Privacy Policy

Sharing Your Personal Data

We may disclose information about you in the following circumstances:

Vendors

We share information with vendors that perform services on our behalf. These vendors only process personal data as instructed by us and in accordance with applicable data protection laws:

1. Customer Support Vendors: These vendors help us host our support resources (such as chats, message boards, or forums) and track, manage, and respond to customer inquiries. We may share data such as Customer Account Details and Communication Information to enable them to provide these services effectively.
2. Sales and Marketing Vendors: These vendors assist us in sending marketing communications, newsletters, and other promotional materials. We may disclose Customer Account Details and Account History Information to facilitate targeted communications and promotional campaigns.
3. Information Technology Vendors: These vendors (including cloud hosting providers) enable us to operate Brizy’s Services reliably and at scale. We disclose Customer Account Details, Account History Information, Payment Information, and Site Usage Information to them so they can provide essential infrastructure, data hosting, and related IT services.
4. Safety and Security Vendors: we may use specialized service providers to monitor, detect, and investigate suspicious or fraudulent activities, as well as potential violations of our policies. We share Customer Account Details and Site Usage Information with these vendors to safeguard our Services and users.
5. Payments Services Vendors: These vendors (such as Stripe or PayPal) enable Brizy to operate payment-related services and functionalities. They may conduct identity or bank verification and help prevent or investigate suspicious or fraudulent behavior. We may disclose Customer Account Details, Payment Services Information, Account History Information, and Site Usage Information with them to facilitate secure transactions and maintain compliance with legal obligations.

Professional Advisors

In limited cases, we may share your information with our professional advisors (e.g., external legal counsel or financial advisors) to ensure compliance with our legal and financial obligations, or to protect our rights and interests. Depending on the circumstances, we may share any of the categories of personal data described in our “Personal Data We Collect” section with these advisors.

Business Partners

We also work with various partners who may receive certain data about you, always subject to appropriate safeguards:

1. Reseller Business Partners: We partner with entities authorized to resell Brizy’s products on our behalf to Customers. If you purchase a resold Service or request support via a reseller, we may share information, such as Account History Information, to help both the reseller and Brizy address your request or issue.
2. Online Advertising Partners: We collaborate with advertising platforms to present tailored ads and measure their effectiveness. For example, we may share limited data (like Account History Information or, if you’re a Customer, Site Usage Information) with social media or ad-serving platforms so they can either exclude existing customers from seeing new-customer offers or show relevant ads to users who haven’t yet upgraded their accounts.
3. Payments Services and Financial Product Partners: Brizy partners with other payment services and financial product providers to help Customers process transactions, receive additional services, or learn about third-party financial offerings. We share relevant Customer Account Details, Payment Services Information, and Account History Information as needed to facilitate these services and product offerings.
4. Third-Party Plugins and Social Networks: We may disclose information if you use third-party plugins (e.g., social media login) or deliberately interact with a social network. For instance, if you log into your Brizy account with a third-party service, we share the fact that you used that service for authentication.

Process Payments

We transmit your Payment Information to our third-party payment processors through encrypted channels to process transactions. Your payment details are not stored on our servers beyond the limited billing and verification information needed for record-keeping and compliance.

Following the Law or Protecting Rights and Interests

We disclose information if we believe such disclosure is necessary to:

• Comply with the law (e.g., in response to lawful requests from government authorities).
• Protect our rights, property, or interests.
• Prevent fraud or abuse of Brizy, our Customers, or their End Users.
• Investigate or prevent criminal or other illegal activities.

Depending on the circumstances, we may share any of the categories of personal data described in our “Personal Data We Collect” section to meet these obligations.

Business Transfers

If Brizy undertakes or is involved in any merger, acquisition, reorganization, sale of assets, or other business transaction, we may disclose personal data as part of the negotiation, due diligence, or completion of such a transaction. In such cases, appropriate measures will be taken to ensure the confidentiality and integrity of the data transferred.

When these third parties act as our data processors, we ensure that data processing agreements are in place under Article 28 of the GDPR (or equivalent obligations in other jurisdictions). These agreements obligate the service providers to protect your personal data and process it solely in accordance with our instructions and applicable legal standards.

Consult our list of approved sub-processors as of March 31, 2025, in Appendix 2.

International Data Transfers

Brizy is a global company, and some of our trusted service providers may be located outside your country of residence. If you are based in the EU, we primarily host data on servers within the EU to comply with GDPR and safeguard your privacy. However, certain providers, including those offering analytics, communication tools, or payment processing services, may store or process personal data in the United States or other locations. In such situations, we ensure the existence of adequate data protection measures, such as the European Commission’s Standard Contractual Clauses (SCCs), relevant adequacy decisions, or similar mechanisms required by local regulations. These measures are in place to protect your personal data and uphold your privacy rights regardless of where the data is processed.

If you have any questions or concerns about data transfers, please contact us at dpo@brizy.io

What Are Your Rights?

Under applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the EU GDPR, you have certain rights regarding your personal data. These rights may vary depending on your jurisdiction, but generally include:

1. Right of Access: You can ask us to confirm whether we process your personal data. If we do, you have the right to request a copy of the personal data we hold about you. We will also provide information about the purposes of processing, the categories of data processed, any recipients (or categories of recipients) to whom data is disclosed, the envisaged retention period, and your rights concerning your data.
2. Right to Rectification: If you believe your personal data is inaccurate or incomplete, you may request that we correct or update it. We may verify the accuracy of the data before making any changes.
3. Right to Erasure (“Right to be Forgotten”): You may request that we delete your personal data in certain circumstances, such as when:

• The data is no longer necessary for the purposes for which it was collected.
• You have withdrawn your consent and no other legal basis for processing applies.
• The data was processed unlawfully.
• You have exercised a legal right to object, and there is no overriding legitimate ground for processing.
• We have a legal obligation to erase the data.

We are not obliged to comply with all requests for erasure (e.g., when we must retain data to comply with a legal obligation or to establish, exercise, or defend legal claims).

4. Right to Restrict Processing: You can request that we restrict (i.e., store but not further process) your personal data in limited circumstances, for example when:

• You contest the accuracy of the data (for a period enabling us to verify it).
• The processing is unlawful, but you oppose erasure and request restriction instead.
• We no longer need the data for the original purpose, but you require it to establish, exercise, or defend legal claims.
• You have objected to processing pending verification of whether we have overriding legitimate grounds.
• We may continue to process your data if we have your consent or need it to establish, exercise, or defend legal claims, or to protect the rights of Brizy or another natural or legal person.

5. Right to Data Portability: Where we process your personal data based on your consent or the necessity to perform a contract with you, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer your data directly to another data controller where technically feasible.

6. Right to Object You have the right to object to the processing of your personal data when it is based on our legitimate interests or those of a third party, if you believe your fundamental rights and freedoms outweigh those interests. You can also object to direct marketing at any time by using the “unsubscribe” link in such communications or contacting us.

7. Right Not to be Subject to Automated Decisions: You may request not to be subject to decisions based solely on automated processing (including profiling) which produce legal or similarly significant effects on you. This right does not apply if:

• The automated decision is necessary for entering into or performing a contract with you.
• It is authorized by law and safeguards are in place to protect your rights and freedoms.
• It is based on your explicit consent.

8. Right to Lodge a Complaint

With Brizy:

If you have any concerns or complaints regarding the processing of your personal data, we encourage you to contact us first at dpo@brizy.io. We will do our best to investigate and address your concerns promptly.

Alternatively, you can contact us by post at:

ProWebCraft LTD: 71-75 Shelton Street, Covent Garden, WC2H 9JQ, London, United Kingdom 

However, please note that given the global reach of our app, we strongly recommend that you contact us by email. We cannot guarantee the arrival on time by post. If you, however, choose to submit a request through the mail, we recommend that you mail your request with confirmation of receipt. 

We will consider and act upon any request in accordance with applicable data protection laws. 

With the ICO (UK):

If you are located in the United Kingdom and feel that we have not adequately resolved your complaint or concern, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk/
• Helpline: +44 (0)303 123 1113
• With Other Data Protection Authorities (EU/EEA):
• . If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

We aim to respond to any valid request relating to your rights within one month, or within two months if the request is complex or if you have made multiple requests. In such cases, we will let you know about the delay and provide an explanation. You may also send your request by post if needed:

For any questions or concerns about this Privacy Policy or how we manage your personal data, please contact us at dpo@brizy.io.