Privacy Policy

This policy explains what personal data Bright Web (“we”, “us”, “our”) collects when you use bright-web.co.uk, and what we do with it. It also covers the rights you have over that data. We keep what we collect to a minimum.

Bright Web is operated by Bright Web Limited, a company registered in England and Wales (company number 17338706) whose registered address is Suite A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom. We are the “data controller” for the personal data described here.

The data we collect

We only collect personal data you actively give us:

• Enquiries via the contact form. Your name, email address and the contents of your message. These are the only fields the form has.
• Emails you send us. If you email [email protected], we receive your email address and whatever you choose to include.
• Server logs. Like almost all websites, our hosting provider may automatically record technical data (such as your IP address, browser type and the pages requested) for security and reliability. We do not use this to identify you.
• Analytics & advertising data — only if you consent. If you accept analytics or advertising cookies in our consent banner, Google Analytics and Google Ads collect usage data about your visit — such as pages viewed, approximate location, device and browser, a randomised identifier, and (for advertising) whether you arrived from one of our ads. These are switched off by default and set nothing until you opt in. See our Cookie Policy for the specifics.

We don't buy personal data from anyone. Please don't send us sensitive details (like health or finances) through the form. We don't need them.

How we use it, and our lawful basis

• To respond to your enquiry and discuss a possible project. Lawful basis: our legitimate interests in answering people who contact us, and taking steps at your request before entering a contract.
• To keep the site secure and working. Lawful basis: our legitimate interests in protecting the site.
• To measure how the site and our ads perform. Lawful basis: your consent, given through the cookie banner. You can withdraw it at any time via “Cookie settings” in the footer, with no effect on the lawfulness of anything done beforehand.

We will only send you marketing emails if you separately ask us to, and you can opt out at any time. We don't make automated decisions or profile you.

Cookies and tracking

By default this site sets no non-essential cookies and loads no third-party tracking scripts. With your consent, we use Google Analytics and Google Ads to understand how the site is used and to measure our advertising; Google's tag is only loaded after you opt in. Fonts are self-hosted, so loading a page doesn't share your data with a font provider. Our Cookie Policy lists every cookie and explains how to change or withdraw your choice.

Who we share it with

We don't sell your data. We share it only with the service providers that help us run the studio, and only as needed:

• Formspree delivers your contact-form message to our inbox, so your form data passes through their systems. Formspree is based in the United States. See their privacy policy at formspree.io.
• Cloudflare Pages hosts and serves the website, and may process server logs as described above. See Cloudflare's privacy policy.
• Hostinger provides our email, so it stores the messages we exchange with you. See Hostinger's privacy policy.
• Google (Google Analytics and Google Ads, loaded through Google Tag Manager) processes the usage and advertising data described above — but only if you consent to analytics or advertising cookies. Google Tag Manager only loads after you opt in, and itself sets no cookies. Google is based in the United States. See Google's privacy policy and its advertising data terms.

Where a provider is outside the UK (for example in the US), we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses to protect your data.

How long we keep it

We keep enquiry messages for as long as needed to deal with your enquiry and any resulting project, plus a reasonable period afterwards for our records and legal obligations. When we no longer need them, we delete them. You can ask us to delete your data sooner (see below).

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw any consent you've given, at any time.

To exercise any of these, email [email protected]. We'll respond within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk.

Security

The site is served over HTTPS, and we take reasonable technical and organisational measures to protect your data. No method of transmission is completely secure, but we work to keep what you send us safe.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed. We'll note any significant change here.

Contact