Plain-English site notice

Privacy at b_Rail Works.

Last updated 15 August 2026.

Contact Nova is a verified person-to-person email route. It is not a marketing list and the public AI chat is not active. We use the least information we reasonably can to confirm your address, prevent abuse and reply to the message you choose to send.

Who is responsible

b_Rail Works decides how information submitted through brail.works is used. For privacy questions or requests, use Contact Nova and say that your message concerns privacy.

What the contact route uses

• the email address you enter and the plain-text message you choose to send;
• a six-digit verification code and a strictly necessary secure browser-session cookie;
• keyed, one-way identifiers, timestamps and short-lived request records used for verification, replay protection and rate limiting; and
• security-check information processed by Cloudflare Turnstile to help reject automated abuse.

The b_Rail Works site database does not store your readable email address or message body.

Why we use it

We use this information to deliver the contact service you request, reply to genuine enquiries and protect the service from misuse. Our lawful basis is our legitimate interest in running a safe, useful contact route and responding to people who choose to contact us. We do not add contact addresses to a marketing list.

Who processes it

Cloudflare hosts the site, security check and keyed site records. Resend delivers verification and contact email. Google Workspace receives the message in the b_Rail Works inbox. These providers process only the information needed for their part of the route and may process it outside the UK under their own contractual safeguards and privacy terms.

How long it is kept

• verification codes expire after 10 minutes;
• the verified browser session expires after no more than 30 days;
• contact replay/rate-limit records expire after 24 hours;
• expired keyed visitor records are removed after 31 days of inactivity during subsequent protected-route maintenance; and
• inbox correspondence is kept while an enquiry remains useful, then deleted no later than 12 months after the last substantive contact unless it is still needed for an ongoing matter, a legal obligation or a dispute.

Cookies and analytics

The contact route uses a strictly necessary secure session cookie after email confirmation and Cloudflare Turnstile for abuse protection. brail.works does not currently use advertising cookies, behavioural analytics or a marketing tracker.

Your choices and rights

You can ask what personal information we hold about you, request correction or deletion, object to or restrict use, or raise a concern. Use Contact Nova and identify the request. You can also complain to the UK Information Commissioner’s Office.

Changes

Material changes will be published on this page with a new updated date.