Privacy Policy – Bright Lambs Ltd

Effective date: 22 June 2025

Bright Lambs Ltd ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This policy explains what personal information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

1. Who We Are

Bright Lambs Ltd is a UK-based business analysis consultancy, providing services to organisations to improve their operations, adopt new technologies, and implement digital transformation strategies.

Our contact details are available on our Contact Us page.

2. What Data We Collect

We may collect and process the following categories of personal data:

a) Clients and Prospects

• Name
• Job title
• Company name
• Email address
• Phone number
• Project-related communications and files

b) Website Visitors

• Contact Form Submissions: When you use our contact form, we collect your name, email address, and message. This information is stored securely in our database to enable us to respond to your inquiry and is retained for 12 months.
• Website Visit Logs: To help us improve our website and understand user engagement, we log visits from what we believe to be genuine human users. To do this, we ignore requests from known automated bots and crawlers. A visit is only recorded if you remain on a page for a short period (currently 5 seconds). The log includes the page you visited, your browser type (user agent), and an anonymized version of your IP address. We ensure the last part of your IP address is removed before storage to protect your privacy.
• Cookies and Analytics: We may use cookies to enhance user experience and analyse usage. You can control cookie settings via your browser.

c) Newsletter Subscribers

• Email address
• Preferences and engagement data

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries or provide requested services
• To manage client relationships and project delivery
• To send updates, insights, or marketing communications (only with your consent)
• To improve our website and services
• To meet legal and regulatory obligations

4. Legal Bases for Processing

We process data under the following lawful bases:

• Contractual necessity (e.g., delivering our services)
• Legitimate interest (e.g., managing our business, improving services)
• Consent (e.g., for marketing communications)
• Legal obligation (e.g., tax and audit requirements)

5. Marketing and Communication Preferences

If you submit your details via our website or email, you may receive follow-up emails from us. You can unsubscribe or update your preferences at any time via the link in the email or by contacting us directly.

6. Data Sharing

We only share personal data with:

• Trusted service providers (e.g., email, hosting, CRM)
• Legal or regulatory authorities when required

All third parties are bound by strict data protection terms.

7. International Transfers

Where we use services that store data outside the UK, we ensure that appropriate safeguards are in place (e.g., standard contractual clauses or adequacy decisions).

8. How We Store and Protect Your Data

We take data protection seriously and apply appropriate technical and organisational measures, including:

• Secure cloud storage
• Restricted access controls
• Encryption and authentication protocols

9. How Long We Keep Data

We retain personal data only for as long as necessary:

• Client project data: 7 years (for legal/accounting purposes)
• Mailing list subscriptions: until unsubscribed

10. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent at any time
• Request data portability

To exercise your rights, email privacy@brightlambs.co.uk.

11. Cookies

Our website may use cookies to enhance user experience and analyse usage. You can control cookie settings via your browser.

For more information, see our Cookie Policy (or request a copy via email).

12. Changes to This Policy

We only retain personal data for as long as necessary to fulfil the purpose it was collected for, including for legal or reporting requirements.