Privacy Policy

Last updated: 1 June 2026. This Privacy Policy applies to the website brightenatural.world and is provided in line with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA), and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data controller

The controller responsible for your personal data is:

• Brightenatural
• 220 Montgomery Street, Suite 100, San Francisco, CA 94104, USA
• Phone: +1 415-392-9688
• Email: callback@brightenatural.world

2. What data we collect

We only collect data you actively provide or that is needed to operate the site:

• Contact form details: your name, email address, and message content.
• Consent records: the choices you make in our cookie banner.
• Technical data: standard server log information such as browser type and pages viewed, where analytics cookies are accepted.

3. Purposes and legal bases

We process personal data for the following purposes:

• To respond to enquiries you send through the contact form, based on your consent and our legitimate interest in replying.
• To keep the website secure and functioning, based on our legitimate interest.
• To understand site usage through analytics, based on your consent.

4. Retention periods

We keep contact enquiries for up to 24 months after our last exchange, unless a longer period is required by law. Consent records are kept for up to 24 months. Server logs are typically retained for up to 12 months.

5. Sharing your data

We do not sell your personal data. We may share it with service providers who host our website or help us manage communications, acting under written agreements and only as needed. Some providers may process data outside your country, supported by appropriate safeguards such as standard contractual clauses.

6. Your rights

Subject to applicable law, you may request to access, correct, delete, or restrict your data, object to certain processing, request portability, and withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us at callback@brightenatural.world.

7. Security measures

We apply technical and organizational measures such as encryption in transit (HTTPS), access controls, and regular review of our processes to help protect your data against loss or unauthorized access.

8. Updates to this policy

We may update this policy to reflect changes in our practices or legal requirements. The latest version will always be available on this page with its revision date.