Privacy Notice

Effective 15 SEPTEMBER 2026

This notice explains what personal information we collect through our website, why we use it, who we share it with and your rights. We have written it in plain English so you can make informed choices.

1.Who is responsible for your information?

BravoEcho Ltd (“we”, “us”, “our”), trading as BravoEcho, is the controller of personal information described in this notice. We are registered in  England & Wales, company number 17492905.

Contact: sales@bravoecho.ai | Postal address: Barttelot Court, Barttelot Road, Horsham, Sussex, RH12 1DQ, UK.

2.Information we collect

Depending on how you use our website, we may collect:

  • Contact details: your name, business name, email address, telephone number and any details you provide in a form or message.
  • Enquiry information: the subject of your request and our correspondence with you.
  • Technical information: IP address, browser, device information, approximate location derived from your IP address, site access logs and security events.
  • Website usage information: page visits and analytics information, collected without cookies (see section 4).

Please do not submit sensitive personal information unless we clearly explain why it is needed.

3.How and why we use information

We use personal information for the purposes and legal grounds below. The legal basis depends on the activity, not simply the type of data.

PurposeExamplesUK GDPR lawful basis
Respond to enquiriesAnswer messages and arrange a callLegitimate interests in responding; or steps before a contract at your request
Operate and secure the siteHosting, logs, troubleshooting, fraud preventionLegitimate interests in running a safe website; legal obligation where relevant
Provide requested servicesAdminister an account or fulfil a service enquiry, if applicableContract / steps before a contract
Improve website performanceAnalytics and performance measurementLegitimate interests where permitted
MarketingSend promotional emails where you have opted in or another PECR rule allows itConsent or legitimate interests as appropriate, together with PECR requirements
Comply with lawMaintain records, respond to regulators, defend legal claimsLegal obligation or legitimate interests

Where we rely on legitimate interests, we consider our business purpose, the need to use the information and the potential impact on you. You can ask for further details.

4.Cookies and similar technologies

We use strictly necessary technologies to deliver and protect the website. We measure usage with Matomo, a cookieless analytics tool that we host ourselves: it does not set cookies and does not identify individual visitors. We do not currently use advertising or preference cookies.

If we add non-essential technologies in the future, we will ask for your consent first and list them in this notice with their name, provider, purpose and duration.

5.When we share your information

We may share information with service providers that support the website, such as hosting providers, email and communication providers and security providers. We require suppliers processing information on our behalf to handle it securely and under appropriate contracts.

We may also share information with professional advisers, regulators, law enforcement bodies, or a buyer in connection with a genuine business sale when lawful and necessary. We do not sell your personal information.

6.Transfers outside the United Kingdom

Some suppliers may process information outside the UK. Where the transfer is restricted by UK data protection law, we use a lawful transfer route, such as UK adequacy regulations or appropriate safeguards (which may include the UK International Data Transfer Agreement or UK Addendum), and any required assessment.

You can contact us to ask about applicable safeguards.

7.How long we keep your information

We retain information only as long as reasonably needed for the relevant purpose, including any legal obligations. Our retention periods:

  • Website enquiry and routine correspondence: 1 year  
  • Customer or transaction records, where applicable: 6 years 
  • Security and server logs: 1 year
  • Marketing preferences and suppression records: 1 year 
  • Cookie and analytics records: 1 years 

We may retain information longer where needed to establish, exercise or defend legal claims. We delete or anonymise information when it is no longer needed.

8.Your rights

Depending on the circumstances, you can ask to access your personal information; have it corrected; have it erased; restrict its use; object to processing; receive portable data; and withdraw consent where consent is the basis for processing. These rights are subject to legal conditions and exceptions.

Your right to object to direct marketing is absolute: you may ask us to stop using your personal information for direct marketing at any time. You may also object to processing based on legitimate interests, subject to applicable exceptions.

To exercise a right, email support@bravoecho.ai. We may need to verify your identity before acting. We normally respond within one month, subject to lawful extensions.

9.Marketing choices

Where required by law, we ask for your consent before sending marketing emails or messages. In limited circumstances, marketing may be allowed under the existing-customer “soft opt-in” or applicable business-to-business rules. Every marketing email will provide a straightforward way to opt out. You may also contact support@bravoecho.ai.

Unsubscribing from marketing will not prevent us sending necessary service or administrative messages.

10.Automated decisions and children

We do not use website personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

Our website is not specifically designed for children under 18.

11.Security

We use proportionate technical and organisational security measures, such as access controls, supplier assessments, encryption where appropriate and monitoring. No online system can be guaranteed completely secure.

12.Questions and complaints

Please contact us first at support@bravoecho.ai if you have questions or concerns. You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: www.ico.org.uk.

13.Changes to this notice

We review this notice and update it when our activities or the law change. The latest version appears on this page with its effective date. Where required, we will tell you about important new uses of your information before beginning them.

See also our Terms of Service.