Privacy policy

Who we are

This website is operated by Grant Capital Group Limited, trading as Brooks & Grant. We are the data controller for the personal data collected through this website.

What data we collect

We collect personal data only when you actively provide it to us through our contact form. The data we collect is:

• Your name
• Your email address
• Your company name or website address (if you choose to provide it)
• The content of your message

We do not use analytics software, advertising trackers, or third-party cookies on this website. We do not track your browsing behaviour. The fonts used on this site are self-hosted and do not send data to external servers.

How we use your data

We use the data you submit through our contact form solely to respond to your enquiry and, if appropriate, to discuss a potential project with you. We do not use your data for marketing unless you specifically ask us to keep you informed.

Lawful basis

Our lawful basis for processing your data is legitimate interests under Article 6(1)(f) of UK GDPR. When you submit a contact form, you are actively requesting that we respond. Our legitimate interest is to reply to your enquiry and explore whether we can help.

Who we share data with

Your contact form data is processed by the following third-party services, which act as data processors on our behalf:

• Email delivery service – to forward your enquiry to our inbox
• Vercel– our hosting provider, which processes server requests and may log IP addresses as part of standard infrastructure operations

We do not sell, rent, or share your personal data with any other third parties.

WhatsApp

This website includes a link to contact us via WhatsApp. If you choose to message us through WhatsApp, your data (including your phone number and message content) is processed by Meta Platforms under their own privacy policy. We have no control over how Meta processes that data. Any conversation you have with us on WhatsApp is subject to WhatsApp's privacy policy.

Cookies

This website does not set analytics cookies, advertising cookies, or third-party tracking cookies. We do not use a cookie consent banner because there are no non-essential cookies to consent to.

Our hosting provider (Vercel) may set strictly necessary cookies for infrastructure purposes such as load balancing. These are exempt from consent under the Privacy and Electronic Communications Regulations (PECR) because they are essential for the website to function.

How long we keep your data

We retain contact form enquiry data for up to 24 months from the date of your last communication with us. After this period, we delete or anonymise your data. If your enquiry leads to a project, we may retain your data for the duration of our working relationship and for a reasonable period afterwards for legal and accounting purposes.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (the right to be forgotten)
• Restrict processing of your data
• Object to processing based on legitimate interests
• Data portability – receive your data in a structured, commonly used format

To exercise any of these rights, email us at info@brooksandgrant.co.uk. We will respond within one month.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We will not reduce your rights under this policy without your consent.