← Back to the site
Privacy, cookies and technology notice
Last updated 21 July 2026
This is written the way we would want to read it: short, accurate and in plain English. It describes the technology actually running on this website, not the technology we might add later. If anything is unclear, email us and a person will answer.
Who we are
This site is operated by the founders of BridgeLayer Advisory during a pre-launch period. For anything in this notice, contact contact@bridgelayeradvisory.com.
What we collect and why
- Enquiry form. Your name, work email, company if you provide it, and your message. We use these to respond to you. Lawful basis: our legitimate interests in responding to an enquiry you chose to send us.
- Founding Client application. Your name, work email, company, website if you provide it, approximate staff count, current priority, your reason for the review, preferred start window and an optional scanner reference. We also record that you confirmed you are authorised to discuss the engagement and that you had read this notice, together with the time you submitted, so that we can evidence both. We use all of this to assess fit and respond to you, and, where email verification is in place, to hold a place for 48 hours while scope is confirmed. Lawful basis: taking steps at your request before entering into a contract.
- Launch updates. Only if you tick the box, which is never ticked for you. Lawful basis: your consent, which you can withdraw at any time by replying to any update or emailing us.
- Risk scanner. Nine multiple-choice answers. The scanner is designed without free-text questions so visitors are not invited to enter personal or confidential business information. Answers are sent to our server function and to Anthropic's API to generate your result. If you request a written copy by email, we collect that email address and your result band so we can send it and follow up.
- Booking a call. If you book through Calendly, Calendly collects the details you enter under its own privacy notice.
Analytics, cookies and local storage
We do not use advertising trackers or visitor-identification technology at initial launch. We do not build behavioural profiles, we do not run advertising pixels, and we do not use session recording or fingerprinting.
We use privacy-conscious aggregate analytics, provided by Plausible, to understand page visits and how far people get through the scanner. It sets no cookies and does not follow you across other websites, but it does process limited technical information such as your approximate country, device type and referring page in order to produce those aggregate counts.
We also count a small number of named events: a scan being started and completed, which of the three risk bands the result fell into, which service links were followed, an enquiry or application being sent, and which stage of the application form was reached. These are counts only. Nothing you typed into a form, and no name, email address, company name or scanner answer, is ever sent to analytics.
We store two small preference values on your device, and nothing else. One is kept in local storage and remembers that you dismissed this notice, so it does not reappear on every visit. The other is kept in session storage and remembers that you closed the quick-action bar on a mobile screen; it is discarded when you close the tab. Each holds a single value, neither identifies you, and neither is read by any third party. You can clear both in your browser at any time, or use the notice settings link in our footer.
Because we currently use no cookies or similar technologies that require your consent, we show a short notice rather than a consent banner. If that ever changes, for example if we add advertising conversion tracking or any visitor-identification tool, we will complete a lawful-basis assessment, update this notice and put a proper consent mechanism in place before the technology loads, not after.
Who processes data for us
- Vercel hosts the website and the scanner function.
- Formspree delivers form submissions to our inbox.
- Anthropic processes scanner answers to generate the result text.
- Calendly handles scheduling, only if you choose to book a call.
- Plausible provides cookieless aggregate analytics.
Anthropic states that it does not use commercial API inputs and outputs to train its models by default. Retention depends on the account and API configuration in use, and we will state our production configuration here before launch.
Some providers store data outside the UK. Where they do, transfers rely on recognised safeguards such as adequacy regulations or the UK international data transfer addendum.
We do not load fonts, images or scripts from third-party servers other than the analytics script named above, so visiting this page does not send your IP address to advertising or font providers.
How long we keep things
Enquiries are kept for up to twelve months after our last exchange and then deleted, unless we go on to work together, in which case engagement records are kept for as long as our professional and tax obligations require. Launch-update contacts are removed at launch unless you have consented to continue hearing from us.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to or restrict our use of it, ask us to transfer it, and withdraw consent at any time. Email contact@bridgelayeradvisory.com and we will act promptly. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this notice changes we will update this page and the date at the top.
← Back to the site