Effective Date: January 1, 2024
BrightState Ltd is committed to protecting your privacy and ensuring the security of your personal data. This policy explains how we collect, use, store, and safeguard information in compliance with UK GDPR and Data Protection Act 2018.
Data We Collect
Personal Information
Name, email address, phone number, and organization details provided during registration or communication with BrightState.
Usage Data
System logs, access times, feature usage, and interaction patterns to improve service delivery and security monitoring.
Technical Data
IP addresses, browser type, device information, and cookies for authentication, security, and performance optimization.
Client Data
Data uploaded to Sentinel QX by housing associations for analysis, processed exclusively within UK territory (AWS eu-west-2).
How We Use Your Data
Service Delivery: To provide, maintain, and improve Sentinel QX and related services
Communication: To respond to inquiries, provide support, and send service updates
Security: To monitor system integrity, prevent fraud, and ensure compliance with our terms
Legal Obligations: To comply with applicable laws, regulations, and legal processes
Data Protection & Storage
UK Data Processing: All data processing occurs exclusively within UK territory using AWS eu-west-2 infrastructure.
Encryption: Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
Access Controls: Role-based access control (RBAC) ensures only authorized personnel can access data.
Retention: Personal data is retained only as long as necessary for service delivery or legal requirements.
Data Deletion: Upon request or contract termination, data is securely deleted within 30 days.
Your Rights
Under UK GDPR, you have the right to:
To exercise any of these rights, contact us at contact@brightstate.ai or call 07553 484887.
