Privacy Policy

1. Who We Are

Bright Compendium operates from R. de S. João 8, 4050-551 Porto, Portugal. We provide digital skills training for small business owners. You can contact us at [email protected] or by phone at +351 926 094 426.

We are the data controller for personal data collected through this website and through our training activities.

2. What Personal Data We Collect

We collect personal data in the following situations:

• Contact form submissions: When you use the contact form on this website, we collect your name, email address, phone number, city and the content of your message.
• Course enrolment: When you enrol in a course, we collect the information necessary to administer your participation, which may include your name, contact details and business information.
• Website usage: If you consent to analytics cookies, we may collect anonymised data about how you use this website, including pages visited and time spent on the site. This data does not identify you personally.
• Email correspondence: If you contact us by email, we retain the content of that correspondence.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR) and Portuguese Law No. 58/2019:

• Legitimate interests (Article 6(1)(f) GDPR): Responding to your enquiries and providing information about our courses.
• Contract performance (Article 6(1)(b) GDPR): Administering your course enrolment and delivering training services.
• Consent (Article 6(1)(a) GDPR): For any optional communications and for analytics cookies where you have given consent.
• Legal obligation (Article 6(1)(c) GDPR): Where we are required to retain data for accounting or other legal purposes.

4. How We Use Your Data

We use the personal data we collect to:

• Respond to your enquiries and questions
• Provide information about courses and upcoming sessions
• Administer course enrolment and attendance
• Send course materials and post-course support information
• Maintain records as required by Portuguese law
• Improve this website based on anonymised usage data (with consent)

We do not use your personal data for automated decision-making or profiling.

5. Data Sharing

We do not sell your personal data to third parties. We may share your data with:

• Service providers: Third parties who assist us in operating this website and delivering our services, such as email hosting providers. These parties process data only on our instructions and are bound by data processing agreements.
• Legal authorities: Where required by Portuguese law or a court order.

6. Data Retention

We retain your personal data for as long as necessary for the purposes described in this policy:

• Contact enquiries that do not lead to a course enrolment: up to 12 months from last contact
• Course participant records: up to 5 years from the date of the course, as required for accounting purposes under Portuguese law
• Email correspondence: up to 2 years from last contact

7. Your Rights

Under GDPR and Portuguese data protection law, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate data.
• Right to erasure: You can ask us to delete your data, subject to any legal obligations we have to retain it.
• Right to restriction: You can ask us to limit how we process your data in certain circumstances.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

8. Cookies

This website uses cookies. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. These include secure email communication, access controls and regular review of our data handling practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.

11. Contact

For any questions about this Privacy Policy or how we handle your data, contact us at:

Bright Compendium
R. de S. João 8, 4050-551 Porto, Portugal
Email: [email protected]
Phone: +351 926 094 426