Privacy Policy

1. Data We Collect

Brevmist collects limited personal data in the following circumstances:

• Contact form submissions — name, email address, and any details you include in your message when you contact us via the website.
• Analytics data — anonymised usage information (pages visited, session duration, device type) where you have consented to analytics cookies.
• Technical data — IP address, browser type, and referring URL, collected automatically by standard web server infrastructure.
• Client information — if you become a client, we collect the business and financial data necessary to deliver contracted accounting services. This is handled under a separate service agreement.

2. How We Use Your Data

Personal data collected through this website is used for the following purposes:

• Responding to enquiries submitted via the contact form
• Understanding how the website is used in order to improve it
• Maintaining the security and technical operation of the site
• Complying with legal obligations where applicable

We do not sell personal data to third parties, and we do not use contact information for unsolicited marketing communications.

3. Data Sharing

Brevmist does not sell, rent, or trade personal data. Data may be shared in limited circumstances:

• Service providers — hosting, analytics, and email infrastructure providers who process data on our behalf under appropriate data processing agreements.
• Legal requirements — if required by law, regulation, or court order, we may disclose data to competent authorities.

4. Data Retention

Contact enquiry data is retained for a period of up to 24 months following the last exchange, after which it is deleted unless ongoing correspondence or a contractual relationship requires longer retention.

Anonymised analytics data may be retained for up to 36 months for the purpose of understanding long-term usage trends. Technical logs are retained for a maximum of 90 days.

5. Data Protection

We take reasonable technical and organisational measures to protect personal data, including:

• HTTPS encryption for all data in transit
• Access controls limiting who can view stored personal data
• Regular review of third-party service providers and their data handling practices
• Prompt notification of affected individuals in the event of a significant data breach

6. Your Rights

Depending on your location, you may have the following rights in relation to personal data we hold about you:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of personal data we hold, subject to legal retention obligations.
• Right to portability — to receive your data in a commonly used format where technically feasible.
• Right to object — to object to certain types of processing, including direct marketing or processing based on legitimate interests.

To exercise any of these rights, please use the contact form.