GDPR Policy
Effective Date: March 4, 2024
1. Introduction
Brighter City Solutions is committed to protecting the privacy and security of personal data collected from our clients, partners, and website visitors. This GDPR Policy outlines our practices regarding the collection, use, disclosure, and retention of personal data.
2. Scope
This policy applies to all personal data processed by Brighter City Solutions, whether collected through our website, during consultations, or in any other business activities.
3. Data Collection
We collect personal data only for specified, explicit, and legitimate purposes. The types of personal data we may collect include:
- Name
- Contact information (email address, phone number, address)
- Job title
- Company name
- Billing information
4. Data Processing
We process personal data in accordance with applicable data protection laws and regulations. The purposes for which we process personal data include:
- Providing our services to clients
- Responding to inquiries and communication
- Billing and invoicing
- Marketing and promotional activities (with consent)
- Complying with legal obligations
​
5. Lawful Basis for Processing
We rely on one or more of the following lawful bases for processing personal data:
- Consent: When individuals have given clear consent for us to process their personal data for specific purposes.
- Contract: When processing is necessary for the performance of a contract with the individual or to take steps at the request of the individual prior to entering into a contract.
- Legal Obligation: When processing is necessary for compliance with a legal obligation.
- Legitimate Interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by the interests, rights, or freedoms of the data subject.
6. Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data
- Regular security assessments and audits
- Access controls and restrictions
- Employee training on data protection best practices
7. Data Subject Rights
​
Individuals have the following rights regarding their personal data:
- Right to access: The right to request access to their personal data and information about how it is processed.
- Right to rectification: The right to request correction of inaccurate or incomplete personal data.
- Right to erasure: The right to request erasure of personal data under certain circumstances.
- Right to restrict processing: The right to request restriction of processing of personal data under certain circumstances.
- Right to data portability: The right to receive the personal data concerning them, which they have provided to us, in a structured, commonly used, and machine-readable format.
- Right to object: The right to object to the processing of personal data under certain circumstances, including processing for direct marketing purposes.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law.
9. Data Sharing
We may share personal data with third-party service providers who perform services on our behalf, such as hosting providers, payment processors, and marketing agencies. We ensure that such third parties adhere to data protection standards consistent with this policy.
10. International Transfers
If we transfer personal data outside the European Economic Area (EEA), we ensure that adequate safeguards are in place to protect the data, such as Standard Contractual Clauses or Privacy Shield certification.
11. Updates to this Policy
We may update this GDPR Policy from time to time to reflect changes in our practices or legal requirements. We will notify individuals of any material changes to this policy through our website or other appropriate channels.
12. Contact Us
If you have any questions or concerns about our GDPR Policy or our data practices, please contact us at [contact@brightercitysolutions.com](mailto:maybell@brightercitysolutions.com).
By using our services or interacting with our website, you consent to the practices described in this GDPR Policy.
​
​