Privacy notice

01 Who we are

BrightDragon Systems Ltd is the data controller for personal information collected through this website and for the order details we receive when you buy a product. BrightDragon Trading is a trading name of BrightDragon Systems Ltd.

Registered with the Information Commissioner's Office, registration number ZC245545.

02 What we collect

When you send an enquiry through the form or by email or phone: your name, email address, organisation (optional), enquiry type, how you heard about us, for some enquiry types a rough budget and when you need the work (both optional), if you ask for a call your phone number and the days and times that suit you, and your message.

When you commission trading work (strategy testing or automation): the rules, code, data and notes you send us, the results we produce, and your invoice details. We build and review client work with Claude, made by Anthropic, under Anthropic’s commercial terms, which keep your material out of model training; we tell you this in writing before you send anything.

When you buy a product: our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. Paddle collects your payment details and billing information, and never shares your card details with us. Paddle sends us the details we need to supply and support your purchase: your name, email address, country, the product bought, the price paid and the order number. For a downloadable product we then keep an order record: your email address, the order number, the licence ID we give your copy, the date, the version of the terms you accepted, your tick confirming that you asked for the download to start straight away and lose the right to cancel once it starts, whether the order is active or refunded, and when your download link was sent and used. We do not store your IP address for this, and your copy of the product carries the licence ID only, never your name or email address.

When you ask us to email you when something is released (an “Email me when it’s live” sign-up): your email address and the name of the item you asked about, which go to Kit, the service that runs our release emails for us, with the date you signed up. Kit then emails you to confirm, and you are added only if you do. The consent box must be ticked before the form will send; we do not keep the ticks themselves. After you send it, Kit shows its own confirmation page.

The free tools on this website run entirely in your browser. Nothing you type into them is sent to us or stored by us.

When you visit the website: our hosting provider keeps standard server logs, which include your IP address, the pages requested, and the date, time and type of browser. We use them to keep the site secure and running.

03 Why we use it and our lawful basis

We do not sell, rent or share your information for anyone else's marketing. Enquiry and order details are not used for marketing. The only marketing email we send is the single release email you ask for with an “Email me when it’s live” sign-up.

04 Who we share it with

Paddle. Paddle.com Market Limited is the reseller and Merchant of Record for our orders. It processes your purchase as an independent controller under its own privacy notice, which you see at checkout (paddle.com/legal/privacy).

Service providers who process data for us on our documented instructions, and not for their own purposes:

We may also share information with our professional advisers, or where the law requires it.

Transfers outside the UK. Where a provider processes information in the United States, the transfer is made under the safeguards in Chapter V of the UK GDPR, including the UK International Data Transfer Addendum and, where applicable, the UK Extension to the EU–US Data Privacy Framework. Where Hostinger’s network or backups handle data in the European Economic Area, it stays in an area the UK treats as adequate, and so does Ireland. Kit relies on the UK Extension to the EU–US Data Privacy Framework or, otherwise, the UK International Data Transfer Agreement in its data processing addendum.

05 How long we keep it

• Enquiries that do not lead to work: deleted within 12 months of the last correspondence.
• Work and sales records: six years after the end of the financial year they relate to, as UK tax and company law requires.
• Order and licence records for downloadable products: six years from the date of purchase, the period in which a contract claim can be brought.
• Material for trading work (your rules, code, data and results): six years after the work ends, then deleted.
• Call details (phone number and preferred times): deleted once the call has taken place, unless they become part of an enquiry we keep.
• Release sign-ups: deleted once the release email has been sent, or 12 months after you signed up if the item has not been released by then, whichever comes first. You can unsubscribe at any time, and if you ask us to delete your address sooner, we do.
• Server logs: kept by our hosting provider only as long as needed to keep the site secure and running.

06 Cookies and browser storage

This website sets no cookies and uses no advertising or profiling technology. Typefaces are served from this website's own server. When you press Buy, Paddle’s checkout loads and opens in a window over the page. Paddle’s script is not loaded before that, and it sets the cookies Paddle needs to take payment securely; Paddle's notice explains them.

The light and dark switch keeps your choice, one word (light or dark), in this browser tab's session storage, so that the next page you open looks the same. It is never sent to us, and it is deleted when you close the tab.

07 How we protect it

This website is served over an encrypted connection. Enquiry and order information is transmitted over encrypted channels and held in access-controlled accounts protected by multi-factor authentication. Access is limited to what is needed to respond to you or supply your product.

08 Your rights

Under the UK GDPR you have the right to access the personal information we hold about you, to have it corrected, to ask for it to be erased, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Send requests to hello@brightdragonsystems.com. We will respond within one month. There is no charge, and you do not have to give a reason.

For payment and billing information, you can also contact Paddle directly through paddle.net.

09 Complaints

If you are unhappy with how we have handled your information, email hello@brightdragonsystems.com, marked for the attention of the Director. We will acknowledge your complaint within 30 days, look into it properly and tell you the outcome and our reasoning.

You can also complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113, in any order.

10 Changes

This notice is reviewed whenever our processing changes. The version and effective date at the top identify the current version. Previous versions are available on request.