Privacy Policy
Last updated: November 2024
Introduction
Bright-brook respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard information when you use our website or engage with our educational programmes.
Information We Collect
We may collect the following types of personal information:
- Name and contact details (email address, postal address)
- Programme preferences and educational interests
- Communication history related to enquiries and bookings
- Technical data including IP address, browser type, and device information
- Cookie data as described in our Cookie Policy
How We Use Your Information
We use collected information for the following purposes:
- Processing enquiries and programme bookings
- Communicating about our educational services
- Improving our website and programme offerings
- Complying with legal obligations
- Protecting against fraud and security threats
Legal Basis for Processing
We process personal data based on:
- Consent you provide when submitting enquiries or requesting information
- Contractual necessity when delivering educational programmes
- Legitimate interests in operating and improving our services
- Legal obligations under UK law
Data Sharing
We do not sell or rent your personal information to third parties. We may share data with:
- Service providers who assist in operating our website and programmes
- Professional advisers including lawyers and accountants
- Regulatory authorities when required by law
All third parties are required to maintain appropriate data protection standards.
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law. Enquiry data is typically retained for two years unless an ongoing relationship exists.
Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of your data
- Object to processing of your data
- Request restriction of processing
- Data portability
- Withdraw consent where processing is based on consent
To exercise these rights, contact us at [email protected]
International Transfers
Your personal data is primarily stored and processed within the United Kingdom. If data is transferred outside the UK, we ensure appropriate safeguards are in place to protect your information.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.
Contact Information
For questions about this privacy policy or our data practices, contact us at:
Bright-brook
42 Wellington Street
Oxford, Oxfordshire OX1 2JF
United Kingdom
Email: [email protected]
Complaints
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.