Who is responsible for your data?
The company that operates BrndTst is responsible for the personal data collected through this website. In data protection terms, it is the controller: it decides why and how the data is used. The service providers that host the site and handle our email act only on our instructions.
Questions about privacy go to the same email address as everything else. You'll also find it on our contact page.
Our email address is consulting@thoktent12.click.
What information do we collect?
We collect two kinds of personal data: technical data that our delivery server records automatically when you visit, and anything you send us by email. Nothing else. The site has no forms, no accounts, no newsletter and no analytics, so there is nowhere else for you to give us information.
When you visit the website
Our pages are delivered through a traffic-routing server, which also records which of our campaigns brought each visit. It records these details automatically:
- your IP address;
- your browser and device type, and its operating system;
- your browser's language setting;
- the page you came from (the referring page);
- your approximate location, worked out from your IP address, such as the country or city, never your street address;
- the parameters in the link you followed, which tell us which campaign it belonged to;
- the date and time of the visit.
When you email us
We receive your email address, your name and anything in your email signature, and whatever you write or attach.
Please don't send passwords, bank login details or identity documents by email. We never need them.
What we don't collect
- We have no forms, accounts or newsletter, so we hold nothing you've typed into the website.
- We don't use analytics or advertising tools, and we don't build profiles of visitors.
- We don't ask for financial details, identity documents or other sensitive information.
All of this comes directly from you or from your device.
Why do we use your data, and on what basis?
We use visit data to deliver the pages, to see which campaigns bring visitors and to protect the site against abuse and automated bots. We use your emails to reply to you and, if your company becomes a client, to carry out our work. The table below gives the lawful basis for each purpose.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Delivering the website's pages to your device | Visit data | Legitimate interests: running a website that people can read. |
| Seeing which campaigns bring visitors | Visit data, especially the campaign link parameters, the referring page and the time | Legitimate interests: understanding which campaigns work, using visit statistics rather than profiles of individuals. |
| Protecting the site against abuse and bots | Visit data, especially the IP address, device details and time | Legitimate interests: keeping the site, its visitors and our systems safe. |
| Replying to your email | Your email address, name and message | Legitimate interests in answering people who contact us, or steps you ask us to take before an engagement is agreed. |
| Carrying out an engagement if your company becomes a client | Correspondence and the contact details in the engagement letter | Performance of a contract where the contract is with you; otherwise legitimate interests in carrying out the engagement agreed with your organisation. |
| Keeping the business records the law requires | Correspondence and engagement records | Legal obligation, for example accounting and tax record-keeping rules. |
Where we rely on legitimate interests, we have weighed our interests against your rights and what you would reasonably expect. You can object at any time: see your rights.
We don't use your data for marketing, and we don't make decisions about you by automated means.
Do we share your data with third parties?
No. We don't sell, rent, trade or share your personal data with third parties for their own purposes, including marketing and advertising. The only outside organisations that handle it are the service providers that run this site for us, acting on our instructions under contract. Public authorities receive it only when the law requires.
| Type of provider | What it does |
|---|---|
| Hosting and campaign-tracking server | Delivers the pages, records visit data and filters out abusive traffic |
| Email provider | Stores and delivers the emails you send us and our replies |
Our service providers may not use your data for anything except providing their service to us. We disclose personal data to courts, regulators, the police or other public authorities only where the law requires us to, and we tell you about it where the law allows.
Is your data sent to other countries?
Possibly. Our hosting and email providers may store or access data in a country other than yours. Where data protection law requires it, we allow this only when that country is recognised as protecting data adequately, or when standard contract terms approved for that purpose, or another recognised safeguard, are in place.
You can ask us for details of the safeguard that applies to your data.
How long do we keep your data?
We keep visit data for a limited period, and no longer than needed to deliver the site, measure our campaigns and protect against abuse. We keep emails for as long as we need them to deal with your enquiry, and longer only where the law requires us to keep business records.
| Data | How long |
|---|---|
| Visit data recorded by the delivery server | For a limited period, and no longer than needed for delivering the pages, campaign statistics and protection against abuse |
| Emails from people who don't become clients | As long as needed to deal with the enquiry, and any longer period the law requires for business records |
| Correspondence and records of client engagements | As long as needed for the engagement, and any longer period the law requires for business records |
When a period ends, we delete the data or make it permanently anonymous.
What are your rights?
Depending on where you live, you may have the right to see the personal data we hold about you, correct it, have it deleted, limit how we use it, receive a copy in a portable format and object to how we use it. Using these rights is free, and you can ask by email.
- Access: ask for a copy of the personal data we hold about you and how we use it.
- Correction: ask us to correct data that is wrong or incomplete.
- Deletion: ask us to delete your data, for example when we no longer need it.
- Restriction: ask us to keep your data but stop using it, for example while we check a correction.
- Portability: receive data you gave us in a common machine-readable format, or ask us to send it to someone else.
- Objection: object to any use based on our legitimate interests. We must then stop unless we have compelling grounds or need the data for a legal claim.
- Complaint: complain to a data protection authority. See how to complain.
To use any of these rights, email us and say what you'd like us to do. We may ask you to confirm your identity before we act, so that we don't give your data to someone else.
Our email address is consulting@thoktent12.click.
Visit data is linked to an IP address rather than a name, so to find it we may need your IP address and the date and time of your visit.
We aim to reply within one month. If a request is complex, it may take longer; if so, we'll tell you why and when to expect a full reply.
How do you complain about our use of your data?
Contact us first: most concerns can be sorted out quickly by email. If you're not satisfied with our answer, or you'd rather not come to us, you can complain to a data protection authority, usually the one in the country where you live or work, or where you think the problem happened.
Our email address is consulting@thoktent12.click.
You don't have to contact us before going to an authority, but it is often the quickest way to put things right.
How do we keep your data safe?
The site is served over an encrypted (HTTPS) connection. Access to visit data and to our email is limited to the people who need it for the purposes on this page.
No system is perfectly secure. If a breach ever puts your rights at risk, we will tell you, and the data protection authority, where the law requires it.
Email is not a secure way to send sensitive information. Please don't send us passwords, bank login details or identity documents.
Children
This website is written for businesses and is not aimed at anyone under 18. We don't knowingly collect personal data from children. If you believe a child has emailed us, tell us and we will delete the message.
Changes to this policy
We update this policy when the law, our services or our service providers change. Each version has a number and the date it took effect, shown under the heading. Our legal documents page explains how we number versions and how to ask for an earlier one.
Review history
Version 1.0, in force from 23 October 2026: first published.
We review this policy at least once a year and whenever the way we use data changes.