Privacy Policy
Last updated: August 2026
BrightSpark Business (BrightSpark, we, us) respects your privacy and is committed to handling your personal information responsibly and transparently.
This policy explains what information we collect, why we use it, who we may share it with and the choices you have.
Information we collect
Depending on how you interact with BrightSpark, we may collect:
your name, email address, telephone number and business details;
information you provide when you enquire, book a call, attend a session or work with us;
information you choose to share during consultancy conversations;
booking and appointment information;
payment and transaction information. Payments are processed securely by third-party payment providers and BrightSpark does not receive or store your full card details;
information you provide when subscribing to emails or other marketing;
technical information about how you use our website, including information collected through cookies and analytics tools; and
where you have specifically agreed, an audio recording and/or transcript of a consultancy or business session.
Please avoid sharing highly sensitive personal information unless it is genuinely relevant and necessary to the work we are doing together.
How and why we use your information
We use personal information where we have a lawful reason to do so.
This may include:
Providing consultancy services and communicating with you – where this is necessary to provide services you have requested, perform a contract with you or take steps at your request before entering into one.
Managing enquiries, bookings, free sessions and business administration – where this is necessary for our legitimate interests in running BrightSpark and providing an effective service.
Processing payments and maintaining financial records – where necessary to perform our contract with you and meet our legal and accounting obligations.
Improving our website and services – where this is in our legitimate interests and your privacy rights do not override those interests.
Sending marketing emails or newsletters – where you have given consent or where another lawful basis permits us to contact you. You can unsubscribe at any time.
Meeting legal, tax, regulatory or other statutory obligations – where required by law.
Session recordings and transcripts
With your permission, BrightSpark may audio-record and transcribe some consultancy sessions or business check-ins.
Recording is optional. You can take part in a session without agreeing to be recorded, and you can ask for recording to stop at any time.
The purpose of recording and transcription is to help BrightSpark:
prepare accurate notes and follow-up summaries;
capture agreed actions or next steps; and
reduce the need to take extensive notes during the conversation.
We rely on your consent to make and use a recording or transcript for these purposes.
Where consent is requested online, for example when you book a session, we may retain a record showing when and how that consent was given.
Recordings and working transcripts are not kept indefinitely. They will normally be deleted once the follow-up work for which they were created has been completed and, in any event, no later than 30 days after the relevant summary or follow-up has been prepared, unless there is a specific reason agreed with you to retain them for longer.
You can withdraw your consent to the continued use of a recording or transcript at any time by contacting sam@brightsparkbusiness.com.
AI-assisted tools
BrightSpark uses third-party AI-assisted tools to support parts of its consultancy and administrative work. This may include helping to structure notes, prepare summaries, develop ideas, analyse business information or draft working documents.
Where an AI-assisted tool is used with information relating to a client or session, we aim to share only the information reasonably necessary for the particular task and to remove or replace direct identifying details wherever practicable.
For example, information from a session may be de-identified before relevant extracts or notes are processed using an AI-assisted tool to help prepare a follow-up summary.
De-identified or pseudonymised information may still constitute personal information if an individual could reasonably be identified from it, and we continue to handle it accordingly.
AI-assisted tools support our work; they do not replace BrightSpark's judgement. We do not use automated decision-making to make decisions about you that have legal or similarly significant effects.
If you have concerns about the use of AI-assisted tools in relation to information you have provided, please contact us.
Who we share information with
We do not sell your personal information.
We may use trusted third-party service providers where necessary to operate BrightSpark and deliver our services. These may include providers of:
website hosting and analytics;
appointment scheduling;
email and communications;
payment processing;
cloud storage and productivity software; and
AI-assisted tools.
These providers process information only as necessary to provide the relevant service and are subject to their own data protection and security arrangements.
We may also disclose information where required to do so by law or to establish, exercise or defend legal rights.
International transfers
Some of the technology and service providers we use may process information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to use providers and arrangements that provide appropriate safeguards for personal information in accordance with UK data protection law.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet relevant legal obligations.
As a general guide:
enquiry and booking information that does not lead to an ongoing client relationship may be retained for up to two years after our last contact;
client, project and consultancy records may normally be retained for up to six years after the end of our working relationship, where appropriate for business, contractual or legal purposes;
financial and accounting records are retained for the period required by applicable law;
session recordings and working transcripts are handled as described in the Session recordings and transcripts section above; and
marketing information is retained until you unsubscribe, withdraw consent or we determine that it is no longer appropriate to keep it.
We periodically review the information we hold and delete or de-identify information that is no longer required.
Your rights
Depending on the circumstances, UK data protection law gives you rights in relation to your personal information, including the right to:
ask what personal information we hold about you and obtain a copy;
ask us to correct inaccurate or incomplete information;
ask us to delete information in certain circumstances;
ask us to restrict how information is used;
object to certain uses of your information;
receive certain information in a portable format; and
withdraw consent where we rely on consent to use your information.
Withdrawing consent does not affect the lawfulness of processing that took place before consent was withdrawn.
To exercise any of these rights, contact sam@brightsparkbusiness.com.
You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.
Cookies
Our website uses cookies and similar technologies for functionality and analytics.
For more information about the cookies used on this website and the choices available to you, please see our Cookie Policy.
Changes to this policy
We may update this privacy policy from time to time, for example if our services or the technology we use changes. The date at the top of this page shows when the policy was last updated.
Contact
If you have any questions about this privacy policy or how BrightSpark uses your information, please contact:
BrightSpark Business
Email: sam@brightsparkbusiness.com