Last updated: 1 November 2026
The controller of your personal data on this website is Anna Bethune, an independent contractor trading as brightlight Growth Studio (“brightlight”, “we”, “us”), based in the US.
Postal address: 8035 Torro Ct, Orlando, FL 32810-2817, United States
Contact for privacy requests: growth@brightlightproject.com
When you open a page, our hosting provider automatically records technical data such as your IP address, date and time, the page requested, and browser and device type. We process this to deliver the site securely and keep it running (legitimate interest, Art. 6(1)(f) GDPR). Server logs are kept for a short period, normally no longer than 30 days.
If you sign up for our workshop or newsletter through our sign-up form, we collect your email address (and any other details you choose to enter). We use it to send you the workshop details, reminders and, where you agreed, related news and offers. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by using the unsubscribe link in any email or by contacting us. Withdrawal does not affect processing done before.
Sign-up data is processed by Klaviyo, Inc. (USA), our email marketing provider, which acts on our behalf as a processor.
If you contact us, we use the details you send to answer you. The legal basis is our legitimate interest in replying, or steps taken at your request before a contract (Art. 6(1)(b) and (f) GDPR). We delete the messages when the matter is closed, unless we must keep them for legal reasons.
This website does not set advertising or analytics cookies without your consent. Technically necessary cookies and storage needed to run the site do not require consent. If we use tools such as email-marketing tracking (Klaviyo) or advertising measurement (Meta Pixel), we will load them only after you have accepted them, and you can change your choice at any time.
Fonts are hosted on our own server. Your browser does not contact Google to load them.
We do not sell your personal data.
Some providers, such as Klaviyo, process data in the United States. We rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.
We keep email list data until you unsubscribe or withdraw consent. Contact messages are deleted once handled. Invoicing and accounting records, if any, are kept as long as applicable law requires.
Under the GDPR you have the right to access, correct, delete, restrict and port your data, to object to processing based on legitimate interest, and to withdraw consent at any time. To use these rights, contact us at the details above.
You also have the right to complain to a supervisory authority.
Our services are aimed at businesses and adults. We do not knowingly collect data from children under 16.
We may update this policy. The date at the top shows the latest version.
