews widget powered by Trust Index. The widget loads assets from cdn.trustindex.io. As with any external request, your IP address is sent as part of the standard HTTP connection. Trust Index sets no cookies on your device. See Trust Index's Privacy Policy.

Google Maps

Some pages include a map showing our location. To protect your privacy, Google Maps is not loaded automatically - you'll see a placeholder with a "Load Google Maps" button. Google Maps only loads if you click that button. Once loaded, Google's own privacy policy applies. See Google's Privacy Policy.

Sanity CMS

We use Sanity as our content management system. Website content and images are served from cdn.sanity.io. Sanity does not collect or process any visitor data - it simply delivers content to your browser.

4. Cookies

We keep cookie use to a minimum. Here's a complete picture:

  • Cloudflare Turnstile (cf_clearance) - Strictly necessary. Set when you interact with our contact form to verify you're human. Cannot be disabled without breaking form security.
  • Analytics - None. Plausible Analytics is cookieless by design.
  • Marketing/tracking - None. We do not use advertising cookies, remarketing pixels, or behavioural tracking.

Because we only use one strictly necessary cookie (with no marketing or analytics cookies), we do not display a cookie consent banner - there's nothing to consent to beyond essential site security.

For full details, see our Cookie Policy.

5. International data transfers

Some of the third-party services we use may store or process data outside the UK or European Economic Area (EEA):

  • Formspark - operates within the EU. Your data remains within the EEA.
  • Cloudflare - a US-based company with global infrastructure. Cloudflare participates in the UK-US Data Bridge and EU-US Data Privacy Framework, providing adequate safeguards for international transfers.

Where data is transferred internationally, we ensure appropriate safeguards are in place in line with UK GDPR requirements.

6. How long we keep your data

We do not independently store contact form submissions - your data is held by Formspark per their retention policy. If you'd like your data deleted, contact us at info@brilliant.digital and we'll request deletion from Formspark on your behalf.

Our analytics data is aggregate and anonymised - there is no personal data to retain or delete.

7. Your rights under UK GDPR

Under UK data protection law, you have the following rights regarding your personal data:

  • Right of access - You can ask us what personal data we hold about you.
  • Right to rectification - You can ask us to correct inaccurate data.
  • Right to erasure - You can ask us to delete your data ("the right to be forgotten").
  • Right to restriction - You can ask us to limit how we use your data in certain circumstances.
  • Right to data portability - You can ask for your data in a machine-readable format.
  • Right to object - You can object to processing based on legitimate interests.
  • Right to withdraw consent - Where we process data based on your consent, you can withdraw it at any time without affecting anything done before withdrawal.

To exercise any of these rights, contact us at info@brilliant.digital. We'll respond within one calendar month.

8. Right to complain

If you're unhappy with how we've handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) - the UK's supervisory authority for data protection:

We'd always prefer to resolve concerns directly first - please do get in touch with us before escalating to the ICO.

9. Children's privacy

This website is not directed at children under the age of 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has submitted personal data through our site, please contact us and we'll delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time - for example, if we change the services we use or if the law changes. The "last updated" date at the top of this page will always reflect the most recent version. For significant changes, we'll update this page clearly so you can review what's changed.

Continued use of the website after changes take effect constitutes acceptance of the updated policy.

11. Contact us

For any questions about this Privacy Policy or how we handle your data:

Last updated: 24 March 2026