Governance & Data Protection

Privacy Policy

Effective Date: January 1, 2026. This policy outlines how Brightslist Capsule Workplace Tech Ltd processes, protects, and respects personal information across our website and communication channels.

1. Overview and Data Controller

Brightslist Capsule Workplace Tech Ltd ("we," "our," or "the company"), registered under company number 12948201-UK, with registered offices at Suite 402, Clarion Exchange, 74 Wharfstone Way, London EC2A 4NQ, acts as the data controller for personal data collected through brightslistcapsule.pics. We are committed to processing information transparently, lawfully, and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable global privacy principles.

2. Information We Collect

We deliberately restrict our data gathering to information necessary for providing educational guides, responding to workplace inquiries, and ensuring site security:

  • Direct Inquiries: When you complete our contact form or email our support desk, we collect your name, business email address, organization name, chosen technology topic, and any details included in your message body.
  • Technical and Device Data: When you access our static pages, our web server logs standard connection parameters including truncated IP addresses, browser user agent strings, HTTP referring URLs, and access timestamps to detect routing faults and maintain server security.
  • Consent State Preferences: We store a small local storage token in your browser to record your cookie banner preferences so you are not repeatedly prompted on return visits.

3. Purpose and Legal Basis for Processing

Under UK GDPR Article 6, we process personal information under the following legal bases:

  • Legitimate Interests: Operating and securing our online technical documentation, diagnosing connection errors, and responding directly to inquiries from prospective clients and business peers.
  • Consent: Where you voluntarily enable optional analytics cookies to help us understand aggregate traffic patterns across our guides.
  • Legal Compliance: Retaining correspondence where required for corporate tax, auditing, or statutory dispute resolution.

4. Cookies and Storage Technologies

Our website prioritizes light, privacy-friendly operation. We use essential storage mechanisms to keep the website functional and accessible. Optional aggregate analytics are only loaded if you explicitly grant permission via our cookie banner. For a full table of cookies, durations, and management methods, please refer to our dedicated Cookie Policy.

5. Data Retention Periods

We do not retain information longer than necessary for the purpose it was gathered:

  • Inquiry Correspondence: Retained for a maximum of 24 months from the date of last contact to maintain context for ongoing workplace support discussions, after which messages are purged.
  • Server Access Logs: Automatically rotated and deleted within 90 days, unless required for an active technical security investigation.
  • Cookie Preferences: Stored locally on your device for up to 12 months or until you clear your browser local storage.

6. Third-Party Processors and Hosting

Our static website is hosted on secure, modern content delivery networks. We do not sell, rent, monetize, or trade your personal information to third-party marketing brokers. Any third-party infrastructure providers we engage act strictly as data processors under binding data processing agreements with appropriate security guarantees.

7. Your Statutory Rights

Depending on your location (including the UK, European Economic Area, and California), you have specific legal rights concerning your personal data:

  • Right of Access: You can request a confirmation and copy of any personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete contact records.
  • Right to Erasure ('Right to be Forgotten'): You can request deletion of your information where there is no overriding legal ground for its retention.
  • Right to Restrict or Object: You may object to processing based on legitimate interests or request temporary restriction of processing.
  • Right to Data Portability: You can request a machine-readable copy of data you provided directly to us.

8. International Data Transfers

Where technical data is processed via global CDN nodes outside the UK or EEA, transfers are governed by UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs) to guarantee an equivalent level of data protection.

9. Privacy Contact and Supervisory Authority

To exercise any of your data rights or raise questions regarding our handling of your information, please contact our Data Protection Officer by email at [email protected] or by writing to:

Brightslist Capsule Workplace Tech Ltd
Attn: Data Privacy Officer
Suite 402, Clarion Exchange, 74 Wharfstone Way, London EC2A 4NQ

If you are unsatisfied with our response, UK residents have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.