Last updated: November 3, 2026
Bright-egret is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page provides specific information about how we process your personal data and your rights under GDPR.
For the purposes of GDPR, the data controller is:
Bright-egret
47 Clerkenwell Road
London EC1M 5RS
United Kingdom
Email: [email protected]
We process your personal data under the following legal bases:
You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format.
You may request correction of inaccurate or incomplete personal data we hold about you.
Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You may request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You may object to processing of your personal data where we are relying on legitimate interests as our legal basis for processing.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request." We will respond to your request within one month, as required by GDPR.
Your personal data is primarily processed within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Specific retention periods vary depending on the type of data and purpose of processing.
For questions specifically related to data protection or to exercise your GDPR rights, you may contact our data protection representative at [email protected].
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.