Your information, looked after.

Bristol Spring is a community project of Spring Incubator Limited, a company registered in England & Wales (company no. 08582887, registered office: 44 West Broadway, Bristol BS9 4TB). Spring Incubator Limited is the data controller — the person to talk to is Brad Askew, its director.

Anything in this notice, any question, any request: email brad@bristolspring.co.uk and a human (Brad) answers.

If you're a member, we hold what's on your member page: your name and email, what you write about yourself, your business(es), the church you tell us you're part of (optional), your photo if you add one, links you choose to share, and — if you opt in to the member map — your postcode. We also hold things you post inside the member area: asks and offers, notes at tables, RSVPs, and prayer requests if you ever post any.

If you subscribe to the Bristol Spring Calendar (Everything happening in Bristol for entrepreneurs, in one place.), we hold your email address, your name if you gave one, and your topic choices.

If you say hello through the contact form, we hold your message and how to reach you back.

Most members' basic details (name, business, church connection) were first gathered by Brad personally, with people he knows, as the community grew — before the member area existed. If that's you, your page is yours to claim, edit, or have deleted.

One purpose, honestly stated: to run Bristol Spring — the member directory, the events, the emails, the tools. Our lawful basis for the membership basics is legitimate interest in administering a members' community; for emails you've asked for, it's your consent, which you can withdraw any time with one click.

Prayer and church affiliation are special. The law (UK GDPR Article 9) treats anything revealing religious belief with extra care, and so do we. Prayer requests, and whether you've marked that you're praying, say something about your faith, so we only use them with your explicit consent (UK GDPR Article 9(2)(a)). You give it separately from everything else, and you can withdraw it any time by emailing brad@bristolspring.co.uk, or in your settings once the member area reopens. Prayer requests can always be posted anonymously. Some member pages name a church, and we also hold a note of whether a member is part of our fellowship. We've stopped adding that note. We don't currently use or show either to anyone, and we won't unless you give your explicit consent. If you'd like either deleted now, email brad@bristolspring.co.uk.

Nothing is sold. Nothing is shared for marketing. We count visits two ways: Google Analytics 4, and a simple count kept on our own server so we can see which pages actually help people. Our own count sets no cookies and stores no IP address. It keeps the page you looked at, the site you arrived from, your device type, your country, and — if you followed an invite or campaign link — the code in that link, for six months. To tell two visitors apart on the same day we store a one-way scrambled code, rebuilt from scratch every midnight, so it cannot be reversed into your address and is not joined up across days.

We also count visits with Vercel Web Analytics, run for us by Vercel Inc. (who host this website), and Vercel Speed Insights, which measures how fast pages load. Neither sets a cookie. Vercel records the page, the site you came from, your browser, device type and rough location, and tells visitors apart for one day only, using a scrambled code made from your IP address and browser details that is thrown away within 24 hours. Your IP address isn't stored and you aren't followed across days or to other sites. We do this because we have a legitimate interest in seeing which pages help people. Vercel processes the data in the United States under the UK Extension to the EU–US Data Privacy Framework, and keeps the counts for 12 months. If you'd rather not be counted, Turn off visitor counting. It takes one click, and the site works exactly the same.

No advertising trackers, no social media pixels, no data sold or shared with brokers. If your browser blocks analytics, every part of this site still works.

When you use a contact form on this site, including to ask about a partnership, a workspace or speaking, we store your name, email address, organisation (if you give one), your message, the kind of enquiry (general, sponsor or speaker), the page you sent it from and when it arrived. If we reply, we also record when we replied and who replied. We use this to answer you, to keep track of which enquiries still need a reply, and to count how many enquiries of each kind we receive. Our legal basis is our legitimate interest in responding to people who contact us and running Bristol Spring (UK GDPR Article 6(1)(f)). Your enquiry is stored in our database provider, Supabase, and sent to us as an email notification through our email provider, Resend; this website is hosted by Vercel. They act on our instructions as our processors. Some of them may process data outside the UK, and where they do, the transfer is protected by UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the UK International Data Transfer Addendum. If you have accepted analytics cookies, Google Analytics also records that a form was sent and the kind of enquiry, but not your name, email address or message. We keep enquiry records for 24 months after our last contact with you about that enquiry, then delete them. You can ask us to delete your enquiry sooner, or to see or correct it, by emailing us.

To prevent abuse, we briefly record how many messages come from the same email address.

The member map is opt-in and shows a soft dot at your postcode's centre point — never your address. One honest caveat while we finish the engineering: the postcode you type is stored on your member row, and like the rest of your member page it is readable by signed-in members. So add it only if you're comfortable with members knowing your postcode — or leave it blank, and nothing shows.

A small set of service providers process data on our behalf, under contract, only to run the site: Supabase (the database, sign-in, and file storage), Resend (sends our email), Vercel (hosts the website and counts visits), and postcodes.io(turns a postcode into a map point — it receives the bare postcode only, never your name). We also keep periodic backups so a mistake can't wipe the community's data; backups are held securely and pruned on a rolling basis.

Some providers process data outside the UK (Resend is US-based). Where that happens we rely on UK-approved safeguards such as the UK extension to the EU–US Data Privacy Framework or the International Data Transfer Agreement.

The Bristol Spring Calendar lists events for Bristol entrepreneurs. To build it, we contact organisations and people who run or speak at relevant events, such as law and accountancy firms, incubators, workspaces, universities, public bodies and event hosts.

What we collect. Business contact details only: name, job title, organisation, work email address and public details of events you run or speak at. We get these from public sources: your organisation's website and public event pages, including event platforms, and public LinkedIn profiles (we record the public profile web address only). We record where each contact detail came from.

Why we use it. To tell you about our events calendar and ask whether you'd like to list your events, link to the calendar, add the embed or share it. To list your public events and credit you as organiser or speaker, with a link to your own page.

Our lawful basis. Legitimate interests (Article 6(1)(f) UK GDPR). Our interest is running an accurate calendar for Bristol founders, which costs nothing to use or to list on, and letting relevant organisations know about it. We keep contact low-volume and relevant: a single personal message. If you don't reply, we will not chase you.

What we don't do. We don't add you to our mailing list or the digest from our events calendar unless you ask to join. We don't send unsolicited marketing emails, texts or social media messages to sole traders, partnerships (other than LLPs) or other unincorporated groups. We only contact them if they have asked to hear from us. We don't sell your details.

How to opt out. Reply to any message from us saying you'd rather not hear from us, or tell us at bristolspring.co.uk/hello, or email brad@bristolspring.co.uk. We'll stop straight away. We'll keep a short record (your name, email address, organisation, the date and how you asked, and whether you also asked not to be listed) on a do-not-contact list, so we don't contact you again by mistake.

How long we keep it. Outreach contact details for people who don't reply or don't take part: deleted 12 months after our last contact. Organiser and speaker names on published listings: shown while the event is upcoming and in our past-events archive for 24 months after the event, then removed from the listing. If you submit an event, we keep your contact details while the listing is live and for 12 months after it is taken down or the event ends. If you report an error, we keep your report and your contact details for 12 months after we've dealt with it. If you work with us on our events calendar (listing, linking or embedding), we keep your contact details while we're working together and for 24 months after our last contact. Do-not-contact records: kept indefinitely, limited to your name, email address, organisation, the date and how you asked, and whether you also asked not to be listed, so that we keep respecting your request.

Who else sees it. Published event listings, including organiser and speaker names, are public, and also appear in our calendar feeds and in embeds on other websites.

Your rights. You can ask to see, correct or delete your details, object to our use of them, or ask us to restrict it. Contact us at bristolspring.co.uk/hello. You can also complain to us first (see 'How to complain'), or to the Information Commission (ico.org.uk).

While you're part of the community, plus a short tail: backups age out within about twelve weeks. Bristol Spring Calendar email subscriptions last until you unsubscribe. Pastoral content is a river, not a lake: a prayer request that hasn’t been marked answered retires from the wall after 90 days, and anything you write in a monthly check-in about how you’re struggling is erased after six months — automatically, without anyone needing to ask. If you ask us to delete you, we delete your profile and everything attached to it, and the backups holding it expire on that same rolling schedule.

You can ask to see everything we hold about you, correct it, have it deleted, restrict or object to how it's used, or take it away in a portable copy. The route is one email: brad@bristolspring.co.uk. No forms, no questions — deletion requests are honoured within a month, usually much faster.

If you're ever unhappy with how we've handled your information, you can complain to the Information Commission (ICO) at ico.org.uk — though we'd love the chance to put it right first.

If you believe we have handled your personal information incorrectly, you can raise a complaint by emailing brad@bristolspring.co.uk. We will respond to your complaint within one month. If you are not satisfied with our response, or would prefer to raise your concern directly with the regulator, you also have the right to complain to the Information Commission (ICO) at ico.org.uk or by calling 0303 123 1113.

If we change anything that matters — a new purpose, a new provider — we'll say so plainly to members by email, not bury it here. This notice was last updated on 22 October 2026.