Bright Lambs – GDPR Statement

At Bright Lambs Ltd, we are fully committed to protecting the privacy and security of our clients, partners, and website visitors. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 in handling all personal data.

Data Collection and Purpose

We collect and process personal data solely for the purpose of delivering our services, communicating effectively with clients, and improving our offerings. This may include names, contact details, business information, and any relevant data shared with us during engagements.

Lawful Basis for Processing

We process data on the basis of legitimate interest, contractual necessity, and consent. Any marketing or non-essential communications are only sent with explicit consent, and individuals may withdraw their consent at any time.

Contact Forms and Communications

If you contact us via our website or any other channel, we may use your details to respond to your enquiry or follow up with relevant information. You can unsubscribe from further communications at any time by following the instructions in our emails or by contacting us directly.

Data Storage and Security

All personal data is stored securely and only accessible to those who need it to perform their roles. We implement strong technical and organisational measures to prevent unauthorised access, loss, or misuse of data.

Data Sharing

We do not sell, rent, or trade personal data. Where necessary, we may share data with trusted third-party providers who help us deliver our services, always under strict data protection agreements.

Data Subject Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where applicable)
• Object to or restrict certain types of processing
• Port your data to another provider
• Withdraw consent for communications at any time

To exercise any of these rights, please contact us at privacy@brightlambs.co.uk.

Retention

We only retain personal data for as long as necessary to fulfil the purpose it was collected for, including for legal or reporting requirements.