Last updated: 5 August 2025
Bright Sprout Ltd is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we keep it safe and compliant with UK data protection law.
Who We Are
Bright Sprout Ltd is the data controller responsible for processing your personal data through this website.
If you have any questions about this policy or how we handle your data, please contact:
What Data We Collect and Why
We only collect personal information that’s necessary to provide our services, improve our site, or communicate with you.
| Type of Data | How We Collect It | Why We Collect It |
|---|---|---|
| Name & Email | Contact forms | To respond to enquiries or project requests |
| IP address & browser | Google Analytics | To monitor site performance and improve content |
| Cookie preferences | Consent banner | To store your cookie consent choices |
We do not collect any special category data (e.g. health, ethnicity), and we do not knowingly collect data from children under 16.
Legal Bases for Processing
Under the UK GDPR, we rely on the following lawful bases to process personal data:
- Consent – when you opt in to receive updates or allow non-essential cookies.
- Legitimate Interests – to analyse website usage and respond to your enquiries.
- Contract – when you request services from us.
- Legal Obligation – when data must be retained for tax or regulatory purposes.
You have the right to withdraw consent at any time.
You have the right to withdraw consent at any time.
How Long We Keep Your Data
We only keep personal data for as long as necessary.
- Contact form submissions: up to 12 months
- Google Analytics data:
- Event-level data (e.g. page views, clicks): retained for 2 months
- User-level data (e.g. device/browser ID): retained for 14 months
We do not link analytics data to your name or contact details. All analytics data is anonymised and used solely to understand website performance and improve user experience.
Your Rights
Under the UK GDPR, you have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, please contact us at [email protected].
Third Parties & International Transfers
We use trusted third-party tools to help run our website and understand performance.
For example:
- Google Analytics – for anonymised web traffic analysis
Some data may be processed outside the UK (e.g. in the United States). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK government.
Cookies
Our site uses cookies to:
- Measure website traffic and usage (via Google Analytics)
- Store your cookie consent preferences
We do not set non-essential cookies unless you give consent. You can change or withdraw your cookie preferences at any time via the “Change Cookie Consent” link in the website footer.
Some cookies are set by third-party services like Google Analytics. These services may store and process data outside the UK.
Security
We take appropriate technical and organisational measures to protect your data, including:
- Encrypted website traffic (HTTPS)
- Password-protected systems
- Access control for internal users
In the event of a data breach, we will notify affected users and report it to the ICO if legally required.
Changes to This Policy
We may occasionally update this policy. If the changes are significant, we’ll post a clear notice on the website or contact you directly where appropriate.
Contact Us
If you have any questions about this policy or how we handle your data, please email: