Privacy Policy

Last updated: 10 May 2026

This privacy policy explains who we are, what personal data we collect when you visit decisionshapers.com or sign up for our mailing list, why we collect it, how we use it, who we share it with, and the rights you have under UK and EU data protection law.

Who we are

The data controller for personal data collected through this site is Brilliantio Ltd, a company registered in England and Wales. You can contact us about anything in this policy at hello@brilliantio.com.

What we collect, when, and why

We try to collect as little as possible. The categories below are the entirety of what we hold.

Mailing-list data — only if you sign up

If you submit your email address to our mailing list, we collect your email and the timestamp of your sign-up. We use this only to send you launch updates about Decision Shapers and a short reading guide. The legal basis is your consent (UK GDPR Article 6(1)(a)).

You can unsubscribe at any time using the link at the bottom of any email we send you. When you unsubscribe, we mark your record as unsubscribed and stop sending you mail. We retain unsubscribed records for up to 12 months for suppression purposes (so the same address is not re-imported by mistake), after which we delete them.

Mailing-list data is processed by Moosend (Sitecore Limited) on our behalf as a data processor.

Site analytics — only if you consent

We may use Google Analytics 4 to understand which articles are read and how visitors arrive at the site. This is optional and runs only after you accept analytics cookies via the cookie banner. If you decline, no analytics tags are loaded.

When analytics is enabled, Google may collect: a randomised client identifier stored in the _ga cookie, the pages you visit on this site, your approximate region (derived from IP, with the IP itself anonymised before storage), the device and browser you use, and how you got to the site (referrer). We never collect names, email addresses, or other directly identifying data via analytics. The legal basis is your consent.

Analytics data is processed by Google Ireland Limited on our behalf.

Server logs and security — necessary for the site to work

Like every site on the public web, our hosting platform records minimal access logs (IP address, user agent, the URL you requested, the time of the request) so the site can serve pages and so we can detect abuse. These are processed by Cloudflare, Inc. as our hosting provider and content delivery network. Cloudflare also sets a strictly necessary cookie called __cf_bm for bot protection. The legal basis is our legitimate interest in keeping the site available and secure (UK GDPR Article 6(1)(f)).

Server logs are retained on Cloudflare’s standard schedule (typically days, not months) and we do not download or aggregate them.

Things we do not do

  • We do not run advertising trackers.
  • We do not sell or share your personal data with third parties for their own marketing.
  • We do not buy mailing lists or send unsolicited mail.
  • We do not knowingly collect data from children under 13.

International transfers

Our processors operate globally. Data may be transferred to and stored in the United States and other countries. Where this happens, transfers are protected by the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an equivalent safeguard, as required by UK GDPR.

Your rights

Under UK and EU data protection law, you have the right to:

  • access the personal data we hold about you
  • have inaccurate data corrected
  • have your data deleted (the right to erasure)
  • restrict or object to our processing
  • receive your data in a portable format
  • withdraw any consent you have given, at any time

To exercise any of these rights, email hello@brilliantio.com. We will respond within one month. If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or the data protection regulator in your country of residence.

Changes to this policy

If we make material changes to this policy, we will update the date at the top and, if you are subscribed, send you a notice by email. Minor wording corrections will be made without notice.