Privacy Policy

1. Who we are

Brightline Digital Solutions LLC ("Brightline", "we", "us") is the controller of the personal data described in this policy. We are a limited liability company registered in Florida, United States, with its registered office at 1045 Collins St, Melbourne, FL 32935, United States.

Questions about this policy or about your data should be sent to [email protected].

2. Data we collect

2.1 Data you give us

• Enquiry data. When you submit the contact form: your name, work email address, company name, website, the service you are interested in, your budget range and the content of your message.
• Client data. If you become a client: billing contact details, billing address, the contents of our correspondence, and the account access you grant us.
• Correspondence. Emails, call notes and messages exchanged with us.

2.2 Data collected automatically

• Technical data. IP address, approximate country derived from it, browser and device type, referring page and pages viewed. This is collected by our hosting provider as part of serving and securing the site.

2.3 Data we do not collect

We do not collect payment card numbers. Card payments are processed by our payment provider, which handles card data directly under its own terms. We do not knowingly collect data from anyone under 16, and we do not collect special category data such as health, biometric, religious or political information.

3. Cookies and analytics

This website does not use advertising cookies, tracking pixels or cross-site profiling. We do not sell or share personal data for targeted advertising purposes as those terms are defined under United States state privacy laws.

Our hosting provider sets strictly necessary cookies required for security and to serve the site. Where we use privacy-focused, aggregate analytics, it is configured not to use cookies and not to identify individual visitors. If we introduce any non-essential cookie in the future, we will ask for your consent before setting it and update this policy.

4. Why we use your data and on what basis

We do not send marketing email to people who have not asked for it. If we ever do, it will be on the basis of your consent and every message will carry an unsubscribe link.

5. Who we share data with

We share personal data only with service providers who process it on our behalf, under written agreements that restrict them to our instructions. These fall into the following categories:

• Hosting and content delivery for serving this website.
• Transactional email for delivering the contact form to our inbox.
• Email, storage and collaboration for running the business.
• Payment processing for taking card and bank payments.
• Accounting for bookkeeping and tax compliance.

We may also disclose data where required by law, court order or a lawful request from a public authority, or to establish, exercise or defend legal claims. We do not sell personal data to anyone, for any purpose.

6. International transfers

We are based in the United States and our service providers may process data in the United States and other countries. Where personal data is transferred from the European Economic Area, the United Kingdom or Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism with the provider concerned.

7. How long we keep data

• Enquiries that do not become clients: up to 24 months from last contact, then deleted.
• Client records and correspondence: for the duration of the engagement and 6 years afterwards, to cover contractual and limitation periods.
• Invoices and accounting records: 7 years, as required by tax law.
• Server and security logs: retained by our hosting provider for a short period, typically not more than 30 days.

8. Security

The site is served over HTTPS. Access to client data is limited to personnel who need it, protected by multi-factor authentication, and reviewed when someone leaves a project. We work inside client-owned accounts using delegated access rather than shared passwords, so that access can be revoked by you at any time. No system is perfectly secure, but we will notify you and, where required, the relevant authority without undue delay if a breach affecting your personal data occurs.

9. Your rights

Depending on where you live, you may have the right to:

• Ask what personal data we hold about you and receive a copy of it.
• Have inaccurate data corrected.
• Ask us to delete data we no longer have a lawful reason to keep.
• Object to or ask us to restrict certain processing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Not be discriminated against for exercising any of these rights.

To exercise any of these, email [email protected]. We will verify your identity and respond within 30 days, or tell you within that period if we need longer. There is no charge unless a request is manifestly unfounded or excessive.

If you are in the European Economic Area or the United Kingdom you also have the right to complain to your local data protection authority. If you are a California resident, you may designate an authorised agent to make a request on your behalf.

10. Third-party sites

This site links to external websites, including social media platforms. We are not responsible for their content or their privacy practices, and this policy does not apply to them.

11. Changes to this policy

We may update this policy. The effective date at the top of this page shows when it last changed. Where a change materially affects how we use data we already hold, we will notify affected clients by email before it takes effect.

Contact for legal notices

Questions, complaints or formal notices relating to this document should be sent to [email protected] or by post to: