Summary: We respect your privacy. We only collect the minimal personal information necessary to deliver BrewBid (such as your email address when you sign up). We do not sell your personal data, and we do not use invasive third-party tracking scripts.

1. Introduction & Data Controller

Welcome to BrewBid ("we", "our", or "us"). BrewBid is a UK-based business operated as a sole proprietorship, providing quoting and job management software designed for builders, plumbers, electricians, and tradespeople across the United Kingdom.

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the operator of BrewBid acts as the Data Controller for personal data collected through this website (brewbid.co.uk) and our application platform (app.brewbid.co.uk).

If you have any questions about this Privacy Policy, your data rights, or how your personal data is handled, please contact us directly at: privacy@brewbid.co.uk.

2. Information We Collect

We may collect and process the following categories of information:

Account & Contact Information: When you enter your email to get started, register for an account, or contact support, we collect your email address, business name, and contact details.
Trade & Quote Data: Details you input into the BrewBid software, including customer names/addresses, job descriptions, line items, pricing, and company logos for generating PDF quotes.
Billing & Subscription Data: Payment details processed securely through our third-party payment provider (e.g. Stripe). We do not store complete payment card numbers on our servers.
Technical & Usage Data: Anonymised server request logs, device type, browser information, and aggregated traffic data via privacy-preserving analytics hosted on Cloudflare (without persistent cookies).

3. How We Use Your Information (Lawful Bases)

We only process your personal data where we have a lawful basis under UK GDPR:

Performance of a Contract: To create your account, generate your quotes, provide customer support, and manage your 3-quote trial or £19/month subscription.
Legitimate Interests: To ensure website security, prevent fraud, troubleshoot technical bugs, and improve our services.
Legal Obligation: To comply with UK tax, accounting, and legal requirements.
Consent: Where you have opted in to receive marketing communications or product updates. You can withdraw your consent at any time.

4. Third-Party Service Providers

We do not sell or rent your personal information. We only share data with trusted third-party service providers who assist us in operating our platform under strict confidentiality agreements:

Hosting & Security: Cloudflare (DNS routing, edge caching, DDoS protection, and privacy-first web analytics).
Analytics & Ad Measurement: Meta Platforms (Meta Pixel / Conversions API for ad campaign attribution with user consent) and Microsoft Clarity (session recording and usability insights).
Database & Authentication: Cloud database infrastructure for secure quote storage and user authentication.
Payment Processing: Secure, PCI-compliant payment processors for subscription billing.
Email Delivery: Transactional email service providers for delivering PDF quotes and account verification emails.

5. Data Retention & Security

We retain your personal data only for as long as necessary to provide the BrewBid service, comply with legal/tax obligations, or until you request its deletion.

All data transmitted to and from BrewBid is encrypted in transit using Transport Layer Security (TLS 1.3 / SSL). We implement robust technical and organisational security measures to safeguard your information.

6. Your Rights Under UK GDPR

As a UK resident, you have the following statutory rights regarding your personal data:

Right of Access: Request a copy of the personal information we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal data.
Right to Restrict or Object to Processing: Object to our processing of your data under legitimate interests or direct marketing.
Right to Data Portability: Request that your data be provided in a structured, machine-readable format.

To exercise any of these rights, please email us at privacy@brewbid.co.uk. We respond to all valid requests within 30 days.

You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) at ico.org.uk.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations or software features. Any updates will be posted on this page with an updated "Last updated" date.