1. Who We Are
Street Bracket is operated as a digital brand and platform project based in the United Kingdom. For data protection purposes, Street Bracket is the Data Controller for personal information collected through this Site.
Contact: For all privacy-related enquiries, please email privacy@streetbracket.com.
2. What Data We Collect
Data You Provide
When you join our waitlist or contact us, we collect:
- Your email address
- Any other information you voluntarily include in a message
Data Collected Automatically
When you visit the Site, certain information is collected automatically through cookies and similar technologies:
| Data Type | Purpose | Collected By |
|---|---|---|
| Pages visited, time on site, click events | Analytics — understanding how the Site is used | Google Analytics 4 |
| IP address (anonymised) | Analytics, fraud prevention | Google Analytics 4 |
| Browser type, device type, OS | Analytics — technical compatibility | Google Analytics 4 |
| Referring URL | Analytics — understanding traffic sources | Google Analytics 4 |
| Ad impressions, clicks, and interactions | Advertising revenue and fraud prevention | Google AdSense |
| Cookie identifiers | Ad personalisation and frequency capping | Google AdSense / DoubleClick |
3. How We Use Your Data
We use the data we collect to:
- Send you updates about the Street Bracket platform launch (if you joined the waitlist)
- Understand how visitors use the Site so we can improve it
- Display relevant advertising through Google AdSense
- Detect and prevent fraud or abuse
- Comply with our legal obligations
4. Legal Basis for Processing (UK GDPR)
| Processing Activity | Legal Basis |
|---|---|
| Sending waitlist communications | Consent (Article 6(1)(a)) |
| Analytics (Google Analytics 4) | Legitimate Interests (Article 6(1)(f)) — IP anonymisation applied |
| Advertising (Google AdSense) | Consent (Article 6(1)(a)) where required; Legitimate Interests otherwise |
| Security and fraud prevention | Legitimate Interests (Article 6(1)(f)) |
5. Third-Party Services
We use the following third-party services which may process personal data on our behalf or independently as Data Controllers:
Google Analytics 4
We use Google Analytics 4 to analyse Site traffic. IP anonymisation is enabled. Google acts as a Data Processor under our instruction. Data may be transferred to the United States under Standard Contractual Clauses. Google Privacy Policy · Opt out of Google Analytics
Google AdSense
We use Google AdSense to display advertisements. Google and its partners may use cookies to serve ads based on your prior visits to this or other websites. You can opt out of personalised advertising by visiting Google Ads Settings. Google Advertising Policy
Netlify
The Site is hosted on Netlify, which processes server access logs and form submissions on our behalf. Netlify Privacy Policy
6. Data Retention
- Waitlist email addresses: held until you unsubscribe or request deletion, or until 12 months after the platform launches, whichever is earlier
- Google Analytics data: retained for 14 months as configured in our GA4 property
- Server access logs: retained by Netlify per their standard policy (typically 30 days)
7. Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of your personal data we hold
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your personal data ("right to be forgotten")
- Restriction — request we restrict processing of your data
- Portability — receive your data in a portable format
- Object — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at privacy@streetbracket.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including HTTPS encryption, strict HTTP security headers (HSTS, CSP, X-Content-Type-Options), and access controls. However, no transmission over the internet is completely secure.
9. International Transfers
Some of our third-party providers (Google) may process data outside the UK and EEA. Where this occurs, transfers are protected by Standard Contractual Clauses approved by the UK ICO or equivalent adequacy mechanisms.
10. Children's Privacy
This Site is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent version. Continued use of the Site after changes constitutes acceptance of the updated policy.