Privacy Policy
Last updated: 30 September 2026
Controller and contact details
The data controller for personal data processed through this website is Grosvenor Construction Limited, 47 Glossop Road, Sheffield, S10 2GW, United Kingdom. Company No. 06793432. Email: mail@brighthipsstrain.world. Telephone: +44 114 311 2144. This policy explains how we collect, use and protect personal data in connection with the operation of brighthipsstrain.world and the sale of Elalis Essentials.
Scope of this policy
This Privacy Policy applies to all personal data collected through this website, including data submitted via the order form, the contact form, and data collected automatically through cookies and server logs. It does not apply to third-party websites that may be linked from this site. This policy is compliant with the UK General Data Protection Regulation (UK GDPR) as retained under the Data Protection Act 2018.
Categories of data and sources
We collect the following categories of personal data: (a) order data - your name and telephone number submitted via the order form; (b) contact data - your name, email address and message submitted via the contact form; (c) technical data - your IP address, browser type, pages visited and timestamps, collected automatically via server logs and, with consent, via analytics cookies; (d) consent data - your cookie preference, stored in a first-party cookie. We do not collect payment card details, bank account information or special categories of personal data.
Purposes and legal bases (Art. 6 GDPR)
We process order data (name, telephone number) on the basis of Article 6(1)(b) UK GDPR - processing necessary for the performance of a contract or pre-contractual steps - for the purpose of confirming and fulfilling your order. We process contact form data on the basis of Article 6(1)(f) UK GDPR - our legitimate interest in responding to enquiries - or Article 6(1)(b) where the enquiry relates to a contract. We process server log data on the basis of Article 6(1)(f) - legitimate interest in operating and securing the website. We process analytics data only on the basis of Article 6(1)(a) UK GDPR - your consent - given via the cookie banner.
Contact form and newsletter
When you submit the contact form on this website, we receive your name, email address and message. We use this data solely to respond to your enquiry. We do not operate a newsletter and do not send marketing emails. Contact form data is retained for up to 24 months from the date of submission unless a longer retention period is required for legal or contractual reasons, after which it is securely deleted.
Hosting and server logs
This website is hosted by a European hosting provider. When you visit any page, the server automatically records your IP address, browser type, referring URL, pages visited and date/time of access in server logs. These logs are used for security monitoring and technical fault diagnosis. Server log data is retained for up to 30 days and is then automatically deleted. We do not use server logs to identify individual users by name.
Cookies (reference to cookie policy)
This website uses cookies as described in our Cookie Policy. Strictly necessary cookies are used without consent on the basis of legitimate interest. Analytics cookies are only set with your consent. You can manage your cookie preferences at any time via the cookie settings panel.
Web fonts and external resources
This website uses Google Fonts to display typefaces. When a page loads, your browser requests font files from Google's servers, which means Google receives your IP address as part of that request. This transfer takes place each time a page on this site is viewed. Google's privacy policy governs how Google processes data received in this context. No other external font services or content delivery networks are used on this website beyond the icon font library (Remixicon via jsDelivr CDN).
Recipients and processors
Your personal data is not sold or shared with third parties for their own marketing purposes. We may share data with service providers acting as data processors on our behalf, including our hosting provider (server logs) and, if you consent, Google (analytics). These processors are contractually required to process data only on our instructions and in compliance with UK GDPR. We do not use any advertising networks, social media pixels or affiliate tracking systems on this website.
Transfers outside the EU/EEA
If you consent to analytics cookies, data about your website visit may be transferred to Google servers in the United States. Google implements Standard Contractual Clauses as a transfer mechanism under UK GDPR. Google Fonts requests may also result in your IP address being transmitted to Google's US-based servers. No other transfers of personal data outside the United Kingdom or EEA take place in connection with this website.
Retention periods
Order data (name and telephone number) is retained for the duration necessary to fulfil the order and to comply with legal obligations, including consumer law (up to six years after the transaction in accordance with the Limitation Act 1980). Contact form data is retained for up to 24 months. Server log data is deleted after 30 days. Cookie consent records are retained for 12 months. Analytics data, if collected, is subject to Google's retention settings which we configure to the shortest available period.
Security measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss or destruction. These measures include HTTPS encryption for all data in transit, access controls limiting who can access stored data, and regular review of our data processing practices. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your data.
Your rights (access, rectification, erasure, restriction, portability, objection)
Under UK GDPR, you have the right to: request access to your personal data; request correction of inaccurate data; request erasure of your data where there is no overriding legal ground for continued processing; request restriction of processing in certain circumstances; request portability of data you have provided to us in a structured, machine-readable format; and object to processing based on legitimate interests. To exercise any of these rights, please contact us at mail@brighthipsstrain.world. We will respond within one calendar month.
Withdrawal of consent
Where processing is based on your consent (such as analytics cookies), you may withdraw consent at any time by adjusting your cookie settings via the cookie preference panel on this website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Withdrawal of cookie consent will take effect from the next page load.
Right to lodge a complaint with the supervisory authority
If you believe that our processing of your personal data does not comply with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), which is the supervisory authority for data protection in the United Kingdom. The ICO can be contacted at: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113. Website: ico.org.uk. You may also seek a remedy through the courts.
Minors
This website and the products sold through it are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe that a child has submitted personal data through this website, please contact us at mail@brighthipsstrain.world and we will delete it promptly.
No automated decision-making
We do not use automated decision-making or profiling in connection with the processing of personal data through this website. All order confirmation decisions are made by a member of our team during the phone confirmation call.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal obligations. Any updates will be reflected in the date at the top of this page. We encourage you to review this policy periodically. Continued use of the website following any changes constitutes acceptance of the updated policy. For questions, contact us at mail@brighthipsstrain.world.