Home / Privacy notice
Last updated 2026-09-17 · Version 1.0
Privacy notice.
How Britbunch Limited collects and uses personal data on britbunch.co.uk: our enquiry forms, the cookies we set only if you accept them, and how we handle enquiries and client work.
1. Who we are
Britbunch Limited is the data controller for the personal data described in this notice. We are registered in England and Wales, company number 16266306. Our registered office is Container Unit 9, Denton Wharf, Mark Lane, Gravesend, Kent DA12 2PL. For anything about your data, email Sales@britbunch.co.uk. We have not appointed a data protection officer.
2. What this notice covers
The website britbunch.co.uk, its enquiry forms, the cookies and similar technologies used on it, and how we handle enquiries and client work for the £99.99 one-page website offer and our other services.
3. The information we collect
Free marketing audit form (homepage)
Your name, email address and the service you are interested in.
£99.99 website form (the website-in-48-hours page)
Your name, email address and a short description of your business. Your phone number is optional and only needed if you would rather we call.
Sent with either form
The address of the page you were on, the page that referred you, any campaign tags in the link you clicked (for example utm_source or a Meta click ID), a random reference number for the submission, and whether you accepted or rejected advertising cookies. If you accepted them on the £99.99 website page, the Meta cookie identifiers described in section 8 are included too. The £99.99 website form also sends the time you opened the page to our own server, which uses it to filter out automated submissions.
What you send us afterwards
Anything you send by email or phone once we have replied, including your completed brief: business details, text, images, and any logins needed to set up your domain and hosting.
Technical data collected by our hosting provider
Our hosting provider, Vercel, collects request data automatically: your IP address, an approximate location derived from it, browser and device information, and the pages requested.
With your consent only: Meta advertising data
If you click Accept on the consent bar, the Meta Pixel loads and sets the cookies described in section 8, and when you submit the £99.99 website form we send Meta a conversion event. That event contains a hashed (SHA-256) version of the name, email address and phone number you entered and of your country (taken from your IP address), together with your IP address, your browser user agent, the page address, the page that referred you and the Meta cookie identifiers, so that Meta can match the event to a Meta account and report that our advert led to an enquiry. If you click Reject, or make no choice, none of this is loaded or sent.
4. Why we use it and our lawful basis
| Purpose | Data | Lawful basis (UK GDPR Article 6) |
|---|---|---|
| Replying to your enquiry and quoting or booking the £99.99 build | Form data, correspondence | 6(1)(b): steps at your request before a contract |
| Delivering the website and setting up your domain and hosting | Brief, business content, provider logins | 6(1)(b): contract |
| Keeping accounts and tax records | Invoices, correspondence | 6(1)(c): legal obligation (company and tax records) |
| Running and securing the website | Technical and log data | 6(1)(f): legitimate interests (site security and performance) |
| Measuring and improving our Meta advertising, and showing you adverts on Meta platforms | Cookie IDs, conversion events, hashed name, email, phone and country, IP address, user agent | 6(1)(a): consent, given through the consent bar; PECR regulation 6 consent for the cookies |
You do not have to give us your details, but we cannot reply to an enquiry without them. We do not send newsletters or marketing emails; if that ever changes, we will ask for your consent first. We do not use automated decision-making that has legal or similarly significant effects on you.
5. Who we share it with
We do not sell personal data. We share it with the following recipients, each for the purpose stated.
- Web3Forms (operated by Web3Creative) receives form submissions and forwards them to our mailbox. Web3Creative operates from India and uses Amazon Web Services (US-East region, including Amazon SES for email), Cloudflare, Hetzner (EU) and the spam-filtering services CleanTalk and Akismet. Web3Forms retains submissions for up to three years under its own policy. Transfers are covered by Standard Contractual Clauses with the UK Addendum under Web3Forms' Data Processing Agreement. See Web3Forms' privacy policy.
- Vercel Inc., our hosting provider, hosts the website and processes request logs in the United States and the other jurisdictions where Vercel operates. Vercel states in its privacy notice that it is certified under the UK Extension to the EU-US Data Privacy Framework. See Vercel's privacy notice.
- Meta Platforms Ireland Limited and Meta Platforms, Inc. (USA) receive pixel and Conversions API data only if you accept advertising cookies. Meta Platforms, Inc. acts as our processor for matching and as joint controller with us for event data. Transfers are covered by Meta's UK Data Transfer Addendum. Meta's own privacy policy applies to Meta's use of the data on its platforms: Meta privacy policy.
- Hostinger (Hostinger International Ltd) hosts the Sales@britbunch.co.uk mailbox that receives your enquiry and our replies. See Hostinger's privacy policy.
- Domain and hosting providers you choose. We set up your account with them on your instruction. They are independent controllers under their own terms.
- Professional advisers, HMRC and authorities where the law requires.
6. International transfers
Some of the recipients above are outside the UK: Web3Forms (India, the United States and the EU), Vercel (the United States) and Meta (the United States). The safeguards are the ones named in section 5. Copies of the relevant addenda are available on request.
7. How long we keep it
These are our retention periods.
- Enquiries that do not go ahead: 12 months from our last contact with you, then deleted from our mailbox and from Web3Forms.
- Client records (brief, invoices, correspondence): six years from the end of the financial year they relate to, the period a limited company must keep its records for.
- Your consent choice, as recorded with an enquiry: for as long as the consent is in force and for two years afterwards.
- Web3Forms' own policy: submissions are deleted automatically after a maximum of three years.
8. Cookies and similar technologies
Nothing that needs consent is set until you choose. On pages where we measure our advertising (currently the £99.99 website page) a consent bar offers two equal choices, Accept and Reject. If you accept, the Meta Pixel loads and sets the cookies below. If you reject, or make no choice, no Meta code loads, no Meta cookies are set and nothing is sent to Meta. The forms work the same either way.
| Name | Set by | Purpose | Category | Kept for |
|---|---|---|---|---|
bb_consent (browser storage, not a cookie) | britbunch.co.uk | Remembers whether you clicked Accept or Reject so we do not ask again | Strictly necessary; no consent needed | Until you clear this site's data in your browser |
_fbp | Meta Pixel (a first-party cookie on britbunch.co.uk) | Identifies your browser to Meta for advertising measurement and targeting | Marketing; only with your consent | Lifetime set by Meta |
_fbc | Meta Pixel | Stores the Meta click ID from an advert you clicked | Marketing; only with your consent | 90 days (set by Meta) |
Changing your mind
To withdraw consent, use the Cookie settings link in the footer of the £99.99 website page: the consent bar reappears and choosing Reject records your choice and deletes the _fbp and _fbc cookies. Clearing this site's data in your browser settings does the same and brings the bar back on your next visit.
9. Your rights
Under the UK GDPR you can ask us for access to your personal data; ask us to correct it, delete it or restrict how we use it; ask for a copy in a portable format; and object to our processing, including an absolute right to object to direct marketing. Where we rely on your consent, you can withdraw it at any time; that does not affect processing carried out before you withdrew it. To exercise any of these rights, email Sales@britbunch.co.uk. We respond within one month.
10. Complaints
If you are unhappy with how we have handled your data, please contact us first at Sales@britbunch.co.uk. We acknowledge complaints within 30 days and respond without undue delay. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113 (Monday to Friday, 9am to 5pm).
11. Changes to this notice
This is version 1.0, published 17 September 2026. If we change it in a way that matters, we will update the date here and, where the change affects cookies, ask for your consent again.