Privacy Policy

1. Introduction

Bright Bite ("we", "us", "our") operates the website brightbitejournal.co.uk (the "Website"), an educational blog focused on healthy eating, balanced nutrition and everyday lifestyle guidance. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our Website, subscribe to our newsletter, or contact us directly. We are committed to handling your personal data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using this Website, you acknowledge that you have read and understood the practices described in this Policy.

2. Who We Are and How to Contact Us

Bright Bite is based at St James Cres, Edinburgh, EH1 3AD, United Kingdom. If you have any questions about this Privacy Policy or how your personal data is handled, you can contact us by email at [email protected], by telephone at +441312956145, or by post to the address above. We aim to respond to all privacy-related enquiries within a reasonable timeframe, and in any case within the timeframes required by applicable data protection law.

3. Information We Collect

We collect personal data in a limited number of ways, described below.

3.1 Information you provide directly. When you use our contact form, subscribe to our newsletter, or otherwise correspond with us, we may collect your name, email address, and the content of any message you send us.

3.2 Information collected automatically. When you browse the Website, certain technical information may be collected automatically through cookies and similar technologies, including your IP address, browser type, device type, pages visited, time spent on pages, and referring website. This is described further in our Cookie Policy.

3.3 Information from third parties. We do not purchase personal data from third-party data brokers. Where analytics or hosting providers process data on our behalf, this is described in Section 6 below.

4. How We Use Your Information

We use the personal data we collect for the following purposes: to operate, maintain and improve the Website; to respond to enquiries submitted through our contact form; to send newsletter content to subscribers who have opted in; to understand how visitors interact with our articles so that we can improve content quality and site performance; to detect, investigate and prevent fraudulent or unauthorised activity; and to comply with our legal obligations. We do not use your personal data to make automated decisions that produce legal or similarly significant effects concerning you.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data: consent, where you have actively opted in to receive our newsletter or where non-essential cookies are set; legitimate interests, where processing helps us operate and improve the Website in a way that does not override your fundamental rights and freedoms; and legal obligation, where we are required to process or retain data to comply with applicable law. Where we rely on consent, you may withdraw that consent at any time, as described in Section 9.

6. Sharing Your Information with Third Parties

We do not sell personal data. We may share limited personal data with trusted third-party service providers who help us operate the Website, such as website hosting providers, email newsletter platforms, and analytics services. These providers are only permitted to process personal data in accordance with our instructions and applicable data protection law, and only to the extent necessary to perform their services. We may also disclose personal data where required to comply with a legal obligation, court order, or governmental request, or to protect the rights, property or safety of Bright Bite, our readers, or others.

7. International Data Transfers

Some of our third-party service providers may process personal data outside the United Kingdom. Where this occurs, we take steps to ensure an adequate level of protection is maintained, including through the use of UK adequacy regulations, standard contractual clauses, or equivalent safeguards recognised under UK data protection law.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including satisfying any legal, accounting or reporting requirements. Contact form submissions are typically retained for up to 24 months to allow for follow-up correspondence, after which they are securely deleted or anonymised. Newsletter subscriber data is retained until you unsubscribe or request deletion.

9. Your Rights

Under UK GDPR, you have the right to: request access to the personal data we hold about you; request correction of inaccurate or incomplete data; request erasure of your personal data in certain circumstances; object to or restrict certain processing activities; request a copy of your data in a portable format; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, please contact us using the details in Section 2. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data has been mishandled.

10. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. These include secure hosting infrastructure, restricted access to personal data, and regular review of our data handling practices. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Website is intended for a general adult audience and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with a revised "Last updated" date. We encourage you to review this Policy periodically to stay informed about how we protect your information.