Privacy Policy

Last updated: 16 April 2026

1. Who We Are

LASA Blueprint Ltd ("Briddgr", "we", "us")
14 Linnell Road, Redhill, Surrey, RH1 4DH
Contact: luke@briddgr.com

When clients ask us to contact their leads/customers, we process personal data on their instructions. The client is the Controller and Briddgr is the Processor.

2. What Data We Collect

A) Website visitors and our own prospects (Controller)

• Identifiers: name, email, phone, company, role.
• Comms: message contents, booking details.
• Marketing tech: page views, referrer/UTMs, device/IP, consent preferences.

B) Client-provided leads and customers (Processor)

• CRM data: name, email, phone, tags/stage, offer of interest.
• History: prior conversations, last activity, purchases.
• Engagement: replies, intent notes, bookings, unsubscribe/STOP.

We ask clients not to send special category data. If they do, we will reject/delete it.

3. Why We Process It

Responding to enquiries. Lawful basis: Contract or Legitimate interests.

Sales and marketing. Lawful basis: Consent or Legitimate interests in line with PECR.

Analytics and improvement. Lawful basis: Consent for non-essential cookies; Legitimate interests for aggregated metrics.

Security and fraud prevention. Lawful basis: Legitimate interests and Legal obligation.

You can withdraw consent at any time (unsubscribe link in emails; reply STOP to SMS).

4. AI and Automation

We use AI to draft message variants, score intent, and suggest next actions. We do not sell personal data. We do not make decisions with legal or similarly significant effects solely by automation.

5. Sharing Data

• Automation infrastructure: n8n (self-hosted on Hostinger)
• Database: Supabase
• CRM and Automations: GoHighLevel
• SMS/voice: Twilio
• Email sending: Gmail
• Calendars/meetings: Calendly/Google
• Payments and billing: Stripe/Monzo

6. International Transfers

Some providers process data outside the UK/EEA. We use approved safeguards (UK Addendum/SCCs, provider certifications).

7. Retention

• Enquiries and sales records: usually 24 months after last contact.
• Campaign logs: 12-24 months or per client instruction.
• Consent and suppression records: kept as needed to honour opt-outs.

8. Your Rights (UK GDPR)

You can access, rectify, erase, restrict, object, and port your data.

• If the data is ours: email luke@briddgr.com
• If the data belongs to a client: contact the client directly.

You can complain to the ICO at ico.org.uk.

9. Marketing and PECR

• Email: every message has an unsubscribe link.
• SMS: reply STOP or STOP ALL.

10. Cookies and Tracking

We use essential cookies for site operation. Analytics/marketing cookies run only with consent.

11. Security

We apply least-privilege access, MFA on admin systems, encryption in transit, audit logging, staff training, and vendor due diligence.

12. Children

Our services target businesses and adults. We do not knowingly process children's data.

13. Processor Commitments

• Process only on documented instructions.
• Keep data confidential and secure.
• Assist with data-subject requests and breaches.
• Use sub-processors only with appropriate safeguards.
• Delete/return data at end of contract.

14. Changes

We will update this policy as our practices or laws change.

15. Contact

luke@briddgr.com
LASA Blueprint Ltd, 14 Linnell Road, Redhill, Surrey, RH1 4DH

If unresolved, contact the Information Commissioner's Office at ico.org.uk.