Effective Date: January 1, 2026
BrightState Ltd is committed to protecting your privacy and ensuring the security of your personal data. This policy explains how we collect, use, store, and safeguard information in compliance with UK GDPR and Data Protection Act 2018.
Data we collect
Personal Information
Name, email address, phone number, and organization details provided during registration or communication with BrightState.
Usage Data
System logs, access times, feature usage, and interaction patterns to improve service delivery and security monitoring.
Technical Data
IP addresses, browser type, device information, and cookies for authentication, security, and performance optimization.
Client Data
Data uploaded to SentinelQX by housing associations for analysis, processed exclusively within UK territory (AWS eu-west-2).
How we use your data
To provide, maintain, and improve SentinelQX and related services
To respond to enquiries, provide support, and send service updates
To monitor system integrity, prevent fraud, and meet our terms
To comply with applicable laws, regulations, and legal processes
Data protection and storage
All processing occurs within UK territory on AWS eu-west-2.
Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
Access is controlled by role — only authorised personnel can read client data.
Personal data is kept only as long as service delivery or legal requirements demand.
On request or contract end, data is securely deleted within 30 days.
Your rights
Under UK GDPR, you have the right to:
To exercise any of these rights, contact us at contact@brightstate.ai or call 07553 484887.