Privacy Policy

Last updated: January 2026

Our Commitment to Your Privacy

At Bridgeway, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and safeguard your information when you visit our website or use our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ensuring that your personal information is processed lawfully, fairly, and transparently.

Information We Collect

Information You Provide to Us

We collect personal data that you voluntarily provide when you:

Complete enquiry or contact forms on our website
Subscribe to our newsletters or updates
Request information about our services
Engage with our consulting services
Communicate with us via email or other channels

This information may include your name, email address, telephone number, company name, job title, and any other details you choose to share with us.

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information through cookies and similar technologies:

IP address and geographic location
Browser type and version
Device information and operating system
Pages visited and time spent on our website
Referring website or source
Click patterns and user journey data

How We Use Your Information

We process your personal data for the following purposes:

Service Delivery and Communication

To respond to your enquiries, provide information about our services, and deliver consulting support as requested. This is necessary for the performance of a contract or to take steps at your request before entering into a contract.

Website Improvement

To analyse how visitors use our website, identify areas for improvement, and enhance user experience. This is based on our legitimate interest in improving our services.

Marketing Communications

To send you relevant information about our services, industry insights, and updates where you have consented to receive such communications. You can withdraw consent at any time.

Legal Compliance

To comply with legal obligations, resolve disputes, and enforce our agreements as required by applicable law.

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information with:

Service providers who assist us in operating our website and delivering our services (such as hosting providers, email service providers, and analytics platforms)
Professional advisors including lawyers, accountants, and auditors
Regulatory authorities where required by law
Third parties in connection with a business transfer, merger, or acquisition

We ensure that all third parties respect the security of your personal data and treat it in accordance with applicable data protection laws.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication procedures
Staff training on data protection and security
Incident response and breach notification procedures

While we take all reasonable precautions to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose for which it was collected, typically ranging from one to seven years, unless a longer retention period is required by law.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

Avoid filling out contact forms, account registrations, or any data-submitting features
Disable cookies through your browser settings (see our Cookie Policy for more details)
Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us through our contact page. We will process your request promptly.

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data in certain circumstances
Right to restrict processing: Request that we limit how we use your data
Right to data portability: Receive your data in a structured, commonly used format
Right to object: Object to processing based on legitimate interests or for direct marketing
Right to withdraw consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us through our contact form. We will respond to your request within one month.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom. Where we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with UK data protection laws.

Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us so we can delete such information.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by posting the new policy on our website with an updated revision date. We encourage you to review this policy periodically.

Contact Us and Complaints

If you have any questions about this privacy policy or our data practices, or if you would like to exercise your rights, please contact us through our contact form.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues, if you believe we have not handled your personal data appropriately.