Privacy Policy

Last updated: 28 Nov 2025

1. Who we are

This Privacy Policy explains how Bright Lambs Ltd ("we", "us", "our") collects and uses personal data when you visit our website or contact us.

Bright Lambs Ltd is a company registered in England and Wales.

• Company number: 16516039
• Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
• Email: privacy@brightlambs.co.uk

We are the "data controller" for the personal data described in this notice.

This website Privacy Policy works alongside our internal Data Protection Policy, which governs how we handle staff data and client data within the course of our work.

2. What this policy covers

This policy applies to:

• Visitors to our website
• People who contact us via our online contact form or by email in relation to our services

It does not cover our employees, workers or contractors, they are covered by our internal Data Protection Policy.

3. Personal data we collect

We only collect information that is necessary to respond to you and run our business responsibly.

Information you provide directly

When you use our contact form or email us, we may collect:

• Name
• Email address
• Company name or website (if provided)
• Phone number (if provided)
• Any other information you choose to include in your message

Technical information

Our web hosting provider may automatically collect basic technical information such as:

• IP address
• Browser type and version
• Pages visited and access times
• System performance. To enable or disable animated graphics.

We do not use this information to profile you, and we do not run marketing trackers.

Cookies

We do not use non-essential or tracking cookies on this website. If this changes, we will update this policy and provide appropriate information and choices.

4. How we use your personal data (and legal bases)

We use your personal data for the following purposes:

We do not sell your data or use it for unrelated purposes.

5. Who we share your data with

We may share your personal data with:

• Service providers who support our business (for example, website hosting, email and productivity tools), under appropriate confidentiality and data processing terms.
• Professional advisers (such as legal or accountancy advisers) where necessary.
• Regulators or authorities where we are legally required to do so.

We do not share your data with third parties for their own marketing.

If any transfer of personal data outside the UK/EEA is necessary via our service providers, we will ensure appropriate safeguards are in place in line with UK data protection law.

6. How long we keep your data

We keep personal data only for as long as it is reasonably necessary for the purposes described above.

As a guide:

• Enquiry emails and contact form submissions are normally kept for up to 3 years from our last interaction, unless we need to keep them longer for legal, regulatory or record-keeping reasons.

You can ask us to delete your information sooner (see section 8 below), provided we are not required to keep it by law.

7. How we protect your data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures align with the principles set out in our internal Data Protection Policy and include access controls, secure storage and staff guidance on handling personal data.

8. Your rights

Under UK data protection law (including the UK GDPR and Data Protection Act 2018), you have rights in relation to your personal data, including:

• Access – to request a copy of the personal data we hold about you
• Rectification – to have inaccurate or incomplete data corrected
• Erasure – to ask us to delete your data in certain circumstances
• Restriction – to ask us to restrict how we use your data in certain cases
• Objection – to object to our processing where we rely on legitimate interests
• Portability – in some cases, to receive your data in a structured, commonly used format

To exercise any of these rights, or to ask a question about how we handle your data, you can email us at:
privacy@brightlambs.co.uk

If you contact us to request removal of your information, we will delete it unless we are required to retain it by law or for legal claims.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your data: search online for “ICO make a complaint”.

9. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in law, our services or our internal practices. Any updates will be posted on this page with a revised “Last updated” date.