Demo site by Web For Small · Brightloom is a fictional company
Legal

Privacy & cookie policy

This privacy policy explains how this website handles your personal data, in plain English. Last updated 15 November 2026.

Demo website. Brightloom Marketing is a fictional company. This site was built by Web For Small to show what a small business website can look like. Messages sent through the contact form are received by Web For Small.

Who we are

This website (demo1.webforsmall.com) is operated by Web For Small, which acts as the data controller for any personal data collected here. You can contact us through the contact form.

What we collect and why

  • Contact form: your name, email address, optional phone number, business name, the service you are interested in and your message. We use this only to reply to your enquiry. Our lawful basis is your consent and our legitimate interest in answering enquiries (UK GDPR Article 6(1)(a) and (f)).
  • Server logs: our web host and Cloudflare record technical data such as IP address, browser type and the pages requested, to keep the site secure and working. This data is kept for a short period and is not used to identify you.
  • Security: a security plugin checks requests for attacks and may log the IP address of suspicious traffic.

How long we keep it

Contact form messages are kept for up to 12 months and then deleted, unless we are working together, in which case normal business record rules apply.

Who we share it with

We do not sell or share your data for marketing. It is processed by our hosting provider (servers in the EU) and Cloudflare (content delivery and security). Both act as processors under data protection agreements.

Cookies

This website does not use analytics, advertising or tracking cookies, so we do not need to ask for consent. The only cookies set are strictly necessary ones:

  • Cloudflare security cookies (for example __cf_bm), used to tell people from bots. Expire within 30 minutes to a day.
  • WordPress login cookies, set only for site administrators who log in.

If we ever add analytics, we will ask for your consent first with a cookie banner and update this page.

Your rights

Under UK GDPR you can ask to see the personal data we hold about you, have it corrected or deleted, object to how we use it, or withdraw consent at any time. Contact us through the contact form and we will reply within one month.

If you are not happy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We will update this privacy policy if anything changes. The date at the top shows when it was last revised.