Privacy Policy

Introduction

brightorbitalium Ltd ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services. We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Collection

We collect various types of personal data to provide and improve our education technology services. The data we collect includes:

• Contact Information: Name, email address, phone number, and postal address when you contact us or request our services
• Professional Information: Job title, organisation, and professional interests related to education technology
• Website Usage Data: IP address, browser type, pages visited, time spent on pages, and referring websites
• Communication Data: Records of correspondence, enquiries, and feedback you provide to us
• Marketing Data: Preferences for receiving marketing communications and information about education technology trends

How We Use Your Information

We process your personal data for the following purposes and under the following legal bases:

• Service Provision: To provide education technology consulting, trend analysis, and training services (legal basis: contract performance)
• Communication: To respond to your enquiries and provide customer support (legal basis: legitimate interests)
• Marketing: To send you information about our services and education technology trends, where you have consented (legal basis: consent)
• Website Improvement: To analyse website usage and improve our online services (legal basis: legitimate interests)
• Legal Compliance: To comply with legal obligations and protect our legitimate business interests (legal basis: legal obligation/legitimate interests)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors who assist us in providing our services (e.g., website hosting, email services)
• Legal Authorities: When required by law or to protect our rights and interests
• Business Partners: With your consent, for joint marketing or educational initiatives

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Generally, we retain contact and communication data for up to 7 years after our last interaction, unless a longer retention period is required by law. Website usage data is typically retained for up to 26 months. You may request deletion of your data at any time, subject to our legal obligations.

Your Rights

Under GDPR and other applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Rectification: Request correction of inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

Third-Party Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We recommend reviewing their privacy policies before providing any personal information.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

Supervisory Authority

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) or your local supervisory authority.