Privacy Policy

Last Updated: February 2026

Who We Are

Brilliant Noise Ltd ("we", "our", or "us") is committed to protecting your privacy and ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. This policy explains how we collect, use, and protect your personal data when you visit our website or interact with us.

Brilliant Noise Ltd
Runway East, York and Elder Works
50 New England Street
Brighton, BN1 4AW
United Kingdom

Email: dpo@brilliantnoise.com

1. Data We Collect

We only collect personal data when you:

  • Subscribe to our BN Edition newsletter via Substack (email address)
  • Request downloadable resources such as our AI Culture Audit (name, company, email address)
  • Fill out our enquiry form (name, company name, email address, and your message)
  • Engage with us through our CRM system, Pipedrive, as part of a sales or business relationship (name, company, email address, phone number, and correspondence history)

We do not collect or process special category (sensitive) data.

2. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

Legitimate Interests

We process personal data based on our legitimate business interests in:

  • Providing AI consultancy services, products, and resources to business customers
  • Sending marketing communications about our services, products, and events that are relevant to your professional role
  • Building and maintaining business relationships with organisations in our target sectors
  • Managing our sales pipeline and client relationships through Pipedrive CRM

We primarily communicate with business email addresses (not personal email addresses) and our marketing is B2B-focused, targeting professionals in roles relevant to AI strategy and implementation. We have conducted a Legitimate Interest Assessment to ensure our interests are balanced against your rights and freedoms.

Consent

When you subscribe to our BN Edition newsletter (via Substack) or opt in to receive marketing communications, you may provide explicit consent. However, we may also send you relevant business communications based on legitimate interests as described above.

Contract Performance

When you fill out an enquiry form, request resources, or enter into a business relationship with us, we process your data to respond to your request and provide the information or services you have requested.

Your Right to Object

You have the right to object to processing based on legitimate interests at any time. You can unsubscribe from marketing communications using the unsubscribe link in every email we send, or by contacting us directly. You can also withdraw consent at any time where processing is based on consent.

3. How We Use Your Data

We use your personal data for the following purposes:

Marketing Communications: We may send you information about our services, products, resources (such as reports and playbooks), events, and other relevant business communications. This includes our BN Edition newsletter. We send these based on legitimate business interests as described in Section 2, primarily to business email addresses. Every marketing email includes an unsubscribe link allowing you to opt out at any time.

Resource Delivery: When you request downloadable resources (such as our AI Culture Audit), we use your contact details to deliver the resource and may follow up with related information that we believe would be valuable to you in your professional role.

Enquiry Response: When you fill out our enquiry form, we process your data to respond to your message and provide information about our services.

Service Delivery: To provide services, maintain client relationships, and fulfil contractual obligations.

CRM and Relationship Management: We use Pipedrive CRM to manage our sales pipeline, track business enquiries, and maintain client relationships. Contact details and correspondence history may be stored within Pipedrive to ensure we can provide a consistent and responsive service.

4. Third-Party Service Providers

We use the following third-party service providers to help us operate effectively. These providers are bound by data processing agreements and only process your data on our instructions, in compliance with UK GDPR:

  • Pipedrive – Customer relationship management (CRM) for managing business contacts and sales pipeline
  • Substack – Newsletter distribution for our BN Edition newsletter
  • SendGrid – Email service provider for managing and sending communications
  • Supabase – Secure database services for storing subscriber information

We never sell, rent, or share your data with third parties for their own marketing purposes.

5. How Long We Keep Your Data

We will only retain your personal data for as long as necessary for the purposes set out in this policy:

  • Marketing Contacts and Newsletter Subscribers: Until you unsubscribe or object to processing. We periodically review our contact lists to remove inactive contacts.
  • Resource Download Requests: We retain contact details to deliver resources and send follow-up communications until you unsubscribe or the legitimate interest no longer applies.
  • Enquiry Form Submissions: Up to 6 months after responding to your request, unless further engagement or a business relationship develops.
  • CRM Data (Pipedrive): For the duration of the business relationship. Contact records are reviewed periodically and removed when no longer relevant.
  • Client Data: For the duration of our business relationship and up to 6 years afterwards for legal and regulatory purposes.

You can request deletion of your data at any time, subject to any legal obligations we have to retain certain information.

6. Data Storage and Security

We take all necessary security measures to protect your data, including encryption, access controls, and secure third-party services.

To prevent unauthorised disclosure or access to your information, we have implemented strong physical and electronic security safeguards. We also follow stringent procedures to ensure we work with all personal data in compliance with UK GDPR and the Data Protection Act 2018.

If we transfer data outside the UK or EEA (for example, if a third-party provider stores data internationally), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or UK GDPR adequacy decisions.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right to Access – Request a copy of the data we hold about you
  • Right to Rectification – Request correction of inaccurate or incomplete data
  • Right to Erasure ("Right to be Forgotten") – Request deletion of your data in certain circumstances
  • Right to Restrict Processing – Request that we limit how we process your data
  • Right to Data Portability – Request to transfer your data to another provider
  • Right to Object – You have an absolute right to object to processing for marketing purposes. You can exercise this right at any time by clicking the unsubscribe link in any marketing email we send, or by contacting us directly. We will stop processing your data for marketing purposes immediately upon receiving your objection.
  • Right to Withdraw Consent – Where we process your data based on consent, you can withdraw your consent at any time (for example, by unsubscribing from our newsletter using the link provided in emails)

How to Exercise Your Rights

Unsubscribe from Marketing: Click the unsubscribe link in any email we send.

All Other Rights: Contact us at dpo@brilliantnoise.com.

We will respond to your request within one month. In some cases, we may need to verify your identity before actioning your request.

If you believe we have mishandled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk.

8. Cookies

Our website uses cookies to improve your browsing experience and to help us understand how visitors use the site.

Types of Cookies We Use

  • Necessary Cookies: Essential for the website to function properly. These cookies enable core functionalities such as security, authentication, and user preferences.
  • Performance and Analytics Cookies: Used to collect data on how visitors interact with our site, helping us improve performance and user experience.
  • Advertising Cookies: We do not currently use advertising cookies. If we introduce them in the future, we will update this policy accordingly.

Managing Cookies

You can use your web browser's settings to control how cookies are stored on your device. If you do not want our website to store cookies, set your browser to refuse cookies. However, disabling cookies may affect how the website functions.

Unless you have changed your browser settings, our website will issue cookies when you visit. To learn more about cookies and how they are used, visit allaboutcookies.org.

9. Links to Other Websites

Our website may contain links to other websites. Please note that we have no control over websites outside the brilliantnoise.com domain. If you provide information to a website to which we link, we are not responsible for its protection and privacy. Always be cautious when submitting data to external websites and review their privacy policies to understand how they manage personal data.

10. Contact Us

If you have any questions about this policy or your data, please contact us:

Email: dpo@brilliantnoise.com

Brilliant Noise Ltd
Runway East, York and Elder Works
50 New England Street
Brighton, BN1 4AW
United Kingdom