Privacy Policy

Last updated: 28 August 2025

Bright Atrium Ltd ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Personal Information

We may collect personally identifiable information that you voluntarily provide to us when you:

  • Register for an account on our platform
  • Subscribe to our newsletter
  • Contact us through our contact forms
  • Participate in surveys or feedback requests
  • Apply for freelance opportunities

This information may include:

  • Name and contact information (email address, phone number, postal address)
  • Professional information (skills, experience, portfolio)
  • Payment information (processed securely by third-party payment processors)
  • Communication preferences
  • Any other information you choose to provide

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage patterns, including:

  • IP address and location data
  • Browser type and version
  • Operating system
  • Pages visited and time spent on our site
  • Referring website addresses
  • Device identifiers

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Provision

  • To provide and maintain our freelance platform services
  • To process registrations and manage user accounts
  • To facilitate connections between freelancers and clients
  • To process payments and manage transactions
  • To provide customer support and respond to inquiries

Communication

  • To send you newsletters and updates (with your consent)
  • To notify you about changes to our services
  • To communicate about your account or transactions
  • To send promotional materials (which you can opt out of)

Improvement and Analytics

  • To analyse website usage and improve our services
  • To understand user preferences and behaviour
  • To develop new features and functionality
  • To ensure the security and integrity of our platform

3. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal bases:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract Performance: To fulfil our contractual obligations to provide services
  • Legitimate Interests: For improving our services, security, and business operations
  • Legal Obligation: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in operating our platform, including:

  • Payment processing companies
  • Email marketing services
  • Analytics providers
  • Customer support tools
  • Cloud hosting services

Legal Requirements

We may disclose your information if required by law or in good faith belief that such disclosure is necessary to:

  • Comply with legal obligations or court orders
  • Protect our rights, property, or safety
  • Investigate fraud or security issues
  • Protect the rights and safety of our users

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfil the purposes outlined in this policy. Specific retention periods include:

  • Account Information: Retained while your account is active and for up to 7 years after account closure for legal and business purposes
  • Transaction Records: Retained for 7 years for tax and accounting purposes
  • Marketing Data: Retained until you unsubscribe or withdraw consent
  • Analytics Data: Typically retained for 26 months

6. Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

  • Right to Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data under certain circumstances
  • Right to Restrict Processing: Request limitation of how we process your data
  • Right to Data Portability: Request transfer of your data to another service
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for specific processing activities

To exercise these rights, please contact us using the details provided in Section 10.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our cookie practices, please refer to our Cookie Policy.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Secure servers and databases
  • Regular security assessments and updates
  • Access controls and staff training
  • Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

While we primarily store and process data within the UK, some of our service providers may be located outside the UK. When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions by the UK government
  • Standard contractual clauses
  • Binding corporate rules
  • Other appropriate safeguards recognised under UK law

10. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Bright Atrium Ltd
Data Protection Officer
14 Bedford Square
London, WC1B 3HH
United Kingdom

Email: [email protected]
Phone: +44 20 7946 3846

11. Complaints

If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk
Phone: 0303 123 1113

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending an email notification to registered users
  • Displaying a prominent notice on our platform

The updated policy will be effective from the date specified at the top of the document.

13. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

This Privacy Policy was last updated on 28 August 2025. We encourage you to review this policy periodically to stay informed about how we protect your information.