Privacy Policy

# Scope

This policy applies to brackeneast.com and messages you send to Bracken East about the website or prospective services. It does not govern personal data processed for a client engagement. A signed services agreement, statement of work, and any applicable data-processing terms govern that work.

# Information we process

# Information you choose to send

The contact page asks for your name, email address, optional company name, and message. When you submit the form, your browser sends those fields and a Turnstile response to a Cloudflare Worker. The Worker validates the request and sends the message through Cloudflare Email Service to Bracken East's mailbox. The website does not write the submission to a database.

# Website request and security data

Cloudflare hosts and protects the site. When your device requests a page or submits the form, Cloudflare may process your IP address, requested URL, date and time, browser or device information, referring page, routing data, Turnstile interaction signals, and security events. Bracken East may access limited logs or aggregate operational data when needed to deliver, protect, or troubleshoot the site. Cloudflare describes this processing in its Turnstile Privacy Addendum.

# Aggregate traffic metrics

Cloudflare provides Bracken East with aggregate zone and Worker metrics derived from normal requests at its network edge, such as request volume, response status, bandwidth, and broad traffic trends. These metrics are used only to understand site use, reliability, and performance, not for advertising, profiling, or tracking people across sites.

The site does not load a browser analytics beacon, set analytics cookies, or access browser storage for these measurements. Bracken East receives aggregate metrics rather than a visitor-level analytics profile.

# Protected previews

Pre-release environments may use Cloudflare Access. For authorized preview users, Cloudflare may process login identifiers plus authentication and request logs to enforce access controls and investigate suspicious activity.

# Information the public site does not collect

The public site has no user accounts, checkout, advertising pixels, session replay, or social-media SDKs. Bracken East does not use cookies or browser storage for advertising, profiling, or analytics. Cloudflare may use strictly necessary cookies or browser storage for Turnstile, Access, or other security controls.

# Why we use information

• Deliver, secure, maintain, and troubleshoot the website.
• Measure aggregate page views, referrals, and site performance.
• Respond to inquiries, arrange calls, evaluate fit, and prepare proposals.
• Maintain appropriate business records, prevent abuse, enforce these website terms, and comply with law.

Bracken East does not use website visitor information to make solely automated decisions that produce legal or similarly significant effects.

# When information is disclosed

Bracken East discloses information only as reasonably necessary:

• To Cloudflare for website delivery and security, aggregate traffic metrics, Turnstile validation, and sending contact messages.
• To Proton for delivery and storage in Bracken East's mailbox.
• To professional advisers, insurers, or public authorities when needed to comply with law, protect legal rights, investigate misuse, or address a security incident.
• To a buyer or successor as part of a merger, reorganization, or sale of the business, subject to applicable law and the commitments in this policy.

Bracken East does not sell or rent personal data, disclose it for cross-context behavioral advertising, or process it for targeted advertising. There is no payment or other benefit exchanged for website visitor data.

# Retention

The contact endpoint does not intentionally store form submissions in a website database. Delivered messages and related business records are kept only while needed to respond, evaluate or manage a business relationship, document decisions, resolve disputes, protect the service, or meet legal obligations. Cloudflare may retain security, Turnstile, request, and email-delivery data under its settings and policies. Cloudflare retains aggregate zone and Worker measurements under the retention period applicable to the service. When information is no longer needed, Bracken East deletes it, de-identifies it, or allows it to expire from systems and backups under normal retention cycles.

# Security

Bracken East uses administrative and technical safeguards appropriate to the information and the size of the service, including HTTPS, restricted administrative access, account security controls, and data minimization. No transmission or storage system is completely secure. Do not send passwords, authentication secrets, payment-card data, government identifiers, health information, or sensitive client exports through ordinary website email.

# Your privacy choices and rights

Depending on where you live and which law applies, you may ask Bracken East to confirm whether it processes your personal data and to access, correct, delete, or obtain a portable copy of that data. You may also use an authorized agent where permitted by law.

Send requests to privacy@brackeneast.com with enough information to identify the relevant interaction. Bracken East may verify your identity and authority before acting. If a request is denied, reply with the subject "Privacy Appeal" and explain why you believe the decision should be reconsidered. Requests and appeals will be handled within the time required by applicable law. Connecticut requests covered by the Connecticut Data Privacy Act are generally answered within 45 days, subject to a permitted extension; covered appeals are answered within 60 days.

Because Bracken East does not sell personal data or use it for targeted advertising, there is currently nothing to opt out of through a browser preference signal. If those practices change, Bracken East will update this policy and provide the controls required by law.

# Children

This business-to-business website is not directed to children or designed for use by anyone under 18. Bracken East does not knowingly collect personal information online from a child under 13. If you believe a child sent personal information, contact privacy@brackeneast.com so it can be reviewed and deleted as appropriate.

# Changes to this policy

Bracken East may update this policy as the website, providers, or legal requirements change. The effective date at the top will be revised when an update is posted. Material changes will be presented prominently on the site when appropriate.