01Who we are

BrightLabs is a modern digital agency combining creative, technology and growth. For data protection purposes, BrightLabs is the data controller for personal data collected through our website and services. Reach us at hello@brightlabs.live or 01603 976281.

02What we collect

• Enquiries: name, business, email, phone, and any details you share when you send us a brief via Start a Project
• Client account data: billing details (via Stripe — we never see your card), invoicing info, and the contact details needed to deliver services
• Website analytics: anonymous traffic data via privacy-friendly tools (page views, referrers, country-level location) — no personal profiles built
• Lead Engine (internal only): public business information sourced from Google Places (business name, address, website, ratings) — used only internally for outreach research

03How we use your data

• Respond to your brief and follow up about our services
• Deliver the engagements you’ve signed up for and manage your account
• Send you transactional emails (welcomes, updates, invoices, reminders)
• Improve our website and offering through aggregated analytics
• Comply with legal and accounting obligations

We will never sell your data, never share it with third parties for their own marketing, and never email you unsolicited promotions you didn’t opt into.

04Lawful basis (UK GDPR)

We rely on: contract (to deliver services you’ve requested), legitimate interest (to respond to enquiries and run our business), consent (for optional marketing — withdraw any time), and legal obligation (e.g. accounting records).

05Tools we use

To deliver our services we rely on trusted, GDPR-compliant providers including: Stripe (payments), Zoho Mail (email), MongoDB Atlas (database, EU hosted), Google Cloud / Vercel (hosting), and OpenAI / Anthropic / Google Gemini (AI features). Data is encrypted in transit and at rest.

06How long we keep it

Enquiry data: up to 24 months unless you become a client (then kept for the duration of our engagement + 6 years for accounting). Marketing data: until you unsubscribe. We delete or anonymise data once it’s no longer needed.

07Your rights

Under UK GDPR you have the right to: access, correct, delete, restrict or object to processing of your personal data, request a copy in a portable format, and withdraw consent at any time. Email hello@brightlabs.live and we’ll respond within 30 days.

If you’re not happy, you can complain to the Information Commissioner’s Office (ico.org.uk).

08Cookies

Our website uses only essential cookies (to keep you signed in to any admin area) and lightweight, anonymous analytics. We don’t use third-party advertising or tracking cookies.

09Contact

Privacy questions or data requests: hello@brightlabs.live · 01603 976281