◆ legal

Privacy Policy

Last updated: June 2026

1. Who we are

Brief ("we", "us", "our") provides a regulatory applicability engine for UK financial services firms. We are the data controller for personal data collected through this service.

2. What we collect

  • Account data — email address, name, and authentication credentials.
  • Firm profile — answers you provide in the classification wizard.
  • Usage data — pages visited, queries run, and resolution outputs.
  • Technical data — IP address, browser type, device identifiers, and cookies.

3. How we use it

We process personal data to provide and improve the service, authenticate users, generate firm-specific rulebook outputs, communicate with you about your account, and comply with our own legal obligations. The lawful bases are contract performance, legitimate interests, and consent where required.

4. Sharing

We share data with hosting, authentication, and analytics processors under written contracts. We do not sell personal data. We may disclose data where required by law.

5. Retention

We keep account and firm-profile data for as long as your account is active and for a reasonable period afterwards to meet legal and audit requirements.

6. Your rights

Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. You can also lodge a complaint with the Information Commissioner's Office (ico.org.uk).

7. Contact

For privacy queries, contact privacy@brief-pro.co.uk.