Privacy Notice
Effective 15 SEPTEMBER 2026
This notice explains what personal information we collect through our website, why we use it, who we share it with and your rights. We have written it in plain English so you can make informed choices.
1.Who is responsible for your information?
BravoEcho Ltd (“we”, “us”, “our”), trading as BravoEcho, is the controller of personal information described in this notice. We are registered in England & Wales, company number 17492905.
Contact: sales@bravoecho.ai | Postal address: Barttelot Court, Barttelot Road, Horsham, Sussex, RH12 1DQ, UK.
2.Information we collect
Depending on how you use our website, we may collect:
- Contact details: your name, business name, email address, telephone number and any details you provide in a form or message.
- Enquiry information: the subject of your request and our correspondence with you.
- Technical information: IP address, browser, device information, approximate location derived from your IP address, site access logs and security events.
- Website usage information: page visits and analytics information, collected without cookies (see section 4).
Please do not submit sensitive personal information unless we clearly explain why it is needed.
3.How and why we use information
We use personal information for the purposes and legal grounds below. The legal basis depends on the activity, not simply the type of data.
| Purpose | Examples | UK GDPR lawful basis |
|---|---|---|
| Respond to enquiries | Answer messages and arrange a call | Legitimate interests in responding; or steps before a contract at your request |
| Operate and secure the site | Hosting, logs, troubleshooting, fraud prevention | Legitimate interests in running a safe website; legal obligation where relevant |
| Provide requested services | Administer an account or fulfil a service enquiry, if applicable | Contract / steps before a contract |
| Improve website performance | Analytics and performance measurement | Legitimate interests where permitted |
| Marketing | Send promotional emails where you have opted in or another PECR rule allows it | Consent or legitimate interests as appropriate, together with PECR requirements |
| Comply with law | Maintain records, respond to regulators, defend legal claims | Legal obligation or legitimate interests |
Where we rely on legitimate interests, we consider our business purpose, the need to use the information and the potential impact on you. You can ask for further details.
6.Transfers outside the United Kingdom
Some suppliers may process information outside the UK. Where the transfer is restricted by UK data protection law, we use a lawful transfer route, such as UK adequacy regulations or appropriate safeguards (which may include the UK International Data Transfer Agreement or UK Addendum), and any required assessment.
You can contact us to ask about applicable safeguards.
7.How long we keep your information
We retain information only as long as reasonably needed for the relevant purpose, including any legal obligations. Our retention periods:
- Website enquiry and routine correspondence: 1 year
- Customer or transaction records, where applicable: 6 years
- Security and server logs: 1 year
- Marketing preferences and suppression records: 1 year
- Cookie and analytics records: 1 years
We may retain information longer where needed to establish, exercise or defend legal claims. We delete or anonymise information when it is no longer needed.
8.Your rights
Depending on the circumstances, you can ask to access your personal information; have it corrected; have it erased; restrict its use; object to processing; receive portable data; and withdraw consent where consent is the basis for processing. These rights are subject to legal conditions and exceptions.
Your right to object to direct marketing is absolute: you may ask us to stop using your personal information for direct marketing at any time. You may also object to processing based on legitimate interests, subject to applicable exceptions.
To exercise a right, email support@bravoecho.ai. We may need to verify your identity before acting. We normally respond within one month, subject to lawful extensions.
9.Marketing choices
Where required by law, we ask for your consent before sending marketing emails or messages. In limited circumstances, marketing may be allowed under the existing-customer “soft opt-in” or applicable business-to-business rules. Every marketing email will provide a straightforward way to opt out. You may also contact support@bravoecho.ai.
Unsubscribing from marketing will not prevent us sending necessary service or administrative messages.
10.Automated decisions and children
We do not use website personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.
Our website is not specifically designed for children under 18.
11.Security
We use proportionate technical and organisational security measures, such as access controls, supplier assessments, encryption where appropriate and monitoring. No online system can be guaranteed completely secure.
12.Questions and complaints
Please contact us first at support@bravoecho.ai if you have questions or concerns. You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: www.ico.org.uk.
13.Changes to this notice
We review this notice and update it when our activities or the law change. The latest version appears on this page with its effective date. Where required, we will tell you about important new uses of your information before beginning them.
See also our Terms of Service.
