Privacy Policy

1. Who we are

This website is operated by BRANE-TEC LIMITED (trading as Bram Racing), a company registered in England and Wales. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller for the personal data we collect about you.

• Trading name: Bram Racing
• Registered name: BRANE-TEC LIMITED
• Address: Hunt Street, Castleford, West Yorkshire, WF10 1NS, United Kingdom
• Email: enquiries@bramracing.co.uk
• Phone: 01977 703888

2. What personal data we collect

We only collect personal data that you give to us, or that is automatically generated through use of our website:

• Contact form - your name, email address, phone number (optional), vehicle make, model and registration (optional), what you're interested in, and your message.
• Dyno booking form - your name, a phone number or email address, your vehicle (make, model and year), the service you want, and any notes.
• Spam protection - when you send a form, your IP address is recorded briefly to limit how many messages can be sent in an hour.
• Website usage - pages visited, the site that referred you, browser and device type, approximate country, and clicks on things like the phone, WhatsApp and booking buttons. For a sample of visits we also record how the page was used: where people click, how far they scroll, and a replay of the visit.
• Advertising measurement - if you accept cookies, information about whether you arrived from one of our Google adverts and whether you then contacted us.

3. Why we use your data

We process your personal data for the following purposes and on the following lawful bases:

• To respond to your enquiry or booking request - legitimate interest, or steps you've asked us to take before entering into a contract.
• To fulfil a contract - when you book work in, we use your data to carry out the service and keep you informed.
• To keep the website secure - legitimate interest. Form submissions are rate-limited by IP address and checked automatically for spam. Messages that look like spam are discarded, so if you think a genuine message didn't reach us, please call.
• To improve our website - legitimate interest. We use cookieless analytics to see which pages are useful, and recordings of a sample of visits to find parts of the site that are confusing or broken.
• To measure our Google advertising - your consent, given through the cookie banner.
• Legal obligations - we keep basic transaction records where required by UK tax and accounting law.

Your name, contact details and message are needed for us to reply. Everything else on the forms is optional. We do not use your data for marketing profiling or automated decision-making.

4. Sharing your data

We use the following service providers to run the website. They only use your data to provide their service to us:

• Vercel - website hosting and visitor statistics
• Resend - delivers form submissions to our inbox
• Upstash - stores the short-lived spam-protection counter
• Hall Web Design - our web developer, who maintains the site and runs our Umami analytics
• Google - advertising measurement (Google Ads) and the map on our contact and dyno pages (Google Maps)

We do not sell your personal data, and we do not share it for anyone else's marketing.

5. Cookies

Our website does not set any cookies of its own. It stores your cookie choice in your browser's local storage so we don't ask again on every visit.

Analytics. Vercel Web Analytics and Umami don't use cookies or track you across other websites. Your IP address is used briefly to count unique visitors but is not stored.

Visit recordings. Umami also records a sample of visits: mouse movement, clicks, scrolling and the pages viewed. Anything you type into a form is masked before it leaves your browser, and the recordings are not linked to your name or contact details. No cookies are used for this.

Google Ads. Google's advertising tag loads on every page. Until you accept cookies it runs in a restricted mode that sets no cookies and sends Google only limited, cookieless signals. If you accept, Google may set advertising cookies (such as _gcl_au) to tell us whether our adverts led to an enquiry. You can change your choice at any time by clicking Cookie settings in the footer.

Google Maps. The map on our contact and dyno pages is provided by Google. When it loads, Google receives your IP address and may set its own cookies. See Google's privacy policy.

6. How long we keep your data

• Booking and transaction records: up to six years, in line with HMRC record-keeping requirements.
• Enquiries that don't lead to a booking: for as long as needed to deal with them and any follow-up questions, then deleted.
• The spam-protection record of your IP address: deleted after 1 hour.
• Visit statistics: kept only as totals that don't identify you.
• Visit recordings: deleted within 90 days.

7. Your rights

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Rectification of inaccurate data.
• Erasure (the “right to be forgotten”), where applicable.
• Restriction of processing in certain circumstances.
• Portability — to receive your data in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent to advertising cookies at any time, using Cookie settings in the footer.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us using the details in section 1. We will respond within one calendar month.

8. Security

All data transmitted to and from this website is encrypted in transit using TLS (HTTPS). We work with reputable service providers contracted to appropriate technical and organisational security standards. No method of transmission or storage is completely secure, but we work to minimise risk.

9. International transfers

Some of our service providers, including Vercel, Resend and Google, are based in the United States and may process data there. These transfers are covered by the UK-US data bridge, UK adequacy regulations, or the provider's standard contractual clauses.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the page reflects the most recent revision.

11. Contact

If you have questions about this privacy policy or how we handle your data, email enquiries@bramracing.co.uk, call 01977 703888, or use our contact form:

Contact us