GDPR Compliance Statement

Last updated: June 19, 2026

brave-reach is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.

Data Controller

brave-reach acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.

Contact details:
Email: [email protected]
Address: 47 Merchant Street, Glasgow G1 2PX, United Kingdom

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to provide services you've requested
• Legitimate Interests: When processing serves our legitimate business interests while respecting your rights
• Legal Obligation: When required by law to process your information

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Providing requested services
• Complying with legal obligations
• Resolving disputes
• Enforcing our agreements

When personal data is no longer required, we securely delete or anonymize it.

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments
• Employee training on data protection
• Incident response procedures

International Data Transfers

If we transfer your personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant authorities
• Other legally approved transfer mechanisms

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children without parental consent.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: 47 Merchant Street, Glasgow G1 2PX, United Kingdom

We will respond to your request within one month. In complex cases, we may extend this period by two additional months with notification.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK.

ICO Contact: https://ico.org.uk

Updates to This Statement

We may update this GDPR Compliance Statement to reflect changes in our practices or legal requirements. We will notify you of significant changes through our website or by email.