Privacy Policy

BrightMetric Education Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for our programmes
• Contact us through our website
• Subscribe to our communications
• Participate in our educational programmes

This information may include:

• Your name and contact details (email address, postal address)
• Your child's age and educational information
• Payment and billing information
• Communications you send to us
• Programme preferences and selections

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Referral source
• Pages visited and time spent
• Device identifiers

2. How We Use Your Information

We use the information we collect to:

• Provide and deliver our educational programmes
• Process your enrolments and payments
• Communicate with you about your account and programmes
• Send you programme updates and educational content
• Respond to your enquiries and support requests
• Improve our website and services
• Analyse usage patterns and trends
• Comply with legal obligations
• Protect against fraudulent or illegal activity

3. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contractual necessity: To fulfil our contract with you when you enrol in our programmes
• Legitimate interests: To improve our services and communicate with you
• Consent: When you opt in to marketing communications
• Legal obligation: To comply with applicable laws and regulations

4. Disclosure of Your Information

We may share your information with:

4.1 Service Providers

We engage third-party companies to perform services on our behalf, including:

• Payment processors
• Email service providers
• Analytics providers
• Hosting services

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell your personal information to third parties.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Typically:

• Account information: Duration of your enrolment plus 6 years
• Payment records: 7 years for tax and accounting purposes
• Marketing data: Until you unsubscribe or request deletion
• Website analytics: 26 months

6. Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw previously given consent

To exercise these rights, contact us at [email protected].

7. Children's Privacy

Our services are designed for children, but we collect personal information only from parents or legal guardians. We do not knowingly collect personal information directly from children under 13 without parental consent.

8. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. See our Cookie Policy for detailed information.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the UK. When we do this, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the UK Information Commissioner's Office
• Transfers to countries with adequate data protection laws

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

14. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk