Privacy Notice

BRAZHELP SOLUTIONS LIMITED
Company number 13259174 · Registered in England and Wales
Registered office: 124 City Road, London, England, EC1V 2NX
info@brazhelp.com

BrazHelp is the controller for personal data described in this notice. Contact us at info@brazhelp.com. We do not appoint or represent a Data Protection Officer unless we state otherwise.

1. Data we use

Website enquiries may include name, email address, company, enquiry category and message. The private portal processes identity and account details, client and company records, project material, estimates, invoices, contracts and controlled documents, authentication and session information, electronic-signature evidence and payment status or provider references. We do not store card details.

2. Why we use it

We use data to respond to enquiries, provide and administer requested services, manage client relationships, protect systems, meet legal and accounting obligations, and establish, exercise or defend legal claims. Our bases are steps requested before a contract and performance of a contract, legitimate interests in operating a secure B2B service, compliance with legal obligations, and consent where it is required.

3. Processors and transfers

We use Vercel for hosting, Supabase for portal, database and authentication infrastructure, Resend and IONOS for email delivery, and Stripe for card-payment processing. Providers may process data outside the UK; where this happens, BrazHelp uses an appropriate transfer mechanism and safeguards required by applicable law. We share data only with processors, professional advisers, authorities where required, and parties involved in a legitimate business transaction.

4. Retention and security

We retain enquiry, account and project information only for as long as reasonably necessary for the purpose, contractual records, security, accounting and legal obligations. Signed agreement evidence is retained for the agreement term and any applicable limitation period. We use access controls, tenant separation, encryption in transit, logging and controlled document access. No method of transmission or storage is completely secure.

5. Your rights

Subject to UK GDPR conditions, you may request access, correction, erasure, restriction, objection or portability, and withdraw consent where processing relies on it. You may complain to the Information Commissioner's Office at ico.org.uk. Please contact us first so we can investigate. We may update this notice when our processing changes.