top of page
Bright Viral Marketing.co.uk Logo.png

Bright Viral Marketing Limited

SCHEDULE A CONSULTATION →

Privacy Policy

At Bright Viral Marketing, we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store and safeguard your information when you visit our website or use our services.

Effective Date: 30 June 2026

1. Introduction

Bright Viral Marketing Ltd trading as Bright Viral Marketing ("Bright Viral Marketing", "we", "our", or "us") is committed to protecting and respecting your privacy.

​

This Privacy Policy explains how we collect, use, store, share, transfer, and protect personal information when you:

  • Visit our website;

  • Contact us through our website, email, telephone, social media channels, online chat systems, AI-powered assistants, or other communication methods;

  • Request information, quotations, proposals, audits, consultations, or services from us;

  • Subscribe to newsletters, updates, marketing communications, or promotional materials;

  • Apply for employment opportunities with us;

  • Engage us to provide marketing, advertising, technology, automation, creative, consulting, or related services;

  • Interact with our advertisements, content, campaigns, events, webinars, or social media activities; or

  • Otherwise provide personal information to us.

​

We are committed to complying with applicable data protection and privacy laws, including:

  • The UK General Data Protection Regulation (UK GDPR);

  • The Data Protection Act 2018;

  • The Privacy and Electronic Communications Regulations 2003 (PECR);

  • The EU General Data Protection Regulation (EU GDPR) where applicable; and

  • Other applicable privacy and data protection laws in jurisdictions where we operate or provide services.

​

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with this Privacy Policy, please do not use our website or services.

2. Data Controller Information

For the purposes of applicable data protection laws, the data controller responsible for your personal information is:

Bright Viral Marketing Ltd
Trading Name: Bright Viral Marketing

​

Email for Privacy Requests:

np@brightviralmarketing.co.uk

​

Telephone:

07586196014

​

Website:

www.brightviralmarketing.co.uk

​

Bright Viral Marketing Ltd is responsible for determining the purposes and means of processing personal information collected through our website, marketing activities, business operations, client engagements, recruitment processes, and related services.

​

We have not appointed a formal Data Protection Officer. However, all privacy-related enquiries, requests, complaints, and data protection matters should be directed to:

np@brightviralmarketing.co.uk

​

You may contact us at any time regarding:

  • Access to your personal information;

  • Correction of inaccurate information;

  • Deletion requests;

  • Marketing preferences;

  • Data portability requests;

  • Restriction of processing requests;

  • Objections to processing;

  • Cookie preferences;

  • Complaints relating to privacy matters; and

  • Any questions regarding this Privacy Policy.

​

Where required by law, we will respond to data subject requests within applicable statutory timeframes.

3. Information We Collect

The types of personal information we collect depend on how you interact with Bright Viral Marketing, our website, our services, our advertising campaigns, our communications, and our business operations.

We may collect personal information directly from you, automatically through technology, from third-party service providers, from publicly available sources, from referral partners, from business contacts, and from other lawful sources.

3.1 Identity and Contact Information

We may collect personal information including:

  • Full name;

  • First name and surname;

  • Email address;

  • Telephone number;

  • Mobile number;

  • Business telephone number;

  • Company name;

  • Business name;

  • Job title;

  • Professional role;

  • Business address;

  • Postal address;

  • Billing address;

  • Country of residence;

  • Geographic location; and

  • Any other contact details you provide.

3.2 Business Information

As a marketing, advertising, automation, and consulting agency, we may collect business-related information including:

  • Company information;

  • Industry information;

  • Business objectives;

  • Marketing goals;

  • Website information;

  • Social media accounts;

  • Advertising account details;

  • CRM information;

  • Lead generation information;

  • Customer information provided by clients;

  • Sales information;

  • Business performance metrics;

  • Campaign information;

  • Analytics information;

  • Marketing budgets;

  • Strategic information; and

  • Other information necessary for providing our services.

3.3 Information Submitted Through Forms

When you complete forms on our website or through third-party platforms, we may collect information including:

  • Contact form submissions;

  • Quote request submissions;

  • Consultation booking submissions;

  • Free audit requests;

  • Discovery call requests;

  • Service enquiry submissions;

  • Newsletter subscription forms;

  • Event registrations;

  • Webinar registrations;

  • Download requests;

  • Career applications;

  • Support requests;

  • Survey responses;

  • Feedback submissions; and

  • Any additional information voluntarily provided.

​

Where our forms include marketing consent wording, submission of a form may constitute consent to receive marketing communications from us in accordance with applicable laws.

3.4 Communications Information

We may collect information when you communicate with us through:

  • Email;

  • Telephone;

  • SMS;

  • Social media platforms;

  • Website chat;

  • AI-powered chat assistants;

  • Online meetings;

  • Video calls;

  • Messaging applications;

  • Support systems; and

  • Other communication channels.

​

This information may include:

  • Message content;

  • Correspondence records;

  • Attachments;

  • Communication preferences;

  • Support requests;

  • Enquiry information; and

  • Customer service records.

3.5 Call, Meeting and Recording Information

We may record telephone calls, video meetings, online consultations, interviews, demonstrations, webinars, training sessions, strategy sessions, discovery calls, and other business communications.

​

Recordings may be used for:

  • Staff training;

  • Quality assurance;

  • Compliance;

  • Service improvement;

  • Internal review;

  • Marketing purposes;

  • Educational purposes;

  • Promotional purposes;

  • Case studies;

  • Testimonials; and

  • Content creation.

​

Where required by law, we will seek consent before publishing identifiable personal information.

​

Where appropriate, we may anonymise, edit, redact, remove, or otherwise protect personal information before using recordings or extracts for public-facing content.

3.6 AI Assistant and AI Technology Information

We use artificial intelligence technologies and AI-powered systems as part of our business operations.

Information submitted through:

  • Website chat;

  • AI chat assistants;

  • Customer support systems;

  • Forms;

  • Consultations;

  • Client communications;

  • Marketing projects; and

  • Service delivery processes

​

may be processed using AI technologies.

Such processing may support:

  • Customer support;

  • Automation;

  • Marketing services;

  • Data analysis;

  • Content generation;

  • Business operations;

  • Productivity improvements;

  • Research;

  • Reporting; and

  • Service delivery.

​

AI technologies may include systems provided by OpenAI, Anthropic, Google, Microsoft and other technology providers.

3.7 Technical Information

When you access our website or digital properties, we may automatically collect technical information including:

  • IP address;

  • Browser type;

  • Browser version;

  • Operating system;

  • Device identifiers;

  • Device type;

  • Screen resolution;

  • Language settings;

  • Time zone settings;

  • Referral URLs;

  • Clickstream information;

  • Session information;

  • Network information;

  • Log information; and

  • Diagnostic information.

3.8 Website Usage Information

We may collect information regarding how visitors interact with our website including:

  • Pages visited;

  • Time spent on pages;

  • Website navigation patterns;

  • User journeys;

  • Traffic sources;

  • Downloads;

  • Link clicks;

  • Scroll activity;

  • Engagement metrics;

  • Conversion activity;

  • Session recordings;

  • Heatmap information; and

  • Other behavioural analytics information.

3.9 Cookies and Tracking Technologies

We use cookies and similar technologies to collect information regarding website usage and user behaviour.

These technologies may include:

  • Cookies;

  • Pixels;

  • Tracking scripts;

  • Tags;

  • Conversion tracking tools;

  • Session identifiers;

  • Local storage technologies;

  • Advertising technologies; and

  • Similar digital tracking mechanisms.

​

Further details are provided in our Cookie Policy and within this Privacy Policy.

3.10 Marketing and Advertising Information

We may collect information relating to:

  • Advertising interactions;

  • Marketing campaign responses;

  • Lead generation activities;

  • Social media engagement;

  • Audience segmentation;

  • Remarketing activities;

  • Conversion tracking;

  • Customer acquisition activities;

  • Advertising performance; and

  • Marketing analytics.

​

This information may be collected directly or through advertising platforms and marketing technology providers.

3.11 Social Media Information

Where you interact with us through social media platforms, we may collect:

  • Profile information;

  • Publicly available information;

  • Usernames;

  • Contact information;

  • Messages;

  • Comments;

  • Reactions;

  • Shares;

  • Content submissions;

  • Social engagement information; and

  • Other information voluntarily made available to us.

3.12 Recruitment Information

When applying for employment, freelance, contractor, internship, or other opportunities with Bright Viral Marketing, we may collect:

  • CVs and resumes;

  • Cover letters;

  • Employment history;

  • Qualifications;

  • Skills;

  • Certifications;

  • References;

  • Portfolio information;

  • Interview records;

  • Assessment results; and

  • Other recruitment-related information.

​

We generally retain recruitment information for up to 12 months unless a longer retention period is required by law or justified by a legitimate business purpose.

3.13 Documents and Uploaded Content

We may collect files, documents, images, videos, audio files, spreadsheets, reports, presentations, contracts, project materials, and other content uploaded, submitted, shared, or provided by clients, prospects, applicants, business contacts, or website users.

3.14 Information from Third Parties

We may receive information from:

  • Referral partners;

  • Business partners;

  • Advertising platforms;

  • CRM providers;

  • Analytics providers;

  • Data enrichment providers;

  • Public directories;

  • Professional networking platforms;

  • Event organisers;

  • Recruitment platforms;

  • Publicly available sources;

  • Lead generation providers; and

  • Commercially available business databases.

​

Such providers may include, without limitation:

  • LinkedIn;

  • Apollo;

  • Lusha;

  • Cognism;

  • ZoomInfo;

  • Google;

  • Microsoft;

  • Meta;

  • TikTok;

  • HubSpot;

  • Salesforce;

  • Pipedrive;

  • Zoho;

  • GoHighLevel; and

  • Other lawful sources.

3.15 Special Category Data

We do not intentionally request or require special category personal data (such as information concerning health, race, ethnicity, religion, political opinions, trade union membership, biometric data, genetic data, or sexual orientation).

If such information is voluntarily provided, we will process it only where permitted by applicable law and where necessary for legitimate business purposes or legal obligations.

3.16 Information You Choose to Provide

We may collect any additional information that you voluntarily provide to us through:

  • Forms;

  • Emails;

  • Telephone calls;

  • Meetings;

  • Chat systems;

  • Social media;

  • Applications;

  • Uploaded documents;

  • Surveys;

  • Feedback forms; and

  • Other interactions with Bright Viral Marketing.

4. How We Collect Information

Bright Viral Marketing collects personal information through a variety of lawful methods in connection with our website, marketing activities, advertising campaigns, client services, recruitment activities, business operations, and communications.

We may collect information directly from you, automatically through technology, from third parties, and from publicly available sources.

4.1 Information You Provide Directly

We collect information that you voluntarily provide when you:

  • Complete a contact form;

  • Request a quotation;

  • Request a free audit;

  • Book a consultation;

  • Subscribe to a newsletter;

  • Register for an event or webinar;

  • Download resources;

  • Contact us by email;

  • Contact us by telephone;

  • Communicate through live chat;

  • Communicate through AI-powered chat assistants;

  • Apply for employment opportunities;

  • Upload documents;

  • Submit project information;

  • Participate in surveys or questionnaires;

  • Submit testimonials;

  • Provide feedback;

  • Engage our services; or

  • Otherwise communicate with us.

​

The information you provide may include personal, professional, business, technical, project-related, recruitment-related, or other information relevant to our relationship with you.

4.2 Website Forms

We collect information through forms available on our website and related landing pages, including but not limited to:

  • Contact forms;

  • Quote request forms;

  • Consultation booking forms;

  • Free audit request forms;

  • Service enquiry forms;

  • Newsletter subscription forms;

  • Recruitment forms;

  • Career application forms;

  • Support forms;

  • Event registration forms;

  • Lead generation forms; and

  • Other online forms.

​

Where applicable, form submissions may include consent to receive marketing communications, newsletters, promotional information, service updates, and other communications from Bright Viral Marketing.

4.3 Website Chat and AI-Powered Assistants

We may collect information provided through:

  • Wix Chat;

  • Website live chat systems;

  • AI-powered assistants;

  • Automated support systems;

  • Chatbots; and

  • Other conversational technologies.

​

These systems may collect information such as:

  • Contact details;

  • Enquiry information;

  • Conversation history;

  • Service interests;

  • Project requirements;

  • Uploaded content; and

  • Other information voluntarily provided.

​

Chat interactions may be reviewed, stored, analysed, and processed to improve customer support, marketing services, automation systems, and user experience.

4.4 Telephone Calls and Voice Communications

Information may be collected when you communicate with us by telephone or voice communication systems.

Calls may be recorded for purposes including:

  • Customer service;

  • Staff training;

  • Quality assurance;

  • Service delivery;

  • Compliance;

  • Marketing;

  • Educational content;

  • Case studies;

  • Promotional content; and

  • Business improvement.

​

Where required by applicable law, appropriate notice or consent will be obtained.

4.5 Video Meetings and Online Communications

We may collect information during meetings conducted through platforms including:

  • Zoom;

  • Google Meet;

  • Microsoft Teams;

  • Webinar platforms;

  • Video conferencing platforms; and

  • Other collaboration tools.

​

Meetings may be recorded, transcribed, analysed, or retained for legitimate business purposes including service delivery, quality assurance, training, project management, compliance, and content creation.

4.6 Automatic Collection Technologies

When you visit our website, information may be collected automatically through technologies including:

  • Cookies;

  • Tracking pixels;

  • Website tags;

  • Tracking scripts;

  • Analytics technologies;

  • Conversion tracking technologies;

  • Local storage technologies;

  • Device identifiers;

  • Log files; and

  • Similar technologies.

​

These technologies help us understand user behaviour, improve website functionality, measure advertising performance, personalise user experiences, and improve our services.

4.7 Analytics and Measurement Technologies

We use analytics and measurement tools that may automatically collect information about how visitors interact with our website and digital assets.

Such tools may include:

  • Google Analytics;

  • Google Tag Manager;

  • Microsoft Clarity;

  • Hotjar;

  • Yandex.Metrica;

  • Wix Analytics;

  • Advertising analytics platforms; and

  • Similar technologies.

​

These tools may collect behavioural, technical, usage, performance, and engagement information.

4.8 Advertising and Marketing Technologies

We use advertising, audience building, conversion tracking, remarketing, attribution, and campaign optimisation technologies.

Information may be collected through:

  • Meta Pixel;

  • Meta Conversions API;

  • TikTok Pixel;

  • LinkedIn Insight Tag;

  • Google Ads Conversion Tracking;

  • Google Marketing Platform technologies;

  • Facebook Catalogue integrations;

  • Google Merchant Centre integrations;

  • Snapchat technologies;

  • YouTube advertising technologies;

  • Programmatic advertising platforms;

  • Affiliate marketing technologies; and

  • Other advertising technologies.

​

These technologies may collect information regarding advertising interactions, website visits, audience behaviour, campaign performance, and conversion activity.

4.9 Customer Relationship Management Systems

We use customer relationship management ("CRM") systems to manage communications, enquiries, leads, prospects, clients, and business relationships.

Information may be stored, processed, organised, and analysed within systems including:

  • HubSpot;

  • GoHighLevel;

  • Salesforce;

  • Zoho;

  • Pipedrive;

  • Microsoft Dynamics;

  • Wix CRM; and

  • Other CRM solutions.

4.10 Recruitment Activities

We collect information from applicants through:

  • Career application forms;

  • Recruitment portals;

  • Employment websites;

  • Job boards;

  • Recruitment agencies;

  • CV submissions;

  • Email applications;

  • Professional networking platforms; and

  • Interview processes.

​

Information may be used to evaluate applications, communicate with candidates, manage recruitment processes, and assess suitability for employment or engagement opportunities.

4.11 Third-Party Lead Sources

We may obtain business contact information and lead data from lawful third-party sources including:

  • Public business directories;

  • Professional networking platforms;

  • Referral partners;

  • Event organisers;

  • Industry databases;

  • Lead generation providers;

  • Data enrichment providers;

  • Marketing databases;

  • Commercially available business information services; and

  • Publicly available online sources.

​

Such providers may include:

  • LinkedIn;

  • Apollo;

  • Lusha;

  • Cognism;

  • ZoomInfo; and

  • Similar providers.

​

We use such information only where permitted by applicable law and for legitimate business, marketing, networking, sales, recruitment, or relationship management purposes.

4.12 Social Media Platforms

We may collect information through interactions on social media platforms including:

  • Facebook;

  • Instagram;

  • LinkedIn;

  • TikTok;

  • YouTube;

  • Snapchat;

  • X (formerly Twitter);

  • Threads;

  • Pinterest; and

  • Other social media platforms.

​

Information may include public profile information, communications, comments, messages, reactions, engagement activity, and content voluntarily shared with us.

4.13 Referrals and Business Introductions

We may receive information from:

  • Existing clients;

  • Business partners;

  • Referral partners;

  • Industry contacts;

  • Professional advisers;

  • Networking groups; and

  • Other legitimate sources.

​

Such information may include contact details, business information, and details relevant to potential services or collaborations.

4.14 Client Service Delivery

As part of delivering marketing, advertising, automation, consulting, creative, website development, and related services, we may collect information directly from clients or authorised representatives.

​

This may include:

  • Marketing information;

  • Website information;

  • Customer information;

  • Project materials;

  • Campaign information;

  • Advertising account information;

  • CRM information;

  • Analytics information;

  • Uploaded files;

  • Strategic information; and

  • Other information necessary to provide our services.

4.15 Artificial Intelligence Technologies

We may use AI-powered technologies, automation tools, machine learning systems, and related technologies to assist with:

  • Customer support;

  • Marketing services;

  • Automation;

  • Content generation;

  • Research;

  • Data analysis;

  • Productivity;

  • Reporting;

  • Service delivery;

  • Workflow management; and

  • Operational efficiency.

​

Information submitted to us may be processed using AI technologies where appropriate and permitted by applicable law.

4.16 Publicly Available Sources

We may collect information from publicly available sources including:

  • Company websites;

  • Business directories;

  • Professional profiles;

  • Public social media profiles;

  • Press releases;

  • Industry publications;

  • Public registers; and

  • Other publicly available information sources.

​

We use such information only where we have a lawful basis for doing so.

4.17 Other Sources

We may also collect information from any other lawful source where:

  • You have provided consent;

  • We have a legitimate interest;

  • We are fulfilling contractual obligations;

  • We are complying with legal obligations; or

  • Applicable law otherwise permits the collection and use of such information.

5. How We Use Your Information and Our Lawful Bases for Processing

Bright Viral Marketing processes personal information only where we have a lawful basis to do so under applicable data protection laws, including the UK GDPR, EU GDPR (where applicable), the Data Protection Act 2018, and other relevant legislation.

​

Depending on the circumstances, we may rely on one or more lawful bases for processing your personal information.

​

These lawful bases include:

  • Your consent;

  • The performance of a contract;

  • Compliance with legal obligations;

  • Our legitimate interests;

  • Protection of vital interests; and

  • Other lawful grounds recognised by applicable law.

5.1 Providing Our Services

We process personal information to provide, manage, improve, and support our services.

​

This may include:

  • Marketing services;

  • Advertising services;

  • Search engine optimisation (SEO);

  • Pay-per-click advertising (PPC);

  • Social media marketing;

  • Website design;

  • Website development;

  • CRM implementation;

  • AI automation;

  • Lead generation;

  • Reputation management;

  • Content creation;

  • Video production;

  • Email marketing;

  • Business consulting;

  • Reporting and analytics; and

  • Related professional services.

​

Lawful Basis:

  • Performance of a contract;

  • Legitimate interests.

5.2 Responding to Enquiries

We use personal information to respond to enquiries, requests, consultations, support requests, quote requests, audit requests, and other communications.

​

Lawful Basis:

  • Legitimate interests;

  • Performance of a contract;

  • Consent where applicable.

5.3 Managing Leads and Prospective Clients

We process information to identify, manage, qualify, nurture, and communicate with prospective clients and business contacts.

Activities may include:

  • Lead generation;

  • Lead qualification;

  • Relationship management;

  • Prospect communications;

  • Consultation scheduling;

  • Follow-up communications;

  • Proposal preparation;

  • Business development; and

  • Sales activities.

​

Lawful Basis:

  • Legitimate interests;

  • Consent where required by law.

5.4 Marketing Communications

We may send:

  • Newsletters;

  • Promotional communications;

  • Service announcements;

  • Marketing updates;

  • Event invitations;

  • Industry insights;

  • Educational content;

  • Product and service information;

  • Special offers; and

  • Other marketing communications.

​

Where required by law, we will obtain consent before sending marketing communications.

​

Where permitted under applicable law, we may rely on legitimate interests or applicable marketing exemptions.

​

You may unsubscribe from marketing communications at any time.

​

Lawful Basis:

  • Consent;

  • Legitimate interests where legally permitted.

5.5 Telephone Marketing and Follow-Up Communications

Where you submit information through our forms, communicate with us, engage with our services, attend our events, download resources, or otherwise interact with our business, we may contact you by:

  • Telephone;

  • Email;

  • SMS;

  • Messaging applications;

  • Social media platforms; or

  • Other communication methods.

​

Such communications may relate to:

  • Your enquiry;

  • Requested services;

  • Business opportunities;

  • Promotional offers;

  • Service updates;

  • Marketing campaigns; and

  • Other business-related matters.

​

Lawful Basis:

  • Consent;

  • Legitimate interests where permitted by law.

5.6 Operating and Improving Our Website

We use information to:

  • Operate our website;

  • Improve website functionality;

  • Monitor performance;

  • Enhance user experience;

  • Troubleshoot technical issues;

  • Prevent misuse;

  • Improve security; and

  • Develop new features.

​

Lawful Basis:

  • Legitimate interests;

  • Consent where required.

5.7 Analytics and Performance Measurement

We use analytics information to:

  • Understand visitor behaviour;

  • Measure website performance;

  • Monitor traffic;

  • Improve content;

  • Improve marketing effectiveness;

  • Measure conversions;

  • Analyse audience engagement; and

  • Improve business performance.

​

Lawful Basis:

  • Consent where required;

  • Legitimate interests.

5.8 Advertising and Remarketing

We use personal information and advertising technologies to:

  • Deliver advertisements;

  • Measure campaign effectiveness;

  • Create audience segments;

  • Conduct remarketing activities;

  • Optimise advertising performance;

  • Improve conversion rates;

  • Build lookalike audiences;

  • Track campaign results; and

  • Improve customer acquisition efforts.

​

Advertising platforms may include:

  • Google Ads;

  • Meta Ads;

  • Facebook;

  • Instagram;

  • LinkedIn;

  • TikTok;

  • YouTube;

  • Snapchat;

  • Microsoft Advertising; and

  • Other advertising platforms.

​

Lawful Basis:

  • Consent where required;

  • Legitimate interests.

5.9 Artificial Intelligence and Automation

We may use AI-powered systems, machine learning technologies, automation platforms, and related technologies to assist with:

  • Customer support;

  • Chat functionality;

  • Marketing services;

  • Content generation;

  • Research;

  • Analytics;

  • Reporting;

  • Workflow automation;

  • Campaign management;

  • Service delivery;

  • Business operations; and

  • Operational efficiency.

​

AI technologies may assist human decision-making but are not intended to replace human oversight where such oversight is required.

​

Lawful Basis:

  • Legitimate interests;

  • Performance of a contract;

  • Consent where applicable.

5.10 Call Recordings and Meeting Recordings

We may record and use calls, meetings, webinars, consultations, interviews, training sessions, and related communications for:

  • Quality assurance;

  • Staff training;

  • Service improvement;

  • Compliance;

  • Internal review;

  • Marketing purposes;

  • Educational purposes;

  • Promotional activities;

  • Case studies;

  • Testimonials; and

  • Content creation.

​

Where legally required, consent will be obtained before publishing identifiable personal information.

​

Where appropriate, we may anonymise or redact information before publication.

​

Lawful Basis:

  • Legitimate interests;

  • Consent where required.

5.11 Recruitment Activities

We process recruitment information to:

  • Assess candidates;

  • Verify qualifications;

  • Conduct interviews;

  • Evaluate suitability;

  • Manage recruitment processes;

  • Communicate with applicants; and

  • Consider future opportunities.

​

Lawful Basis:

  • Legitimate interests;

  • Steps prior to entering a contract;

  • Legal obligations where applicable.

5.12 Client Relationship Management

We use personal information to:

  • Maintain client records;

  • Manage projects;

  • Deliver services;

  • Provide support;

  • Manage contracts;

  • Monitor performance;

  • Communicate with clients; and

  • Improve business relationships.

​

Lawful Basis:

  • Performance of a contract;

  • Legitimate interests.

5.13 Legal and Regulatory Compliance

We may process personal information to:

  • Comply with legal obligations;

  • Respond to lawful requests;

  • Exercise legal rights;

  • Defend legal claims;

  • Prevent unlawful activities;

  • Meet regulatory requirements; and

  • Cooperate with law enforcement authorities where required.

​

Lawful Basis:

  • Legal obligation;

  • Legitimate interests.

5.14 Fraud Prevention and Security

We process information to:

  • Protect our systems;

  • Prevent fraud;

  • Prevent unauthorised access;

  • Detect suspicious activity;

  • Investigate incidents;

  • Maintain cybersecurity; and

  • Protect users, clients, staff, and business assets.

​

Lawful Basis:

  • Legitimate interests;

  • Legal obligations where applicable.

5.15 Business Administration

We use personal information for administrative purposes including:

  • Financial management;

  • Business planning;

  • Auditing;

  • Reporting;

  • Record keeping;

  • Insurance matters;

  • Governance;

  • Internal operations; and

  • Business management activities.

​

Lawful Basis:

  • Legitimate interests;

  • Legal obligations;

  • Performance of a contract.

5.16 Business Transfers and Corporate Transactions

In the event of:

  • A merger;

  • Acquisition;

  • Investment;

  • Financing transaction;

  • Corporate restructuring;

  • Sale of assets;

  • Change of ownership; or

  • Business transfer,

​

personal information may be reviewed, disclosed, transferred, or otherwise processed as part of the transaction, subject to appropriate confidentiality and legal safeguards.

​

Lawful Basis:

  • Legitimate interests;

  • Legal obligations where applicable.

5.17 Research, Development and Service Improvement

We may use information to:

  • Develop new services;

  • Improve existing services;

  • Analyse market trends;

  • Conduct internal research;

  • Improve operational processes;

  • Enhance customer experiences; and

  • Support innovation initiatives.

​

Where practical, we may use aggregated, anonymised, or pseudonymised information.

​

Lawful Basis:

  • Legitimate interests.

5.18 Automated Decision-Making

Bright Viral Marketing may use automated systems, scoring systems, automation workflows, audience segmentation tools, AI technologies, and related systems to assist with business operations.

​

However, we do not generally make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals without appropriate human involvement.

​

Where applicable laws require additional rights or disclosures relating to automated decision-making, we will comply with those requirements.

5.19 Legitimate Interests

Where we rely on legitimate interests, we believe our interests are not overridden by the rights, freedoms, or interests of individuals.

​

Our legitimate interests may include:

  • Operating and growing our business;

  • Providing professional services;

  • Marketing our services;

  • Generating leads;

  • Managing customer relationships;

  • Improving our website;

  • Improving our services;

  • Enhancing security;

  • Preventing fraud;

  • Conducting business analytics;

  • Developing new offerings; and

  • Maintaining efficient business operations.

​

We will balance our legitimate interests against individual privacy rights and freedoms before relying on this lawful basis.

6. Marketing Communications, Cookies and Consent Management

Bright Viral Marketing uses marketing communications, advertising technologies, cookies, analytics platforms, and consent management tools to promote our services, improve user experiences, measure performance, generate business opportunities, and support our marketing activities.

​

We are committed to complying with applicable laws governing electronic communications, marketing activities, cookies, and privacy, including the UK GDPR, EU GDPR (where applicable), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

6.1 Marketing Communications

We may send marketing communications relating to:

  • Marketing services;

  • Advertising services;

  • Website design and development;

  • SEO services;

  • PPC services;

  • Social media marketing;

  • Email marketing;

  • AI automation services;

  • CRM services;

  • Lead generation services;

  • Business growth services;

  • Events;

  • Webinars;

  • Promotions;

  • Industry updates;

  • Educational content;

  • Company news; and

  • Other products and services offered by Bright Viral Marketing.

​

Marketing communications may be sent by:

  • Email;

  • Telephone;

  • SMS;

  • WhatsApp;

  • Social media messaging;

  • Direct messaging platforms;

  • Automated communication systems; and

  • Other communication channels permitted by law.

6.2 Consent to Marketing Communications

Where required by law, we will obtain your consent before sending marketing communications.

​

Consent may be obtained when you:

  • Submit a website form;

  • Subscribe to a newsletter;

  • Request a consultation;

  • Request a quotation;

  • Request a free audit;

  • Register for an event;

  • Download resources;

  • Participate in a promotion;

  • Engage with our services; or

  • Otherwise provide consent through our website or communication channels.

​

Where our forms include consent wording, submission of the form may constitute consent to receive marketing communications from Bright Viral Marketing.

6.3 Existing Customers and Business Contacts

Where permitted by applicable law, we may send marketing communications to existing clients, business contacts, prospective clients, and individuals who have previously engaged with our business, provided that such communications are lawful and appropriate.

6.4 Right to Opt Out

You may withdraw consent or opt out of marketing communications at any time.

​

You may do so by:

  • Clicking the unsubscribe link contained within marketing emails;

  • Contacting us directly;

  • Updating your communication preferences;

  • Replying with an opt-out request where applicable; or

  • Emailing us at np@brightviralmarketing.co.uk.

​

Opting out of marketing communications will not affect:

  • Service-related communications;

  • Contractual communications;

  • Billing communications;

  • Security notices;

  • Legal notices; or

  • Other non-marketing communications.

6.5 Advertising Technologies

We use advertising and marketing technologies to help us promote our services, measure performance, and improve advertising effectiveness.

​

Such technologies may include:

  • Google Ads;

  • Meta Ads;

  • Facebook Pixel;

  • Meta Conversions API (CAPI);

  • TikTok Pixel;

  • LinkedIn Insight Tag;

  • Google Marketing Platform technologies;

  • YouTube advertising technologies;

  • Snapchat advertising technologies;

  • Facebook Catalogue integrations;

  • Google Merchant Centre technologies;

  • Programmatic advertising platforms;

  • Retargeting technologies; and

  • Similar advertising tools.

​

These technologies may collect information regarding your interactions with our website, advertisements, content, and services.

6.6 Audience Building and Remarketing

We may use information collected through advertising technologies to:

  • Create audience segments;

  • Build custom audiences;

  • Build lookalike audiences;

  • Deliver personalised advertising;

  • Conduct remarketing campaigns;

  • Improve campaign performance;

  • Analyse advertising effectiveness; and

  • Improve customer acquisition efforts.

​

Advertisements may appear on:

  • Search engines;

  • Social media platforms;

  • Third-party websites;

  • Mobile applications;

  • Video platforms; and

  • Other advertising networks.

6.7 Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

  • Operate website functionality;

  • Improve performance;

  • Remember preferences;

  • Analyse user behaviour;

  • Measure website traffic;

  • Personalise experiences;

  • Deliver advertising;

  • Measure conversions;

  • Improve security; and

  • Support business operations.

​

Cookies may be placed by us or by third-party providers.

6.8 Types of Cookies We May Use

Strictly Necessary Cookies
These cookies are necessary for:

  • Website operation;

  • Security;

  • Authentication;

  • Network management; and

  • Essential functionality.

​

These cookies generally do not require consent where permitted by law.


Functional Cookies
These cookies may be used to:

  • Remember user preferences;

  • Improve website functionality;

  • Support chat features;

  • Support booking systems; and

  • Improve user experience.

​

Analytics Cookies
Analytics cookies may be used to:

  • Understand website traffic;

  • Measure engagement;

  • Analyse user behaviour;

  • Monitor performance;

  • Improve content; and

  • Improve website functionality.

​

Advertising Cookies
Advertising cookies may be used to:

  • Deliver advertisements;

  • Measure advertising performance;

  • Build audiences;

  • Support remarketing activities;

  • Track conversions; and

  • Improve campaign effectiveness.

6.9 Analytics Technologies

We may use analytics technologies including:

  • Google Analytics;

  • Google Tag Manager;

  • Microsoft Clarity;

  • Hotjar;

  • Yandex.Metrica;

  • Wix Analytics; and

  • Other analytics services.

​

These tools may collect information including:

  • Device information;

  • Browser information;

  • Website usage information;

  • Behavioural information;

  • Session information;

  • Interaction data; and

  • Performance data.

6.10 Consent Management Platforms

We may use consent management and cookie preference tools including:

  • Wix Consent Banner;

  • Cookiebot;

  • Usercentrics; and

  • Other consent management solutions.

​

These tools may be used to:

  • Obtain consent;

  • Record consent preferences;

  • Manage cookie preferences;

  • Demonstrate compliance obligations; and

  • Facilitate withdrawal of consent.

6.11 Managing Cookie Preferences

You can manage cookie preferences through:

  • Our cookie banner;

  • Consent management tools;

  • Browser settings;

  • Device settings; and

  • Third-party preference management tools.

​

Please note that disabling certain cookies may affect website functionality and user experience.

6.12 Do Not Track Signals

Some browsers provide "Do Not Track" signals.

Because there is currently no universally accepted standard for responding to such signals, our website may not respond to all Do Not Track requests in a uniform manner.

6.13 Social Media Features

Our website may include social media features, integrations, sharing tools, embedded content, and advertising technologies provided by social media platforms.

These features may collect information about:

  • Website visits;

  • Device information;

  • Interactions;

  • Content engagement; and

  • Other relevant activity.

​

Your interactions with such features may also be governed by the privacy policies of the relevant social media providers.

6.14 Consent Withdrawal

Where processing is based on consent, you may withdraw consent at any time.

​

Withdrawal of consent will not affect:

  • Processing that occurred before withdrawal;

  • Processing conducted under other lawful bases;

  • Compliance with legal obligations; or

  • Contractual processing activities.

6.15 Future Marketing Technologies

As our business evolves, we may implement additional advertising, analytics, marketing, AI, automation, customer engagement, conversion tracking, attribution, personalisation, audience measurement, or related technologies.

​

Where such technologies involve personal information, they will be used in accordance with applicable law and this Privacy Policy.

7. Sharing Your Information with Third Parties

Bright Viral Marketing may share, disclose, transfer, provide access to, or otherwise make personal information available to third parties where necessary to operate our business, provide our services, comply with legal obligations, protect our interests, improve our operations, or for other legitimate business purposes.

We do not sell personal information in exchange for monetary compensation. However, we may share information with service providers, technology partners, advertising platforms, professional advisers, and other third parties as described in this Privacy Policy.

7.1 Service Providers and Business Partners

We may share personal information with third-party service providers that support our business operations.

These providers may assist with:

  • Website hosting;

  • Website management;

  • Website security;

  • Cloud storage;

  • CRM management;

  • Marketing automation;

  • Advertising services;

  • Analytics services;

  • Customer support;

  • Email communications;

  • Project management;

  • Appointment scheduling;

  • Payment processing;

  • Recruitment;

  • Artificial intelligence services;

  • Business administration; and

  • Other operational functions.

​

Service providers are generally permitted to process information only for authorised business purposes and in accordance with contractual obligations and applicable laws.

7.2 Website, Hosting and Website Management Providers

We may share information with providers involved in the operation, management, maintenance, security, optimisation, and hosting of our websites and digital properties.

​

These providers may include:

  • Wix;

  • Namecheap;

  • Content delivery networks;

  • Security providers;

  • Domain providers;

  • Hosting providers; and

  • Other website service providers.

7.3 Customer Relationship Management Systems

We may store, organise, analyse, process, and manage information within customer relationship management systems.

​

These systems may include:

  • HubSpot;

  • GoHighLevel;

  • Salesforce;

  • Zoho;

  • Pipedrive;

  • Microsoft Dynamics;

  • Wix CRM; and

  • Other CRM platforms.

​

Such systems may process personal information relating to prospects, leads, clients, applicants, suppliers, partners, and other business contacts.

7.4 Marketing and Email Service Providers

We may share information with email marketing, marketing automation, communication, and customer engagement platforms.

These may include:

  • Mailchimp;

  • Brevo;

  • ActiveCampaign;

  • HubSpot;

  • Klaviyo;

  • GoHighLevel;

  • Wix Email Marketing; and

  • Other marketing technology providers.

​

These providers may assist with:

  • Marketing campaigns;

  • Email communications;

  • Customer engagement;

  • Marketing automation;

  • Lead nurturing;

  • Audience segmentation;

  • Analytics; and

  • Campaign reporting.

7.5 Advertising and Media Platforms

We may share information with advertising, social media, audience building, remarketing, and campaign management platforms.

These platforms may include:

  • Google;

  • Google Ads;

  • Google Marketing Platform;

  • YouTube;

  • Meta;

  • Facebook;

  • Instagram;

  • LinkedIn;

  • TikTok;

  • Snapchat;

  • Microsoft Advertising; and

  • Other advertising platforms.

​

Such platforms may process information for:

  • Audience targeting;

  • Conversion tracking;

  • Campaign measurement;

  • Remarketing;

  • Attribution;

  • Advertising optimisation;

  • Audience creation; and

  • Performance reporting.

7.6 Analytics and Measurement Providers

We may share information with analytics and measurement providers to better understand website performance, user behaviour, campaign effectiveness, and business performance.

​

These providers may include:

  • Google Analytics;

  • Google Tag Manager;

  • Microsoft Clarity;

  • Hotjar;

  • Yandex.Metrica;

  • Wix Analytics; and

  • Other analytics providers.

7.7 Artificial Intelligence and Automation Providers

We may use artificial intelligence, machine learning, automation, and productivity platforms to support our business operations and service delivery.

These providers may include:

  • OpenAI;

  • Anthropic;

  • Claude;

  • Google Gemini;

  • Microsoft AI services;

  • Zapier;

  • Make.com;

  • Notion AI;

  • AI-powered Wix tools; and

  • Other artificial intelligence or automation providers.

​

Information submitted to us may be processed through such technologies for purposes including:

  • Customer support;

  • Marketing services;

  • Content generation;

  • Workflow automation;

  • Data analysis;

  • Research;

  • Reporting;

  • Productivity enhancement; and

  • Service delivery.

​

We encourage clients and users not to submit highly sensitive information through systems that are not specifically designed for such information.

7.8 Communication and Collaboration Providers

We may use communication and collaboration platforms that process personal information.

​

These providers may include:

  • Microsoft 365;

  • Outlook;

  • Google Workspace;

  • Gmail;

  • Google Meet;

  • Microsoft Teams;

  • Zoom;

  • Slack;

  • Calendly;

  • Microsoft Bookings;

  • Wix Bookings; and

  • Other communication tools.

7.9 Document Storage and File Sharing Providers

We may store or process information using cloud storage and file-sharing providers.

​

These may include:

  • Google Drive;

  • OneDrive;

  • Dropbox;

  • SharePoint;

  • Wix storage systems; and

  • Other secure storage providers.

​

Documents uploaded through our website, shared during projects, submitted through forms, or provided through communications may be stored within such systems.

7.10 Payment Service Providers

We use third-party payment providers to process payments and subscriptions.

​

These providers may include:

  • Stripe;

  • PayPal;

  • GoCardless; and

  • Other payment processors.

​

Payment information is processed directly by these providers.

​

Bright Viral Marketing does not generally store full debit card or credit card details.

​

Payment providers are responsible for processing payment information in accordance with their own privacy policies and security standards.

7.11 Recruitment and Employment Providers

We may share recruitment-related information with:

  • Recruitment platforms;

  • Job boards;

  • Employment service providers;

  • Background verification providers;

  • Professional advisers; and

  • Other recruitment partners.

​

This may occur where necessary to administer recruitment activities or employment relationships.

7.12 Professional Advisers

We may disclose information to professional advisers where necessary.

These may include:

  • Solicitors;

  • Barristers;

  • Accountants;

  • Auditors;

  • Consultants;

  • Compliance advisers;

  • Insurers; and

  • Other professional service providers.

7.13 Business Referrals and Strategic Partners

Where appropriate and lawful, we may share information with trusted business partners, referral partners, strategic partners, subcontractors, consultants, freelancers, and service providers involved in delivering services or facilitating business opportunities.

​

Such sharing will be limited to information reasonably required for the relevant purpose.

7.14 Legal and Regulatory Authorities

We may disclose personal information where required or permitted by law, including to:

  • Courts;

  • Law enforcement agencies;

  • Regulatory bodies;

  • Government authorities;

  • Tax authorities;

  • Supervisory authorities; and

  • Other competent authorities.

​

Such disclosures may occur to:

  • Comply with legal obligations;

  • Respond to lawful requests;

  • Protect rights and interests;

  • Prevent fraud;

  • Enforce agreements;

  • Resolve disputes; or

  • Protect public safety.

7.15 Corporate Transactions and Business Transfers

In the event of:

  • A merger;

  • Acquisition;

  • Corporate restructuring;

  • Reorganisation;

  • Investment transaction;

  • Financing arrangement;

  • Sale of assets;

  • Business transfer; or

  • Similar corporate event,

​

personal information may be transferred, disclosed, reviewed, or otherwise processed by prospective or actual purchasers, investors, advisers, lenders, successors, or related parties.

​

Any such transfer will be subject to appropriate confidentiality obligations and applicable legal requirements.

7.16 Aggregated and Anonymised Information

We may use, share, publish, analyse, distribute, commercialise, or otherwise process aggregated, statistical, anonymised, de-identified, or non-personal information for lawful business purposes.

​

Such information does not identify individual persons.

7.17 International Service Providers

Many of our technology providers operate internationally and may process information outside the United Kingdom.

​

Information may therefore be shared with service providers located in:

  • The United Kingdom;

  • The European Economic Area (EEA);

  • The United States;

  • The Middle East; and

  • Other jurisdictions where our service providers operate.

​

Additional safeguards relating to international transfers are described later in this Privacy Policy.

7.18 Future Service Providers

As our business develops, we may engage additional:

  • Technology providers;

  • Marketing providers;

  • AI providers;

  • Analytics providers;

  • Communication providers;

  • Security providers;

  • Payment providers;

  • CRM providers; and

  • Business service providers.

​

Where personal information is shared with such providers, we will take reasonable steps to ensure that processing is conducted in accordance with applicable law and appropriate contractual safeguards.

8. International Data Transfers

Bright Viral Marketing operates internationally and works with clients, prospects, suppliers, service providers, technology partners, and business contacts located in multiple countries.

​

As part of our business operations, personal information may be transferred to, accessed from, processed in, stored in, or otherwise handled in countries outside the United Kingdom and, where applicable, outside the European Economic Area ("EEA").

8.1 International Nature of Our Business

Our services are provided to individuals and organisations located in various jurisdictions, including:

  • The United Kingdom;

  • Member States of the European Economic Area;

  • The United States;

  • Countries in the Middle East; and

  • Other international jurisdictions.

​

In addition, many of the technology providers, software providers, cloud service providers, communication providers, AI platforms, analytics providers, and advertising platforms that we use operate globally and may process information across multiple countries.

8.2 Circumstances in Which Transfers May Occur

International transfers may occur when information is processed by:

  • Website hosting providers;

  • Cloud storage providers;

  • CRM platforms;

  • Marketing platforms;

  • Advertising platforms;

  • Analytics providers;

  • Artificial intelligence providers;

  • Communication platforms;

  • Project management systems;

  • Payment processors;

  • Recruitment systems;

  • File storage providers; and

  • Other service providers engaged by Bright Viral Marketing.

8.3 Countries Where Information May Be Processed

Depending on the services used and business activities undertaken, personal information may be processed in:

  • The United Kingdom;

  • European Economic Area countries;

  • The United States;

  • Canada;

  • Australia;

  • Singapore;

  • Israel;

  • United Arab Emirates;

  • Other jurisdictions where our providers operate; and

  • Additional jurisdictions that may become relevant as our business develops.

​

The specific processing locations used by third-party providers may change over time.

8.4 International Technology Providers

Personal information may be processed through international providers including, without limitation:

  • Wix;

  • Google;

  • Microsoft;

  • Mailchimp;

  • HubSpot;

  • Salesforce;

  • Zoho;

  • Pipedrive;

  • GoHighLevel;

  • Stripe;

  • PayPal;

  • GoCardless;

  • OpenAI;

  • Anthropic;

  • Google Gemini;

  • Zapier;

  • Make.com;

  • Notion;

  • Slack;

  • Calendly;

  • Dropbox;

  • OneDrive;

  • SharePoint; and

  • Other current or future technology providers.

These providers may store or process information in multiple jurisdictions.

8.5 Transfer Safeguards

Where personal information is transferred internationally, we seek to implement appropriate safeguards designed to protect personal information and comply with applicable data protection laws.

​

Depending on the circumstances, safeguards may include:

  • Adequacy regulations recognised by the UK Government;

  • Adequacy decisions recognised by the European Commission;

  • International Data Transfer Agreements (IDTAs);

  • UK International Data Transfer Addendums;

  • Standard Contractual Clauses (SCCs);

  • Binding Corporate Rules;

  • Contractual confidentiality obligations;

  • Security certifications;

  • Technical safeguards;

  • Organisational safeguards; and

  • Other legally recognised transfer mechanisms.

8.6 Transfers to Countries Without Adequacy Status

Where information is transferred to countries that do not benefit from an applicable adequacy decision, we may rely on one or more of the safeguards described above.

​

These measures are intended to ensure that transferred personal information receives a level of protection substantially equivalent to that required under applicable data protection laws.

8.7 Service Provider Compliance

We seek to work with service providers that maintain privacy, security, and compliance programmes appropriate to the nature of the services provided.

Where appropriate, we may:

  • Enter into contractual arrangements;

  • Review privacy documentation;

  • Implement data processing agreements;

  • Assess security controls;

  • Conduct vendor reviews; and

  • Require compliance commitments.

​

However, no third-party service provider can guarantee absolute security or uninterrupted compliance.

8.8 Client Instructions and International Processing

Where clients engage Bright Viral Marketing to provide marketing, advertising, automation, website development, CRM, AI, analytics, lead generation, or related services, client information and project-related information may be processed internationally where reasonably necessary to provide the requested services.

​

By engaging our services, clients acknowledge that international processing may occur in connection with the technologies and service providers used to deliver those services.

8.9 Cross-Border Communications

Communications with Bright Viral Marketing may involve international transmission of information through:

  • Email systems;

  • Cloud-based communication platforms;

  • Video conferencing services;

  • Messaging systems;

  • Customer support systems;

  • Collaboration tools; and

  • Other technology platforms.

​

Such transmissions may cross international borders even where both parties are located within the same jurisdiction.

8.10 Artificial Intelligence and International Processing

Certain AI-powered systems and automation technologies used by Bright Viral Marketing may involve processing through infrastructure located outside the United Kingdom.

​

Where information is processed through AI systems, international transfers may occur in accordance with the privacy practices and infrastructure arrangements of the relevant provider.

​

We seek to use reputable providers that maintain appropriate security and privacy standards.

8.11 User Acknowledgement

By interacting with our website, submitting information, communicating with us, using our services, applying for employment, engaging with our advertising, or otherwise providing information to Bright Viral Marketing, you acknowledge that your information may be processed internationally in accordance with this Privacy Policy.

8.12 Future International Transfers

As our business expands and technology evolves, we may engage additional international service providers and business partners.

​

Where personal information is transferred internationally through such providers, we will seek to implement safeguards that we reasonably believe are appropriate under applicable law at the time of the transfer.

8.13 Transfer Limitations

While we take reasonable steps to protect personal information during international transfers, no method of transmission, storage, or international processing can be guaranteed to be completely secure, uninterrupted, or free from risk.

​

Accordingly, transfers occur subject to the inherent risks associated with global communications networks, international technology infrastructure, and third-party service providers.

9. Data Security

Bright Viral Marketing takes the security of personal information seriously and implements a range of technical, organisational, administrative, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, misuse, or other forms of unlawful processing.

​

While we strive to maintain appropriate security measures, no method of transmission over the internet, electronic storage system, communication network, software platform, cloud environment, or information technology infrastructure can be guaranteed to be completely secure.

9.1 Our Security Commitment

We seek to maintain security measures that are appropriate to:

  • The nature of the information processed;

  • The risks associated with processing activities;

  • Industry practices;

  • Legal requirements;

  • Business requirements; and

  • The size and scope of our operations.

​

Security measures are reviewed and updated from time to time as technology, threats, legal requirements, and business operations evolve.

9.2 Technical Security Measures

Depending on the systems and services used, security measures may include:

  • SSL/TLS encryption;

  • Secure website connections;

  • Secure hosting environments;

  • Password protection;

  • Multi-factor authentication (MFA);

  • Two-factor authentication (2FA);

  • Access restrictions;

  • User authentication controls;

  • Network security controls;

  • Security monitoring;

  • Device security measures;

  • Endpoint protection;

  • Anti-malware solutions;

  • Backup systems;

  • Recovery procedures; and

  • Other technical safeguards.

9.3 Website Security

Our website uses security technologies intended to help protect information transmitted through the website.

​

Such technologies may include:

  • SSL certificates;

  • Secure hosting infrastructure;

  • Website security tools;

  • Access controls;

  • Security monitoring services;

  • Spam prevention technologies;

  • Anti-abuse mechanisms; and

  • Other website security measures.

​

However, website security cannot be guaranteed and users should exercise caution when transmitting information online.

9.4 Account Security

Where accounts, portals, booking systems, communication systems, CRM systems, cloud storage systems, or other platforms are used, access may be restricted through:

  • User authentication;

  • Password protection;

  • Role-based permissions;

  • Multi-factor authentication;

  • Security policies; and

  • Access management procedures.

​

Users are responsible for maintaining the confidentiality of their own passwords, credentials, devices, and account information.

9.5 Internal Access Controls

Access to personal information is generally limited to:

  • Directors;

  • Employees;

  • Contractors;

  • Consultants;

  • Freelancers;

  • Service providers; and

  • Authorised personnel

​

who require access for legitimate business purposes.

​

Access rights may be restricted based on job responsibilities, operational requirements, contractual obligations, and security considerations.

9.6 Staff Awareness and Confidentiality

Individuals who may have access to personal information may be subject to:

  • Confidentiality obligations;

  • Employment obligations;

  • Contractor obligations;

  • Internal policies;

  • Security procedures; and

  • Professional responsibilities.

​

We seek to promote appropriate awareness regarding privacy, confidentiality, and information security.

9.7 Cloud-Based Systems

Bright Viral Marketing uses cloud-based platforms and software solutions for business operations, communications, marketing activities, service delivery, project management, recruitment, file storage, and administration.

​

Such platforms may include providers such as:

  • Wix;

  • Google;

  • Microsoft;

  • HubSpot;

  • Salesforce;

  • Zoho;

  • Pipedrive;

  • GoHighLevel;

  • Dropbox;

  • OneDrive;

  • SharePoint;

  • Slack;

  • OpenAI;

  • Anthropic;

  • Notion;

  • Make.com;

  • Zapier; and

  • Other cloud service providers.

​

While we seek to use reputable providers, information stored within cloud environments remains subject to risks associated with cloud computing, internet-based technologies, third-party services, and global infrastructure.

9.8 Data Minimisation

Where reasonably practicable, we seek to collect and retain only the information that is necessary for legitimate business, contractual, legal, operational, marketing, recruitment, customer service, or service delivery purposes.

9.9 Monitoring and Security Reviews

We may conduct security-related activities including:

  • Security monitoring;

  • Risk assessments;

  • System reviews;

  • Access reviews;

  • Vendor assessments;

  • Security audits;

  • Compliance reviews; and

  • Other security-related activities.

​

These activities help support the protection of our systems, services, and information assets.

9.10 Incident Management

If we become aware of a security incident, data breach, unauthorised access event, or other security issue affecting personal information, we may:

  • Investigate the matter;

  • Contain the incident;

  • Assess risks;

  • Implement remedial measures;

  • Notify affected parties where required;

  • Notify regulators where legally required; and

  • Take other actions that we reasonably consider appropriate.

9.11 User Responsibilities

Users are responsible for helping to protect their own information by:

  • Using secure passwords;

  • Protecting account credentials;

  • Maintaining device security;

  • Exercising caution when sharing information online;

  • Keeping software updated;

  • Using secure internet connections where possible; and

  • Promptly reporting suspected security concerns.

9.12 Third-Party Security

Many of the services used by Bright Viral Marketing are provided by independent third parties.

​

While we seek to engage reputable providers, we do not control all aspects of their infrastructure, systems, security practices, personnel, or operations.

​

Accordingly, we cannot guarantee the security, availability, or performance of third-party services.

9.13 No Absolute Security Guarantee

Although we implement measures designed to protect personal information, no security system can provide absolute protection.

Accordingly:

  • No website;

  • No cloud platform;

  • No communication system;

  • No software application;

  • No electronic storage system; and

  • No internet transmission

​

can be guaranteed to be completely secure.

​

You provide information to us and interact with our services at your own risk.

9.14 Security Limitation

To the maximum extent permitted by applicable law, Bright Viral Marketing shall not be liable for security incidents, unauthorised access, cyberattacks, system failures, service interruptions, data losses, transmission failures, or other events beyond our reasonable control, provided that we have acted in accordance with applicable legal obligations and have implemented security measures that we reasonably consider appropriate.

9.15 Continuous Improvement

We reserve the right to update, enhance, replace, modify, or implement additional security measures at any time in response to:

  • Emerging threats;

  • Technological developments;

  • Operational requirements;

  • Regulatory changes;

  • Industry standards; and

  • Business needs.

​

Such changes may occur without prior notice where reasonably necessary to protect our systems, users, clients, personnel, or business operations.

10. Data Retention

Bright Viral Marketing retains personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes, to enforce agreements, to protect our legitimate business interests, and to satisfy regulatory, accounting, operational, contractual, and reporting requirements.

​

Retention periods may vary depending on the nature of the information, the purpose of processing, applicable legal requirements, and operational needs.

10.1 General Retention Principles

When determining how long information should be retained, we may consider:

  • The nature of the information;

  • The sensitivity of the information;

  • The purpose for which the information was collected;

  • Legal obligations;

  • Regulatory requirements;

  • Contractual requirements;

  • Business needs;

  • Security considerations;

  • Potential legal claims; and

  • Industry practices.

​

We may retain information for longer periods where required or permitted by law.

10.2 Lead and Prospect Information

We may retain information relating to:

  • Prospective clients;

  • Sales leads;

  • Business contacts;

  • Marketing contacts;

  • Consultation requests;

  • Quote requests;

  • Audit requests;

  • Networking contacts; and

  • Other prospective business relationships.

​

Such information may be retained:

  • Until consent is withdrawn;

  • For as long as reasonably necessary for business purposes;

  • For relationship management purposes;

  • For marketing purposes where legally permitted; or

  • Until deletion is requested and applicable legal obligations permit deletion.

10.3 Marketing Information

Information used for marketing activities may be retained:

  • Until you unsubscribe;

  • Until consent is withdrawn;

  • For as long as marketing activities remain lawful and appropriate;

  • To maintain suppression lists;

  • To demonstrate compliance obligations; and

  • For legitimate business purposes.

​

Where an individual opts out of marketing communications, we may retain limited information to ensure that future marketing communications are not sent inappropriately.

10.4 Client Information

Information relating to current and former clients may be retained:

  • During the client relationship;

  • For the duration of any applicable contract;

  • For project management purposes;

  • For support purposes;

  • For legal purposes;

  • For financial record-keeping purposes;

  • For compliance purposes; and

  • For legitimate business purposes following completion of services.

​

Retention periods may vary depending on the nature of the services provided and applicable legal requirements.

10.5 Project Materials and Client Files

Project files, uploaded documents, reports, marketing materials, creative assets, analytics data, campaign records, website files, CRM information, automation workflows, strategy documents, communications, and related project materials may be retained where reasonably necessary for:

  • Service delivery;

  • Project management;

  • Future support;

  • Business continuity;

  • Legal compliance;

  • Contractual obligations; and

  • Legitimate business interests.

10.6 Recruitment Information

CVs, resumes, application forms, interview records, recruitment notes, assessment information, and related recruitment materials may be retained for up to:

12 months from the date of collection or the conclusion of the relevant recruitment process.

​

This enables us to:

  • Consider candidates for future opportunities;

  • Respond to enquiries;

  • Manage recruitment records; and

  • Protect our legal interests.

​

Information may be deleted sooner where appropriate or retained longer where required by law.

10.7 Call Recordings and Meeting Recordings

Call recordings, video recordings, webinars, interviews, consultations, strategy sessions, training sessions, and related recordings may be retained for as long as reasonably necessary for:

  • Training purposes;

  • Quality assurance;

  • Service delivery;

  • Compliance;

  • Internal review;

  • Content creation;

  • Marketing purposes;

  • Educational purposes;

  • Promotional purposes;

  • Case studies; and

  • Legitimate business purposes.

​

Where recordings are used for public-facing content, we may retain edited versions, excerpts, transcripts, summaries, derivative content, or related materials.

10.8 Website Chat and AI Interactions

Information submitted through:

  • Website chat systems;

  • AI-powered assistants;

  • Chatbots;

  • Customer support systems; and

  • Automated communication tools

​

may be retained for as long as reasonably necessary to:

  • Respond to enquiries;

  • Improve services;

  • Improve automation systems;

  • Maintain records;

  • Conduct analysis;

  • Support operations; and

  • Protect business interests.

10.9 Analytics and Website Usage Information

Analytics, technical information, website activity information, and usage data may be retained for varying periods depending on:

  • Technical requirements;

  • Reporting requirements;

  • Platform settings;

  • Advertising requirements;

  • Analytics requirements; and

  • Business needs.

​

Retention periods may be controlled by the relevant analytics or advertising platform.

10.10 Advertising and Marketing Data

Advertising-related information, audience information, campaign data, conversion information, remarketing information, and attribution data may be retained for as long as reasonably necessary to:

  • Measure campaign performance;

  • Improve advertising effectiveness;

  • Conduct analysis;

  • Maintain records;

  • Optimise marketing activities; and

  • Protect legitimate business interests.

10.11 Financial and Accounting Records

Financial records may be retained for periods required by:

  • Tax laws;

  • Accounting regulations;

  • Financial reporting obligations;

  • Legal requirements; and

  • Business record-keeping obligations.

​

Such information may be retained for several years following the completion of a transaction or business relationship.

10.12 Legal Claims and Disputes

Where information may be relevant to:

  • Actual disputes;

  • Potential disputes;

  • Regulatory matters;

  • Legal claims;

  • Investigations;

  • Complaints; or

  • Compliance obligations,

​

We may retain information for longer periods where reasonably necessary to establish, exercise, defend, investigate, resolve, or protect legal rights and interests.

10.13 Backups and Archived Data

Information may remain within:

  • Backup systems;

  • Disaster recovery systems;

  • Archived records;

  • Security archives;

  • Historical systems; and

  • Operational backups

​

for a period of time after deletion from active systems.

​

Such information will generally remain subject to applicable security measures and access controls.

10.14 Anonymisation

Where appropriate, we may anonymise, aggregate, de-identify, pseudonymise, or otherwise transform information so that it no longer identifies an individual.

Anonymised information may be retained indefinitely and used for lawful business purposes.

10.15 Deletion Requests

Where you request deletion of your personal information, we will assess the request in accordance with applicable law.

We may retain information where necessary to:

  • Comply with legal obligations;

  • Establish, exercise, or defend legal claims;

  • Protect legitimate interests;

  • Complete contractual obligations;

  • Maintain security records;

  • Prevent fraud; or

  • Comply with regulatory requirements.

10.16 End of Retention Period

When information is no longer required, we may:

  • Delete it;

  • Destroy it;

  • Anonymise it;

  • Aggregate it; or

  • Otherwise dispose of it in a manner that we consider appropriate and consistent with applicable legal obligations.

10.17 Retention Policy Updates

Bright Viral Marketing reserves the right to modify retention periods, retention practices, and information management procedures from time to time in response to:

  • Legal requirements;

  • Regulatory developments;

  • Business needs;

  • Technological changes;

  • Security considerations; and

  • Operational requirements.

​

Any such changes will be reflected through updates to this Privacy Policy where appropriate.

11. Your Privacy Rights

Depending on your location and the applicable laws governing the processing of your personal information, you may have certain rights regarding your personal information.

​

Bright Viral Marketing is committed to respecting and facilitating the exercise of applicable privacy rights in accordance with the UK GDPR, EU GDPR (where applicable), the Data Protection Act 2018, and other relevant privacy laws.

​

These rights are not absolute and may be subject to legal limitations, exemptions, exceptions, verification requirements, and other lawful restrictions.

11.1 Right of Access

You may have the right to request confirmation of whether we process your personal information and, where applicable, obtain access to information including:

  • The categories of personal information processed;

  • The purposes of processing;

  • The recipients or categories of recipients;

  • Retention information;

  • Information regarding international transfers;

  • The source of the information where applicable; and

  • Other information required by law.

​

You may also request a copy of certain personal information that we hold about you.

11.2 Right to Rectification

You may request that we correct, update, amend, or complete personal information that is inaccurate, incomplete, outdated, or misleading.

We may request evidence where appropriate to verify the accuracy of requested changes.

11.3 Right to Erasure

You may request deletion of your personal information in certain circumstances.

This right may apply where:

  • Information is no longer necessary;

  • Consent has been withdrawn;

  • Processing is no longer lawful;

  • You successfully object to processing; or

  • Applicable law otherwise requires deletion.

​

However, we may retain information where retention is necessary to:

  • Comply with legal obligations;

  • Establish, exercise, or defend legal claims;

  • Protect legitimate interests;

  • Prevent fraud;

  • Maintain security records;

  • Complete contractual obligations; or

  • Fulfil other lawful requirements.

11.4 Right to Restrict Processing

You may have the right to request restriction of processing in certain circumstances, including where:

  • Accuracy is contested;

  • Processing is alleged to be unlawful;

  • Information is required for legal claims; or

  • An objection request is being considered.

​

Where processing is restricted, we may continue to store information but may limit certain processing activities.

11.5 Right to Data Portability

Where applicable, you may have the right to receive certain personal information in a structured, commonly used, and machine-readable format.

​

Where technically feasible and legally required, you may also request transmission of such information to another organisation.

​

This right generally applies only in specific circumstances prescribed by law.

11.6 Right to Object

You may have the right to object to processing carried out on the basis of legitimate interests.

​

You may also object to:

  • Direct marketing;

  • Marketing profiling;

  • Marketing analytics; and

  • Certain other forms of processing.

​

Where a valid objection is received, we will consider the request in accordance with applicable legal requirements.

11.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

​

Withdrawal of consent will not affect:

  • Processing undertaken before withdrawal;

  • Processing based on another lawful basis;

  • Compliance activities;

  • Contractual obligations; or

  • Processing otherwise permitted by law.

11.8 Marketing Rights

You may opt out of marketing communications at any time.

You may do so by:

​

We will endeavour to process opt-out requests within a reasonable period.

​

Please note that we may continue sending non-marketing communications where necessary.

11.9 Automated Decision-Making Rights

Where applicable law provides such rights, you may have rights relating to automated decision-making and profiling.

​

Bright Viral Marketing may use:

  • AI technologies;

  • Automation systems;

  • Marketing automation;

  • Audience segmentation;

  • Lead scoring systems;

  • Workflow automation; and

  • Other analytical technologies.

​

However, we do not generally make decisions based solely on automated processing that produce legal effects or similarly significant effects without appropriate human involvement.

​

Where applicable laws require additional rights or protections, we will comply with those obligations.

11.10 Right to Complain

If you believe that we have processed your personal information unlawfully, you have the right to raise concerns with us.

​

We encourage individuals to contact us first so that we may attempt to resolve any concerns.

​

Privacy enquiries should be directed to:

​

Email: np@brightviralmarketing.co.uk

11.11 Information Commissioner's Office (ICO)

If you are located in the United Kingdom and remain dissatisfied with our response, you may have the right to lodge a complaint with the Information Commissioner's Office ("ICO"), the UK's supervisory authority for data protection matters.

​

For further information, visit:

Information Commissioner's Office (ICO)

​

We encourage individuals to contact us first where appropriate so that we may seek to resolve concerns directly.

11.12 Identity Verification

To protect personal information and prevent unauthorised disclosures, we may request information necessary to verify the identity of individuals making privacy-related requests.

​

We may decline requests where identity cannot be reasonably verified or where disclosure would create security, legal, or privacy risks.

11.13 Response Times

We will endeavour to respond to valid privacy requests within the timeframes required by applicable law.

​

In some circumstances, response periods may be extended where permitted by law, including where requests are complex, numerous, repetitive, or require additional verification.

11.14 Fees

Most privacy rights requests will be handled free of charge.

​

However, where permitted by law, we may charge a reasonable administrative fee or decline requests that are:

  • Manifestly unfounded;

  • Excessive;

  • Repetitive; or

  • Otherwise permitted to be refused under applicable law.

11.15 Limitations and Exceptions

Certain rights may not apply in all circumstances.

​

Bright Viral Marketing reserves all rights, exemptions, exceptions, defences, and lawful limitations available under:

  • UK GDPR;

  • EU GDPR;

  • Data Protection Act 2018;

  • Privacy and Electronic Communications Regulations;

  • Applicable regulatory guidance; and

  • Other relevant laws.

​

Where a request cannot be fulfilled in whole or in part, we will generally provide an explanation where legally required.

11.16 Exercising Your Rights

To exercise any privacy rights or submit a privacy-related enquiry, please contact:

​

Email: np@brightviralmarketing.co.uk

​

Telephone: 07586196014

​

We may request additional information where necessary to process and verify your request.

12. Children's Privacy

Bright Viral Marketing's website, services, marketing activities, advertising campaigns, consultations, and business offerings are intended for businesses, business professionals, entrepreneurs, organisations, and individuals aged 18 years or older.

​

We do not intentionally market to, target, solicit information from, or provide services directly to children under the age of 18.

​

We do not knowingly collect personal information from children under 18 years of age.

​

If we become aware that personal information relating to a child under the age of 18 has been collected without appropriate legal authority, parental consent, or other lawful basis, we may take steps to:

  • Investigate the matter;

  • Restrict processing;

  • Delete the information; and

  • Comply with applicable legal obligations.

​

If you believe that a child under the age of 18 has provided personal information to Bright Viral Marketing, please contact us at:

np@brightviralmarketing.co.uk and we will review the matter.

​

Parents, guardians, and legal representatives who believe that information relating to a child has been submitted to us may contact us to request investigation, correction, restriction, or deletion where appropriate.

​

Nothing in this Privacy Policy shall be interpreted as creating an obligation for Bright Viral Marketing to independently verify the age of every website visitor, applicant, prospect, lead, client, or user except where required by applicable law.

13. Recruitment and Careers

Bright Viral Marketing may collect, use, store, review, and process personal information from job applicants, contractors, freelancers, interns, consultants, and other individuals seeking opportunities with our organisation.

13.1 Information We Collect

Recruitment information may include:

  • Names;

  • Contact details;

  • Email addresses;

  • Telephone numbers;

  • Addresses;

  • Employment history;

  • Qualifications;

  • Professional experience;

  • Skills;

  • Certifications;

  • References;

  • Portfolio materials;

  • CVs and resumes;

  • Cover letters;

  • Interview notes;

  • Assessment results;

  • Recruitment correspondence; and

  • Other information voluntarily provided during the recruitment process.

13.2 Sources of Recruitment Information

Recruitment information may be collected through:

  • Our website;

  • Careers pages;

  • Application forms;

  • Job boards;

  • Recruitment agencies;

  • Professional networking platforms;

  • Referrals;

  • Interviews;

  • Assessments; and

  • Direct communications.

​

Recruitment platforms may include websites such as Indeed, LinkedIn, and other employment-related services.

13.3 Purposes of Processing

We may process recruitment information to:

  • Evaluate applications;

  • Assess suitability for opportunities;

  • Conduct interviews;

  • Verify qualifications;

  • Communicate with applicants;

  • Manage recruitment processes;

  • Maintain recruitment records;

  • Consider candidates for future opportunities; and

  • Comply with legal obligations.

13.4 Retention of Recruitment Information

Unless otherwise required by law or justified by legitimate business interests, recruitment information may be retained for up to:

12 months from the date of collection or the conclusion of the relevant recruitment process.

​

Following the retention period, information may be deleted, anonymised, archived, or otherwise disposed of in accordance with our retention practices.

13.5 Future Opportunities

Where permitted by applicable law, Bright Viral Marketing may contact applicants regarding future employment, contract, freelance, internship, consulting, or business opportunities that may be relevant to their experience, qualifications, or interests.

13.6 Recruitment Rights

Applicants may exercise applicable privacy rights in relation to their recruitment information by contacting:

np@brightviralmarketing.co.uk

14. Third-Party Websites, Platforms and External Links

Our website, communications, advertisements, content, social media pages, marketing materials, and digital properties may contain links to third-party websites, services, platforms, applications, products, or resources.

​

Examples may include:

  • Social media platforms;

  • Payment providers;

  • Advertising platforms;

  • Booking systems;

  • Video platforms;

  • File-sharing services;

  • Cloud storage services;

  • External websites;

  • Technology providers; and

  • Business partners.

​

When you leave our website or interact with third-party services, your information may be subject to the privacy policies, terms, practices, and security measures of those third parties.

​

Bright Viral Marketing does not control and is not responsible for:

  • Third-party privacy practices;

  • Third-party content;

  • Third-party security measures;

  • Third-party services;

  • Third-party policies; or

  • Third-party processing activities.

​

Users are encouraged to review the privacy policies and terms of any third-party service before providing information or engaging with such services.

​

The inclusion of links, integrations, plugins, widgets, advertisements, or references to third-party services does not constitute an endorsement, guarantee, representation, or warranty by Bright Viral Marketing unless expressly stated otherwise.

​

We make no representations regarding the accuracy, availability, legality, security, reliability, or suitability of third-party websites or services.

Use of third-party services is undertaken at your own risk.

15. Changes to This Privacy Policy

Bright Viral Marketing reserves the right to update, modify, amend, replace, supplement, or otherwise change this Privacy Policy at any time.

​

Changes may be made for reasons including:

  • Legal requirements;

  • Regulatory developments;

  • Business changes;

  • Operational changes;

  • Security considerations;

  • Technological developments;

  • Service changes;

  • New products;

  • New technologies;

  • New marketing activities; and

  • Other legitimate business reasons.

​

Updated versions of this Privacy Policy may be published on our website without prior notice.

​

Where required by applicable law, we may provide additional notice regarding material changes.

​

The "Effective Date" displayed at the beginning of this Privacy Policy indicates when the current version became effective.

​

Your continued use of our website, services, communications, systems, or business relationship with Bright Viral Marketing following publication of an updated Privacy Policy may constitute acknowledgement of the revised policy to the extent permitted by applicable law.

​

We encourage users to review this Privacy Policy periodically to remain informed about how information is collected, used, stored, shared, and protected.

16. Contact Information

If you have any questions, concerns, requests, complaints, or enquiries relating to this Privacy Policy or our privacy practices, please contact us using the details below.

​

Bright Viral Marketing Ltd

​

Trading Name: Bright Viral Marketing

​

Email: np@brightviralmarketing.co.uk

​

Telephone:

07586196014

​

Website:

www.brightviralmarketing.co.uk

​

Privacy Requests

Requests relating to:

  • Access to personal information;

  • Correction of personal information;

  • Deletion requests;

  • Restriction requests;

  • Data portability requests;

  • Objections to processing;

  • Marketing preferences;

  • Consent withdrawal; and

  • Other privacy rights

​

should be directed to:

np@brightviralmarketing.co.uk

​

We will endeavour to respond to valid requests within applicable legal timeframes and subject to verification, legal requirements, exemptions, and other lawful limitations.

Final Statement

Bright Viral Marketing is committed to protecting personal information and maintaining responsible privacy practices while delivering marketing, advertising, technology, automation, consulting, creative, recruitment, and related business services.

​

By using our website, submitting information, communicating with us, engaging our services, applying for opportunities, interacting with our content, or otherwise engaging with Bright Viral Marketing, you acknowledge that your information may be collected, used, stored, shared, transferred, and processed in accordance with this Privacy Policy and applicable law.

Privacy Policy

bottom of page