Privacy Policy

This privacy policy applies between you, the User of this Website, and The Bright Bittern Limited, the Owner and Provider of this website.

Frequently Asked Questions

Who is using my data?

The Bright Bittern Limited

What is my data being used for?

The Bright Bittern Limited stores and processes data to help us maintain your account, process and store transaction details, offer customer support, send system updates and send offer details.

What will happen to my data?

The Bright Bittern Limited will process your data and may use your data to conduct our business and to send you information, updates and offers we think you’ll be interested in.

What data will be kept and stored?

The Bright Bittern Limited stores registration details, transaction details, usage information and any information about your web preferences on our website.

What data will be shared with others?

The Bright Bittern Limited will only share your data with regulators or government bodies if requested. The Bright Bittern Limited will never sell or share your data to any third-party, unless you grant us your explicit permission to do so. We provide some data to the third parties that we use to provide a service our business, which is limited to the information they require in order to provide their explicit services, such as providing your financial information to our accountants.

How long will my data be kept for?

The Bright Bittern Limited will store your data for a period of up to seven years after your last communication. After this period, your account will be automatically deleted. You can request your account to be deleted at any time.

Who will be able to access my data?

How will my data be kept and made secure?

Like most small businesses, we use mainstream packages for everything from our client records to email and accounting. This means that some of your data may be held in the EEA, and some may be held in services in the USA or elsewhere. We have picked mainstream suppliers with appropriate security standards.

Privacy Notice

The Bright Bittern Limited takes your privacy seriously. That is why we will only use your personal information to provide you with the products and services you have requested, as well as to administer your account. We promise respectful treatment of the personal information of everyone we have contact with.  We want to provide information that is simple and clear.

About our privacy policy

Our privacy policy outlines your relationship with our company and explains in detail how we use the information that you provide us with. We keep this Policy under regular review, and we may revise it as time goes on. Please check back here from time to time to make sure you’ve got the latest information.

About The Bright Bittern Limited

The Bright Bittern Limited is registered in England and Wales with Registration Number 16778804. We are registered with the UK’s Information Commissioner’s Office under the Data Protection Act 2018. They are our data regulator, and their contact details are: www.ico.org.uk. Our data controller is Lisa Kapsalis, and we encourage you to get in touch with any questions you may have about The Bright Bittern Limited.

You can reach us by:

Post: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM
Email: contact@thebrightbittern.co.uk
Website: www.thebrightbittern.co.uk

Changing your preferences

If you’d like to change your web, contact or marketing preferences, you can do so at any time. Simply contact us at contact@thebrightbittern.co.uk to request the necessary amendments.

We process information about

"PROSPECTS" - contacts working at or connected with potential CLIENTS; potential CLIENTS

"CLIENTS" - who have bought goods or services from us, and "CLIENT Contacts" who are individuals employed by or contracted to CLIENTS; and children for whom services have been purchased.

"SUPPLIERS", "ASSOCIATES" - SUPPLIERS or potential SUPPLIERS of goods or services to us;

"AFFILIATES/REFERRERS" - who have signed up to an AFFILIATE scheme or who have referred PROSPECTS to us;

"EMPLOYEES" - Our EMPLOYEES if we have any. EMPLOYEES should refer for data privacy information relating to their own data to their contract of employment.

How we do business

The Bright Bittern Limited is committed to upholding and maintaining your personal rights. We’re committed to protecting your privacy and honouring your legal rights to control how we use your personal data. We only collect and use personal data when we need to:

because you have asked us to do something (for example, send you newsletters);
so that we can reply to queries or complaints;
to develop and manage our business relationships;
to help grow our business and fulfil our contracts;
to provide services to CLIENTS;
to calculate payments to ASSOCIATES or AFFILIATES/REFERRERS;
to meet our legal obligations.

We try to make sure the information we hold is accurate and up to date and is no more than we need to have. We also operate our business in line with the European Union’s General Data Protection Regulation and observe your rights to change or withdraw your opt-in options at any time. As part of our ongoing commitment to uphold your rights, The Bright Bittern Limited will also extend advice on how you can issue formal complaints to relevant authorities, such as the Information Commissioner’s Office.

Sensitive data

The Bright Bittern Limited does not collect any sensitive data about you. Sensitive data refers to (but is not limited to) information about your race or ethnic background, religious or political affiliations, trade union affiliations, sexual orientation, criminal background or health background.

Who our privacy policy applies to

This privacy policy has been developed to inform users of The Bright Bittern Limited how we use their data. The Bright Bittern Limited is a business management and administration support services company, and we need to process the data of individuals to offer our products and/or services. Bearing that in mind, our privacy policy applies to any and all individuals registered with us as a user, customer, administrator or in any other capacity. Whoever you are, our intention is to use your information to make things work smoothly for you in your experience of dealing with us. If that is not how it turns out for you, please make sure to contact us.

What information this policy applies to

There is a lawful basis for processing your data, and this section of our privacy policy outlines how this applies to the personal information you provide us with or allow us to collect. The information this policy applies to includes information that you:

provide as part of any registration process
provide as part of any campaign creation activity
provide in the form of numerical data, metadata or communications
give us as part of our ongoing relationship

This policy also applies to information that we:

collect relating to how you interact with our website
must process to complete purchases and other transactions

Consent

Please note that when you submit personal data on our website, you are giving The Bright Bittern Limited your explicit consent that we can use that data in line with our privacy policy.

Opting out

After giving The Bright Bittern Limited your consent, you are free to amend your consent or withdraw your consent at any time. You have the right to object to the processing of your data. To opt-out, change your preferences or revoke your consent, simply contact us by emailing contact@thebrightbittern.co.uk.

Data processing and storage

PROSPECTS

Most of the information we process comes from you. We process it so we can reply to you, and when you contact us again, so we know what you asked before, what you were sent, and what you told us. Typically, we are collecting name, contact details, how we came across you, and background information from you or published by you on social media or freely accessible on the internet, on why you might be interested in our products or services or a relevant contact for our business. If you sign up to a newsletter list, you will be sent what you asked for. You can unsubscribe at any time by clicking the unsubscribe button on any email. You are not automatically subscribed to any other lists but may be invited to join an appropriate one. If we email you individually using our own email system or respond to an email sent to us at any of our business email addresses, a copy of that email will also be stored. If you make an enquiry via our website, we will keep details of that enquiry and response for our data retention period.

We do not routinely keep special category data. To the extent we hold this, it was supplied or made publicly available by you.

CLIENTS

Once you buy something from us, we will collect information from you at the point of sale. This will include the information we collect from PROSPECTS (above). We collect your email address, phone number and postal address so we can provide what we have contracted to, invoice you and keep proper records of our business relationship. We process your data to support the delivery the goods and services you have bought. We keep records of the goods/services provided to you, and information you give us, so we can support you when needed and advise you of any additional services you may need.

THIRD PARTY DATA

As well as your own personal data, we understand that you may need to provide us with personal data relating to your EMPLOYEES, your workers, or third parties (often your CLIENTS or SUPPLIERS) – depending on the services we are providing to you.  We hold all such information under strict confidentiality obligations, as set out in our terms of business.

FINANCIAL AND CREDIT CARD DETAILS

Credit card payments are handled by an external secure processor in accordance with their data security policies. We receive limited information from our processor for us to reconcile your payment with your invoice. If you pay us by BACS or direct transfer, we know only what the bank tells us, which is usually the name of the person who paid us and how much and the reference number. We do not routinely keep credit scores nor use credit reference agencies.

THIRD PARTY INFORMATION

We will act in accordance with your statutory rights, subject to the exclusions and exemptions that may apply. When we are processing data about you on behalf of a CLIENT, we are operating under the banner of our CLIENT’s data privacy policy. We will refer any enquiry from you to them, as they are the ‘data controller’ responsible for dealing with your query. But we will support that by providing relevant information to our CLIENT for passing to you. When we are processing data about you because of a direct connection between you and our business we are acting as a ‘data controller’ (and operating under this policy).

SUPPLIERS, ASSOCIATES AND AFFILIATES

If you become a SUPPLIER, ASSOCIATE or an AFFILIATE/REFERRER we keep a copy of the contract between us, and your bank details so we can pay you. We also keep a record of invoices/payments for accounting purposes. We keep a record of the work you undertook for us/our CLIENTS along with any comments, reviews or suggestions about that work including complaints (if any) and their resolution. This information is all needed to manage our CLIENT relationships and our supply chain. If we set up an AFFILIATE/REFERRER scheme, AFFILIATE/REFERRER data will be held in accordance with this policy. We will ask you for information when you apply, and that information will be kept to administer the scheme. If you are a REFERRER, we remind you that referrals that you make to us may only be made with the knowledge and consent of the person being referred.

TO ANY AND ALL INDIVIDUALS

Like most small businesses, we use mainstream packages for everything from our CLIENT records to email and accounting. This means that some of your data may be held in the EEA, and some may be held in services in the USA or elsewhere. We have chosen mainstream SUPPLIERS with appropriate security standards.

We will store your data for a period of seven years after your last contact attempt unless otherwise noted and explicitly stated. If you subscribed to a newsletter or updates list, you will remain on the list(s) you joined until you unsubscribe from that list. We store data relating to transactions, payments and orders for a period of up to seven years. This period may be extended under certain circumstances as part of our ongoing commitment to comply with UK and international law.

We use carefully selected and recognised third parties to help us take payments, provide commerce services and manage company accounts. Some of these third parties may operate outside the European Union. The types of information that we will be processing depend on the nature of our relationship with you. We may process information about you that you have yourself provided to us or published generally on the internet through social media or on other websites.

In all cases, we will have what identifying and communication information that is relevant and that we can sensibly obtain: that is, your name, email address, employer or business name, job title or position, contact address, social media addresses, and we may also capture some of the information published by you in your social media output to the extent that it may be relevant to our interactions.

If you are or work for a PROSPECT, we will aim to obtain and process information that is relevant to our building a business relationship with you and doing business together, which may relate to your business and your personal interests.
If you are or work for a customer or SUPPLIER, we will also keep records of our interactions, the work we have done for you or commissioned from you, the progress of work, and financial and accounting records.
If we are processing information about you purely because we are providing services to others, please see Section CLIENT above.  Please note that your rights may be subject to applicable exemptions.
If you have any questions or concerns about our use of your information, or how we have responded to any request about your personal data, please take it up in the first instance by emailing us at contact@thebrightbittern.co.uk
If we cannot resolve the issue, you can raise your concerns with the official authority, The Information Commissioner.

The Bright Bittern Limited may process your data based on more than one legal ground. Circumstances under which we may be required to process your data under more than one legal ground may include:

Reason: Customer registration
Data type: Identity and contact information
Legal basis: To carry out a contract we’ve made with you

Reason: Processing and/or delivering your order
Data type: Identity, contact information, financial information, financial and transactional data
Legal basis: To carry out a contract we’ve made with you and to exercise our legitimate interests to recover debts owed

Reason: To manage our customer relationship with you
Data type: Identity, contact information, marketing and communications preferences
Legal basis: To carry out a contract we’ve made with you, to comply with legal obligations and to exercise our legitimate interests to keep our records updated

Marketing and communications

The Bright Bittern Limited may send you marketing communications if you have given us your contact details and opted in to marketing communications. You can opt-out of these marketing communications and manage your preferences at any time by emailing: contact@thebrightbittern.co.uk.

We monitor who opens what in our newsletter lists, and pre-set sequences of information we send you. We do this, so we can see if content is popular and generate more of it, or if it is not read. There may be sub-routines that trigger if you click on links or articles. These are designed to offer you more information about things you are interested in. You can unsubscribe from these

sequences at any time.

Existing CLIENTS may receive emails about specific offers relating to things you have already purchased. You can unsubscribe from these at any time.

We may use automations (little sequences of emails that start when you ask for something in particular) to send you the information you asked for, to send you products you have bought and to administer services you have subscribed to.  Our onboarding for new products may be by emails that send you hints and tips and little videos on ‘how to’.   You can unsubscribe from these at any time, but they are not long, and you might want to wait for all the information as most people find it useful.

We may monitor who reads our mailing and automations, how many times, and which links you choose to use and read. We use this information to increase the content’s level of interest and help us improve what we send.  You can remove your information from this monitoring by disabling cookies on your website browser before opening emails from us. From time to time, we contact individual email newsletter subscribers, but it is extremely rare.

We may use anonymised data about you from time to time to target advertising campaigns based on profiling the sort of person who wants to receive information from us.

We ask our own sales and marketing people (both internal and external) to contact PROSPECTS from time to time.   This is normally because you have requested a call, or because we are actively trying to let you know about something you may benefit from. 

We are not a hard sell or cold calling-based organisation but prefer to build long-term relationships with satisfied and relaxed CLIENTS.

Social Media

We have an active presence on social media. If you are using social media, they are holding and using your information in accordance with their data privacy policy. If you ‘like’ any of our posts or ‘follow’ us or contact us on social media we may keep a record of that. Your replies to us, messages you send us, and your other activity linked to our posts may be seen by members of our staff and by our ASSOCIATES.  Our contracts with them hold them to high standards of protecting your information.

Our company obligations

As a data controller, The Bright Bittern Limited is legally responsible for the data you provide us with. In honouring that responsibility, we pledge to uphold our commitments under GDPR and the Data Protection Act 2018.

We will only ever use your data:

In ways that are both fair and legal
As described within this policy
In ways that are necessary for the purposes described

In addition, The Bright Bittern Limited processes the personal data you submit to us, or we collect as a data processor. As part of this role, The Bright Bittern Limited takes all necessary precautions to secure the personal data we collect, process and store.

We may occasionally use the data you provide us with for marketing, relationship management or account management activities. These activities are designed to ensure you have adequate information about other products and/or services we offer, that we have reason to believe you may be interested in. You have the right to opt-out of these activities at any time.

Third Parties

The Bright Bittern Limited never shares your personal data with third parties unless those parties have been explicitly mentioned within our privacy statement. We do not sell or exchange your personal data with third parties unless you grant us explicit permission to do so, and we will never use your personal data for any reason other than the reasons described within this policy.

We have an outsourced support team for our own business which may include virtual assistants, web designers, IT support, sales and marketing, accounting and more. They have limited access to your data, where the service they provide to us means they need it. For example, if our IT support wants to check the functionality of a laptop or back up, they may need temporary access to information that may include something about you, or if we invoice you, our accountant needs to process the information in the invoice.

Our team use our software to access any data they need.  We do not permit copying or sharing by the team and actively monitor for any potential breaches. Your information/advice is held in the strictest confidence. Our team are all contracted to strict confidentiality clauses. We restrict who can export or download data that is held to a limited number of individuals who are authorised to back up data. If you want to know who is on our team, please email and ask us.

Our security

As part of our ongoing commitment to GDPR, The Bright Bittern will report any security breaches or attempted breaches to the relevant authorities within 24 hours. We will subsequently contact all those affected by the breach within 72 hours of its occurrence.

Our legal basis for processing your data

Signing onto our newsletter list is by your consent – and when you withdraw your consent, we stop that processing of your data. Apart from that, the information we hold is based on our needing the information to run our business and provide our products and services – either so we can perform our contract with you, or because we have a legitimate business interest in processing your data. In a few situations we are processing personal data because we are under a legal obligation to do so.  This principally relates to our business, accounting and tax records.

Legitimate interests

As part of the Data Protection Act 2018, The Bright Bittern Limited observes the right to share selected information with third parties that use data for non-marketing purposes. This could include (but is not limited to) organisations that provide credit assessments, identification services and fraud prevention activities.

What are your rights

You have the right to know what information we are collecting on you, and to amend it if it is inaccurate. If you feel we have information we should not be keeping, or it is out of date or otherwise wrong, please let us know and we will take appropriate action. Most of the information we hold is not based on your individual consent but is based on our needing the information to run our business and provide our products and services. You have a "right to be forgotten" - but that does have some legal limits. If you want us to remove information about you, let us know. If you have been a CLIENT, we may not be able to remove all data as we will have to ensure that we can continue to comply with legal, accounting, taxation and our insurer’s requirements.

The Bright Bittern Limited is committed to upholding your rights. If you have any questions, comments or concerns about this privacy policy or wish to exercise your rights in relation to your personal data, please contact Lisa Kapsalis at The Bright Bittern Limited. We may require you to confirm your identity before proceeding. Provided we can legitimately disclose the information to you, we will send you what we have. We will process any request within 20 days. Subject Access Requests are normally performed free of charge, but we may need to charge individuals for excessive or unreasonable data requests.

Last Updated: 16 October 2025

Operational Support for Small, Service-Based Businesses