Privacy Policy
How we collect, use, and protect your personal information.
Last updated: January 2024
Introduction
Bright Whisk Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website bright-whisk.com or engage with our environmental consulting services.
By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our website and services.
Information We Collect
We may collect the following types of personal information:
- Contact Information: Name, email address, postal address, and organisation name when you submit enquiries or enter into a service agreement.
- Project Information: Details about your site, development, or environmental requirements that you provide to us.
- Technical Data: IP address, browser type, operating system, and browsing behaviour collected automatically through cookies and similar technologies.
- Communication Records: Records of correspondence between you and our team.
How We Use Your Information
We use the information we collect for the following purposes:
- To respond to enquiries and provide requested information about our services
- To deliver environmental consulting services under contract
- To communicate with you about projects, proposals, and service delivery
- To improve our website, services, and user experience
- To comply with legal obligations and professional standards
- To send occasional updates about our services (with your consent)
Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:
- Contract: Processing necessary to perform a contract with you or take pre-contractual steps at your request
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and managing client relationships
- Consent: Where you have given clear consent for specific processing activities
- Legal Obligation: Processing necessary to comply with legal or regulatory requirements
Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information with:
- Service Providers: Third parties who assist us in operating our website, conducting our business, or servicing you (e.g., IT support, professional advisors)
- Regulatory Bodies: Where required by law or professional obligation (e.g., Natural England, planning authorities)
- Business Transfers: In connection with any merger, acquisition, or sale of company assets
Data Retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including:
- Client project records: 7 years after project completion
- Enquiry records: 2 years from last contact
- Financial records: 6 years as required by law
Your Rights
Under data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to processing of your data
- Request restriction of processing
- Data portability
- Withdraw consent at any time
To exercise these rights, please contact us at [email protected].
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
International Transfers
Your information is primarily processed and stored within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with data protection law.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact:
Bright Whisk Ltd
14 Greenfield Business Centre
Cambridge, CB4 2WZ
Email: [email protected]
Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk