Who we are

This website, bright.limited, is run by Bright Web Development Ltd, a company registered in England and Wales (company number 16589929). Our registered office is 341 Psalter Lane, Sheffield, S11 8WA.

Bright Web Development Ltd is the controller of the personal information described in this policy. If you have any questions about it, email glen@bright.limited.

Information we collect

When you contact us. If you use one of the enquiry forms on this site, we collect your name, email address, phone number (if you give it), your message, and the date you sent it. If you arrive from one of our Google Ads, we also record which ad campaign brought you to the form.

When you download a resource. If you request a download such as our platform checklist, we collect your name and email address. We send you the file and nothing else: you are not added to any mailing list.

When you browse the site. Like any website, the services that host and protect this site process your IP address and basic browser information in order to deliver pages to you and to block malicious traffic. We do not store this with your enquiry.

Cookies. If you allow them, we use analytics and advertising cookies. See the Cookies section below.

How we use your information, and our lawful basis

  • Replying to your enquiry and discussing the work you've asked about: taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.

  • Sending you a resource you've requested: our legitimate interest in providing what you asked for.

  • Protecting our forms from spam and abuse: our legitimate interest in keeping the site secure.

  • Understanding how the site is used (analytics): your consent, given through the cookie banner.

  • Measuring whether our Google Ads lead to enquiries: your consent, given through the cookie banner.

We do not use your information for automated decision-making, and we do not add you to a mailing list.

Who we share it with

We use these providers to run the site and handle enquiries. They process data for us under contract:

  • Google (Google Analytics and Google Ads): website analytics and ad measurement, only if you allow those cookies. For Google Ads conversion measurement, Google may also use this data as an independent controller under its own terms. See Google's privacy policy.

  • Cloudflare: security and content delivery for the website.

  • Laravel Cloud: hosting for the website and the database that stores enquiry form submissions.

  • Resend: delivering the email notification we receive when you send an enquiry.

  • Microsoft (Microsoft 365): hosting our email, including the enquiry notifications we receive.

We do not sell your personal information or share it with anyone for their own marketing.

International transfers

Some of these providers are based in, or process data in, the United States. Where your information is transferred outside the UK, we rely on the UK Extension to the EU-US Data Privacy Framework (for providers certified under it) or on standard contractual clauses approved for UK transfers, to make sure it stays protected.

How long we keep it

  • Enquiry and download form submissions, and the email notifications we receive about them, are kept for 24 months and then deleted.

  • Cookies last for the periods listed in the Cookies section.

If an enquiry leads to work together, we keep the related records for as long as the law requires for business and tax purposes.

How we protect it

Form submissions are stored in a secured database that only we can access. The site is served over an encrypted connection (HTTPS) and protected against automated attacks. We use appropriate technical and organisational measures to protect your information against unauthorised access, loss or misuse.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal information we hold about you

  • ask us to correct it if it's wrong

  • ask us to delete it

  • object to, or ask us to restrict, how we use it

  • ask for it in a portable format

  • withdraw your consent to cookies at any time, using the Cookie settings link at the bottom of every page

To use any of these rights, email glen@bright.limited. We'll reply within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to put things right first, so please contact us before going to the ICO.

Cookies

Cookies are small files a website stores in your browser. This site uses a few that are essential for it to work, and, only if you allow them, cookies for analytics and for measuring our Google Ads.

When you first visit, analytics and advertising cookies are off. A banner lets you accept them, reject them, or choose each type. You can change your mind at any time using the Cookie settings link at the bottom of every page. If you withdraw consent, we delete the analytics and advertising cookies this site has already set.

Essential cookies (always on)

These are needed for security and for the enquiry forms to work, so they don't need your consent.

  • bright-web-session (Bright Web): keeps the enquiry form secure while you fill it in. Lasts 2 hours.

  • XSRF-TOKEN (Bright Web): protects forms against cross-site request forgery. Lasts 2 hours.

  • __cf_bm (Cloudflare): tells people apart from automated bots, protecting the site. Lasts 30 minutes.

  • bw_consent (Bright Web): remembers your cookie choice and when you made it. Lasts 6 months.

Analytics cookies (only if you allow them)

  • _ga (Google Analytics): distinguishes visitors so we can count them. Lasts 2 years.

  • _ga_<ID> (Google Analytics): keeps track of your current visit. Lasts 2 years.

We use these to see which pages are useful and how people find the site. They do not tell us who you are.

Advertising cookies (only if you allow them)

  • _gcl_au (Google Ads): measures whether a visit from our ads leads to an enquiry. Lasts 90 days.

  • _gcl_aw (Google Ads): stores the ad click reference when you arrive from one of our ads. Lasts 90 days.

We use these only to measure our own Google Ads. We don't use them to show you ads elsewhere.

If you don't allow cookies

We use Google Consent Mode. If you reject analytics or advertising cookies, none are stored on your device. Google may still receive a limited signal without cookies when a page loads or a form is sent (for example the time, your browser type, the page address, and whether you arrived from one of our ads). Google uses this to estimate, in total, how many enquiries came from ads. It is not used to identify you.

Changes to this policy

If we change how we use your information, we'll update this page and the date below. If the change affects cookies, the cookie banner will ask for your choice again.

Last updated: November 2026