Privacy policy

Who is responsible for your data

Bright Analytic S.L. is established in Spain, so the EU General Data Protection Regulation (GDPR) and Spain's data protection law (LOPDGDD) apply to the processing described here, wherever you are located.

What we process and why

1. Messages you send us

• Data: your email address, name if you include it, and the content of your message.
• Purpose: to reply to questions, correction requests and other messages.
• Legal basis: our legitimate interest in answering messages you choose to send us (Art. 6(1)(f) GDPR).
• Retention: for as long as needed to handle your message. Afterwards we delete it, unless we must keep it to meet a legal obligation or to establish or defend legal claims, in which case it is kept blocked for the applicable limitation period.
• Email service provider: Hostinger (email hosting for info@bright-analytic.com)

2. Technical server logs

• Data: when you load a page, the web server automatically records technical data such as your IP address, browser type, the page requested and the time of the request.
• Purpose: to deliver the website, keep it secure and diagnose errors.
• Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
• Hosting provider: Hostinger (web hosting and content delivery network of this website), which processes these logs on our behalf.

3. Calculators, templates and search

Our calculators and site search run entirely in your browser. The numbers and words you enter are not sent to us or stored on our servers. Downloading a template does not require any personal data.

4. Analytics and advertising

With your consent, we use Google Analytics to measure readership. These services are loaded only after you accept them in our consent banner, and you can withdraw consent at any time from "Cookie Settings" in the footer. See our cookie policy for details.

• Data: pseudonymous identifiers stored in cookies, the pages you view, how you arrived, device and browser type, and approximate location derived by Google.
• Purpose: to understand which articles and tools are useful and improve the website. We do not use Google Analytics for advertising or to identify you.
• Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting earlier processing.
• Retention: Google Analytics deletes event and visitor-level data automatically at the end of the data-retention period configured in our Analytics account. Aggregated reports, which do not identify individual visitors, may be kept longer. The _ga cookies in your browser are removed when they expire (see our cookie policy), when you delete them or when you withdraw consent.
• Provider: Google Analytics, provided in the EEA by Google Ireland Limited, which processes the data on our behalf. Google may transfer data to the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework.

What we do not do

• We do not sell personal data, and we do not share it with third parties for their own marketing.
• We do not create profiles or make automated decisions about you.
• We do not require an account, a newsletter sign-up or any personal data to read the website.

Who receives your data

Only the service providers listed above, acting on our behalf under data processing agreements, and public authorities when the law requires it. If a provider processes data outside the European Economic Area, we will identify it here together with the safeguard that applies (for example, an adequacy decision or standard contractual clauses).

Your rights

You can ask to access, rectify or erase your personal data, to restrict or object to its processing, and to receive it in a portable format. Write to info@bright-analytic.com, indicating which right you want to exercise. We may ask you to confirm your identity. We answer within one month.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the data protection authority of your country.

Visitors from the United States

Our readers are mainly in the United States. We do not sell or share personal information for cross-context behavioral advertising, and we do not use personal data for targeted advertising at this time. If that changes, we will update this policy and provide the opt-out choices required by applicable state privacy laws before it takes effect.

Children

This website is intended for adults running businesses. It is not directed to children, and we do not knowingly collect personal data from them.

Security

We apply reasonable technical and organizational measures to protect the data we process, including encrypted connections (HTTPS) once the website is published on its domain.

Changes to this policy

We will publish any change on this page and update the "last updated" date below.

Last updated: October 26, 2026