Privacy Policy

1. Introduction

Welcome to Bright Arc ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website bright-arc.com (the "Service") operated by Bright Arc.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Subscribe to our newsletter
• Contact us through our contact forms
• Interact with our website
• Provide feedback or reviews

This information may include:

• Name and contact information (email address, phone number)
• Professional information (business type, industry)
• Communication preferences
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage patterns, including:

• IP address and geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website
• Device information

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, operate, and maintain our website and services
• Communication: To send you newsletters, updates, and respond to your inquiries
• Improvement: To understand how you use our website and improve our services
• Personalization: To personalize your experience and provide relevant content
• Analytics: To analyze website usage and performance
• Legal Compliance: To comply with applicable laws and regulations
• Protection: To protect our rights and prevent fraud or abuse

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent (e.g., newsletter subscription)
• Legitimate Interests: For business operations, website improvement, and analytics
• Contractual Necessity: To fulfill our obligations when providing services
• Legal Obligation: To comply with applicable UK laws

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. Our Cookie Policy provides detailed information about:

• Types of cookies we use
• How to manage cookie preferences
• Third-party cookies
• Cookie retention periods

Please refer to our Cookie Policy for more information.

6. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: Trusted third-party service providers who assist in website operation
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: When you have given explicit consent

All third-party service providers are contractually obligated to maintain the confidentiality of your information.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure hosting infrastructure
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

8. Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at [email protected].

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:

• Newsletter subscriptions: Until you unsubscribe
• Contact inquiries: 3 years from last contact
• Website analytics: 26 months
• Legal obligations: As required by applicable law

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

12. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date
• Sending email notifications for significant changes

Your continued use of our services after any modifications indicates your acceptance of the updated Privacy Policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Complaints

If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):