Untapped Asset
Privacy notice
Draft for review · updated 2 October 2026
This draft describes the current domain-enquiry service. Data-retention rules and international arrangements must be finalised before a worldwide release.
Who operates this service?
Brightside Technology Ltd., trading as Untapped Asset™
Registered in England and Wales · company number 17047608
Registered office: 71–75 Shelton Street, London, England, WC2H 9JQ
Scope of this notice
This notice covers visitors and enquiries on Untapped Asset domain offer pages. Seller-account, invitation and artwork-provider processing require additional disclosures before the wider platform release.
Information collected
When you submit an enquiry we collect your name, email address, message, the domain concerned and any offered amount and currency. We also record enquiry identifiers, timestamps and notification delivery status. The enquiry service uses a keyed hash of your IP address to limit abuse; it does not store the raw address in the enquiry record. Hosting providers may process network and access logs separately.
Why we use it
We use these details to deliver your enquiry to the seller, let them reply, protect the service from abuse and record usage and notification outcomes. Required fields are needed to submit an enquiry. Do not include sensitive personal information in your message.
Before release, we must document the lawful basis for each purpose. The form’s permission to share your enquiry is not permission for unrelated marketing.
Who receives it?
The domain seller receives your enquiry and contact details. The hosted service uses Supabase for stored records, Resend for seller notifications and Vercel for hosting. Authorised operators can process records to administer the service. The seller replies directly by email; Untapped Asset does not track those replies. The seller is responsible for how they use information after receiving it.
Retention and international processing
The current pilot does not automatically expire enquiry records. A retention schedule, deletion process and treatment of backups must be agreed and implemented before wider release. Provider storage regions and international-transfer safeguards must also be confirmed; this draft does not claim that data remains in the UK or that specific safeguards are already in place.
Your rights and contact
Depending on the law and lawful basis that apply, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy, or withdraw consent where consent is used. Contact hello@brightsidetech.net to make a request or raise a concern. A request to us does not automatically delete copies already received by a seller.
You can also complain to your relevant data protection authority. In the UK this is the Information Commissioner’s Office.
Cookies and automated decisions
The enquiry feature does not make automated purchase or pricing decisions. Before release we will verify the deployed cookies, browser storage and analytics, and provide any required notice and choice. This draft does not authorise advertising or analytics tracking.