Privacy Policy

Last updated: September 2024

Introduction

brightaspen ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are registered in England and Wales and operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We may collect information about you in various ways:

Personal Data

When you contact us through our website or engage our services, we may collect:

• Name and contact information (email address, postal address)
• Organisation name and job title
• Information about your environmental consulting requirements
• Correspondence and communication records
• Payment and billing information for services rendered

Automatically Collected Information

When you visit our website, we may automatically collect certain information:

• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Internet Protocol (IP) address

How We Use Your Information

We use the information we collect to:

• Respond to enquiries and provide requested information
• Deliver environmental consulting services
• Process payments and maintain financial records
• Send relevant updates about our services (with your consent)
• Improve our website and service delivery
• Comply with legal obligations

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary to provide services you have requested
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services
• Consent: Where you have given specific consent, such as for marketing communications
• Legal obligation: Processing necessary to comply with legal requirements

Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties except:

• Service providers who assist in our operations (bound by confidentiality agreements)
• Professional advisers such as accountants and legal counsel
• Regulatory authorities when required by law
• Parties involved in business transfers or restructuring

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry data: 2 years from last contact if no service engagement
• Client records: 7 years following completion of services
• Financial records: As required by tax and accounting regulations

Your Rights

Under data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data in certain circumstances
• Object to processing based on legitimate interests
• Request restriction of processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details below.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

International Transfers

Your data is primarily processed within the United Kingdom. If data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with data protection legislation.

Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be notified through our website. We encourage you to review this policy regularly.

Contact Us

For questions about this Privacy Policy or to exercise your data protection rights, please contact:

brightaspen
47 Ecclesall Road South
Sheffield, S11 9PL
Email: [email protected]

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.