Privacy
Privacy policy
This page sets out, field by field, what this site records about you. Because the data moves between the United Kingdom and Türkiye, UK GDPR and KVKK both apply at once.
Last updated: 15 August 2026
Data controller
Who processes your data?
Your data is processed by Hüseyin Demir, trading as British Global. He works in the United Kingdom as a sole trader, not a limited company; he is the data controller, and every data request goes straight to him at the address below.
- Data controller
- Hüseyin Demir (British Global)
- For requests
- info@britishglobal.co.uk
This site is run by a sole trader in the United Kingdom. No visitor office address is published; correspondence runs by e-mail.
What is collected
What information do we collect?
The starter report form collects your name, your e-mail address, an optional telephone and your answers in the field you chose. It also records your language, the page you submitted from, your browser string, the consent version and an irreversible digest of your address.
Recorded by the starter report form
- Your name, as you type it into the form.
- Your e-mail address, where the report is sent.
- Your telephone number, which is optional and not recorded if left blank.
- The field you chose and the answers you gave on goal, timetable and budget.
- Your language and the address of the page you submitted from.
- The domain name of the site you arrived from — not the full address.
- Your browser string and a salted digest of your IP address, to limit abuse.
- The consent version, the time you consented and the date the record is deleted.
Questions put to the assistant on the home page are recorded with their answers, along with a digest of your IP address and your browser string. The reason is audit: every question the assistant declines is stored with the ground on which it declined.
Lawful basis
What lawful basis does this rest on?
The lawful basis is your consent: the box is never pre-ticked, and the version of the wording you agreed to is written into your record. Withdraw that consent and the record is deleted, because nothing else holds the processing up.
The consent wording in force is version 11 August 2026. The version changes whenever the wording does, and your record stores which version you agreed to — a tick-box reading “consented” answers nothing years later.
Sharing
Who is your information shared with?
Your information is shared with one registered advisory firm in the field you chose, and only after you have agreed. You are told in writing which firm it is beforehand; beyond that it is never sold, rented or passed on.
The suppliers we use
- Vercel — publishes the site and runs it on servers in the London region.
- Supabase — provides the database the form records are held in.
- Anthropic — produces the assistant’s answers; questions the assistant declines are never sent to it.
- Vercel Analytics and Speed Insights — measure pages and speed without cookies.
The commercial side of a referral — who pays the fee and how the firm is chosen — is set out on its own page:
Retention and security
How long is your data kept?
Every record is stamped at capture with a deletion date 24 months ahead, and it is deleted on that date. Deletion removes the record with its answers and its event history in one operation, leaving a trace that holds no personal data.
Four rules that protect your record
- Every table has row-level security on, and no table grants anonymous read access.
- The database key is used only on the server and is never sent to a browser.
- Your IP address is stored as a salted one-way digest, never in the clear.
- The event history cannot be edited by hand; deletion runs as one operation that leaves an audit record.
Your rights
How do you exercise your rights?
You exercise every right — access, rectification, erasure, objection and withdrawal of consent — by writing one e-mail. To complain, you go to the ICO in the United Kingdom or to the Personal Data Protection Authority in Türkiye; both regimes apply here at once.
Five rights
- Access — ask for a copy of the record held about you.
- Rectification — ask for wrong or incomplete information to be corrected.
- Erasure — ask for the record and its answers to be removed in full.
- Objection and restriction — object to the processing or ask for it to be limited.
- Withdrawal of consent — take your consent back, which results in the record being deleted.
For requests
The authorities to complain to are the Information Commissioner’s Office (ICO) in the United Kingdom and the Personal Data Protection Authority in Türkiye. You need not write to us first, but a request sent to us is acted on directly.
