1. Introduction
Bright Experts Statistics Services ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, www.brightexpertsservices.com, and use our statistical services. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
Our privacy practices comply with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws. We are dedicated to maintaining the confidentiality of all client data and statistical information entrusted to us.
4. Legal Basis for Processing (GDPR Compliance)
For users in the European Economic Area (EEA), we process your personal data according to the following legal bases:
- Contract Performance: Processing necessary to fulfill our contract with you.
- Legitimate Interests: Processing necessary for our legitimate business interests.
- Consent: Where we have obtained your explicit consent.
- Legal Obligation: Processing necessary to comply with legal requirements.
5. Sharing and Disclosure of Information
We do not share your personal information with third parties except in the circumstances described below. We do not sell your personal information.
- With Service Providers: We may share information with third-party vendors and service providers who need access to such information to carry out work on our behalf (e.g., payment processors, cloud hosting services).
- For Legal Reasons: We may disclose your information if we are required to do so by law or in response to a valid request by public authorities (e.g., a court or government agency).
- To Protect Our Rights: We may disclose information to enforce our policies, or to protect the rights, property, or safety of ourselves and others.
- Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.
All third-party service providers are required to maintain appropriate security measures and are prohibited from using your personal data for any other purposes.
6. Data Security
We implement a variety of administrative, technical, and physical security measures to help protect your information. All project files and client data you provide are treated with the strictest confidentiality. Our security measures include:
- Encryption of data in transit and at rest
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Employee training on data protection
- Regular backups and disaster recovery procedures
While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable.
7. Data Retention
We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Typically, we retain client data for a period of 5 years after the completion of services to comply with professional standards and legal requirements. Statistical research data may be retained for longer periods when necessary for ongoing research purposes, but only in anonymized or aggregated form.
8. Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal information:
- The right to access – You have the right to request copies of your personal data.
- The right to rectification – You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
- Rights related to automated decision-making – You have the right not to be subject to a decision based solely on automated processing.
To exercise any of these rights, please contact us at info@brightexpertsservices.com. We will respond to your request within 30 days.
California Privacy Rights
California residents have additional rights under the CCPA, including the right to know what personal information is collected, used, shared or sold, and the right to access, delete, and opt-out of the sale of personal information. We do not sell personal information.
9. Cookies and Tracking Technologies
We may use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
We use the following types of cookies:
- Essential Cookies: Required for the operation of our website.
- Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and see how visitors move around our website.
- Functionality Cookies: Used to recognize you when you return to our website.
- Targeting Cookies: Record your visit to our website, the pages you have visited, and the links you have followed.
You can manage your cookie preferences through your browser settings. For more information, visit our Cookie Policy.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.
We ensure appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses approved by the European Commission or other legally acceptable mechanisms.
11. Children's Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us.
12. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
Material changes to this policy will be communicated to you via email or a prominent notice on our website prior to the change becoming effective.
