Privacy policy

1. Who we are

Braid Software Ltd ("Braid", "we", "us", and "our") is the data controller for personal data collected through this website and for business contact data related to our Services.

For customer deployment data where we act on a customer's instructions, we may act as a data processor under a separate data processing agreement.

2. The data we collect

Depending on how you interact with us, we may collect:

• identity and contact details, such as name, company, email address, and phone number;
• enquiry information you provide through forms or calls;
• service usage and technical data, such as device, browser, and log information;
• billing and contractual information for customers; and
• communications records relating to support or account management.

3. How we use personal data

We use personal data to:

• respond to enquiries and provide requested information;
• deliver, maintain, and improve our Services;
• manage customer accounts, contracts, and invoicing;
• send service communications and important updates; and
• protect our website, systems, and users from abuse or security threats.

4. Legal bases

Our legal bases for processing include:

• performance of a contract or steps before entering into a contract;
• legitimate interests, including operating and improving our business;
• compliance with legal obligations; and
• consent, where required by law (for example, certain marketing communications).

5. Sharing your data

We may share data with trusted service providers that help us operate our business, such as hosting providers, infrastructure partners, analytics tools, and professional advisers.

Where we share data, we require providers to implement appropriate security measures and process data only for authorised purposes.

6. International transfers

Where personal data is transferred outside the UK, we use appropriate safeguards, such as adequacy regulations or approved contractual clauses, to protect your data.

7. Retention

We keep personal data only for as long as necessary for the purposes set out in this policy, including legal, accounting, and reporting requirements.

Retention periods vary by data type and business need. When data is no longer needed, we securely delete or anonymise it.

8. Security

We use technical and organisational safeguards designed to protect personal data from unauthorised access, loss, misuse, or disclosure. No internet-based system is fully risk-free, but we continuously review our controls.

9. Your rights

Subject to applicable law, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing or request data portability.

To exercise these rights, please contact us via our contact page. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

10. Cookies and similar technologies

Our website may use cookies and similar technologies to support essential functions, measure performance, and improve user experience. Where required, we will request consent before placing non-essential cookies.

11. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites and encourage you to review their policies separately.

12. Changes to this policy

We may update this privacy policy from time to time. The latest version will be published on this page with an updated effective date.

13. Contact

If you have questions about this policy or how we process personal data, please contact us via our contact page.