Legal
Privacy notice
Last updated: 3 September 2026
Who we are
This site is operated by [[The Bright Academy, confirm the operating legal entity]] (The Bright Academy), the data controller for the information described here. You can reach us at hello@thebrightacademy.com. Registered address: [[Registered address, to be confirmed]]. ICO registration: [[ICO registration number, if registered]].
What we collect
- Details you give us when you sign up for the free guide: your email address, and your first name if you choose to add it.
- Technical data needed to run the site securely: your IP address (used briefly to rate-limit the sign-up form against abuse) and a single strictly-necessary cookie that protects the form against cross-site request forgery.
We do not use analytics or advertising cookies, and we do not track you across other websites.
How we use it
- To email you the free guide you asked for.
- To let you know when enrolment for the Bright Women cohort opens, and about closely related programmes. Every email includes an unsubscribe link.
- To keep the site secure and prevent automated abuse of the form.
Our legal basis
We rely on your consent (given when you submit the form) to send you the guide and cohort updates. You can withdraw it at any time by unsubscribing or emailing us. We rely on our legitimate interest in running a secure service for the short-lived, security-related use of your IP address.
Who we share it with
We only share personal data with the service providers that help us run the site:
- Resend sends our email on our behalf.
- Supabase hosts the database where sign-ups are stored.
- Upstash provides the rate-limiting store.
- Our hosting provider serves the website.
Some of these providers process data outside the UK and EEA. Where they do, the transfer is covered by an adequacy decision or standard contractual clauses. We never sell your personal data.
How long we keep it
We keep your sign-up until you ask us to remove it or unsubscribe, after which we delete it within 30 days. Security logs containing IP addresses are kept only for a short rolling window.
Your rights
You have the right to access the personal data we hold about you, to have it corrected or erased, to object to or restrict how we use it, to receive a copy in a portable format, and to withdraw consent at any time. To exercise any of these, email hello@thebrightacademy.com.
If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk.
Changes to this notice
If we change how we handle personal data we will update this page and revise the date above.
