Privacy policy
Version 1.4, last updated 4 July 2026
1. Who we are
This policy explains how UK Tech Corporation Ltd, trading as Brytloop ("Brytloop", "we", "us", "our") collects, uses, shares and protects personal data when you use our website, engage us as a client, work with us as a candidate or contractor, or otherwise interact with us. Brytloop is a UK-based software delivery consultancy working with enterprise and public sector clients.
| Company name | UK Tech Corporation Ltd (trading as Brytloop) |
|---|---|
| Company number | 10170138 |
| Registered office | 67-169 Great Portland Street, 5th Floor, London, W1W 5PF |
We are the data controller for the personal data described in this policy, unless we say otherwise (for example, where we process candidate or contractor data on behalf of a client as a data processor, under a separate data processing agreement). For data protection enquiries, email info@brytloop.com.
2. Personal data we collect
Depending on how you interact with us, we collect and process the following categories of personal data.
| Category | Examples | Why we process it |
|---|---|---|
| Client contact and business data | Name, job title, work email, phone number, employer, procurement details | Contract delivery, account management, invoicing |
| Candidate and personnel data | CV, right-to-work status, security clearance level (for example SC or DV), references | Staffing engagements, vetting for client requirements |
| Website and enquiry data | Name, email, message content, IP address, browser and device data | Responding to enquiries, website security |
| Financial data | Invoice details, bank details for payment | Billing, statutory accounting and tax records |
| Employee and contractor data | Name, contact details, payroll data, right to work, performance records | Employment administration, payroll, legal compliance |
| Marketing data | Name, email, engagement with communications | Sending updates where you have consented or as permitted by law |
We do not knowingly collect special category data (for example health, ethnicity or religion) except where strictly necessary, such as right-to-work checks, reasonable adjustments or security vetting for cleared roles, and only with an appropriate lawful basis under Article 9 UK GDPR, such as employment law obligations or explicit consent.
3. How we collect personal data
- Directly from you, for example when you contact us, submit a CV or sign a contract.
- From your employer or organisation, for example when a client nominates a contact for a project.
- From public sources, for example LinkedIn, Companies House, public sector procurement portals and tender documents.
- From third parties, for example recruitment platforms, referees, vetting and clearance authorities, or delivery partners.
- Automatically, through our website's hosting and security logs (see section 8).
4. Our lawful basis for processing
Under UK GDPR we must have a valid lawful basis to process personal data. We rely on the following.
| Lawful basis (UK GDPR Art. 6) | When we rely on it |
|---|---|
| Contract (Art. 6(1)(b)) | To perform our contract with a client, candidate, supplier or employee, or to take steps at your request before entering into one. |
| Legitimate interests (Art. 6(1)(f)) | To run our consultancy business, for example responding to enquiries, direct business-to-business marketing and the security of our systems, balanced against your rights and interests. |
| Legal obligation (Art. 6(1)(c)) | To comply with our obligations, for example tax, accounting, employment law and security vetting requirements for public sector engagements. |
| Consent (Art. 6(1)(a)) | Where we ask for it specifically, for example certain marketing emails or non-essential cookies. You can withdraw consent at any time. |
Where we process special category data, for example for SC or DV clearance, we also identify a condition under Article 9 and, where relevant, Schedule 1 of the Data Protection Act 2018.
5. How we use your personal data
- Delivering and managing client engagements, including staffing, project delivery and support.
- Assessing candidates and contractors for roles, including verifying security clearance and right to work.
- Responding to enquiries and managing our relationships with clients, partners and suppliers.
- Invoicing, payments and statutory financial record-keeping.
- Complying with public sector procurement, tendering and vetting requirements.
- Managing our own employees and contractors.
- Website functionality and security.
- Sending marketing communications where you have opted in, or where permitted under the "soft opt-in" for existing business contacts, with an unsubscribe option in every message.
- Complying with our legal, regulatory and contractual obligations.
6. Who we share your data with
We do not sell personal data. We may share personal data with:
- Clients, where you are a candidate or contractor being put forward for an engagement, or where data is needed to deliver a project.
- Sub-processors and suppliers, for example cloud hosting, email, payroll, accounting or IT service providers, bound by data processing agreements.
- Professional advisers, such as lawyers, accountants and auditors, where necessary.
- Public authorities, where required for security vetting, tax, regulatory or legal compliance, or to comply with a legal obligation or court order.
- A buyer or successor, if the company is involved in a merger, acquisition or sale of assets.
7. International transfers
Where we transfer personal data outside the UK, for example to a supplier's servers overseas, we make sure an appropriate safeguard is in place, such as a UK adequacy regulation, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or another safeguard recognised under UK GDPR. You can ask us for details of the specific safeguard used.
8. Cookies and website data
This website does not currently use analytics or advertising cookies. Our hosting provider keeps standard server logs, such as IP address, browser type and pages requested, to operate and secure the site. If we introduce non-essential cookies in future, we will only set them with your consent.
9. Data retention
We keep personal data only for as long as necessary for the purposes it was collected, including to meet legal, accounting, tax or reporting requirements. Typical retention periods are:
- Client contract and financial records: six years after the end of the relevant financial year.
- Candidate and CV data: 12 months from last contact, unless you ask us to delete it sooner or you are engaged.
- Employee and contractor records: for the duration of the engagement and afterwards as required by statutory and employment law.
- Marketing data: until you unsubscribe or opt out, or after 60 months of inactivity.
- Website enquiry data: 12 months.
10. How we protect your data
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration, including access controls, encryption where appropriate, staff confidentiality obligations, and security clearance protocols consistent with our public sector engagements.
11. Your rights
Under UK GDPR you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your data, in certain circumstances.
- Restrict processing: ask us to limit how we use your data.
- Data portability: ask for your data in a portable format, where applicable.
- Object: object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: where processing is based on consent, at any time.
To exercise any of these rights, email info@brytloop.com. We will respond within one month, as required by law.
12. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals without human involvement. If this changes, we will update this policy and explain the logic involved and your rights.
13. Children's data
Our services are directed at businesses and professionals. We do not knowingly collect personal data from children.
14. Changes to this policy
We may update this policy from time to time, for example to reflect changes in our practices or legal requirements. The date at the top of this page shows when it was last revised.
15. Contact and complaints
If you have any questions about this policy or how we handle your personal data, email info@brytloop.com. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.