Privacy Policy.

Who we are and contact details

BrightSpark Business Process Outsourcing is based at Lauron St and Andres Soriano Ave, Mangagoy, Bislig, Surigao del Sur, 8311, Philippines. For a privacy question, request or concern, email hello@brightsparkbpo.com with the subject line “Privacy Request”.

Information we collect

We may collect business contact information such as name, work email address, telephone number, role, company and message content. In delivering client services, we may process prospect, customer or employee information supplied by, or on the instructions of, a client. Our hosting and security providers may also generate limited technical data such as device, browser and IP-address information.

Please do not send sensitive personal information through an unsolicited email. We do not knowingly collect personal information from children through this website.

How and why we use information

We use information to respond to enquiries, manage prospective and current business relationships, provide and improve our services, protect systems, meet legal obligations and maintain appropriate records. Where UK data protection law applies, we generally rely on legitimate interests for proportionate business-to-business communications and service development, contractual necessity, legal obligations, or consent where it is required or appropriate.

We do not use personal information for solely automated decisions with legal or similarly significant effects.

Outreach and direct marketing

Our services may involve contacting business prospects for BrightSpark or a client. We use professional contact details and relevant business context only for a legitimate business purpose. Marketing communications should identify the sender and offer a clear way to object or opt out. If you object, we will suppress relevant contact details for direct-marketing purposes.

Sharing and service-provider roles

We may share information with authorised staff, professional advisers, technology and hosting providers, and clients where necessary to provide a service. When working for a client, BrightSpark may act as that client’s processor or service provider; the client’s instructions and privacy notice then govern the relevant processing. We may disclose information where required by law, to protect rights or safety, or in a legitimate corporate transaction. We do not sell personal information or share it for cross-context behavioural advertising.

International transfers

BrightSpark operates from the Philippines and works with clients and providers in the United Kingdom and United States. Information may therefore be accessed or processed outside the country where it was collected. Where law requires safeguards for an international transfer, we will use an appropriate transfer mechanism and contractual or technical safeguards. You may request information about applicable safeguards by contacting us.

Retention and security

We retain information only for as long as reasonably necessary for the purpose collected, service obligations, dispute resolution, record-keeping and legal requirements. Retention periods differ by record type and client instruction. We use reasonable organisational, technical and physical measures designed to prevent unauthorised access, loss, misuse or disclosure. No system is completely secure.

Your privacy rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. UK individuals may complain to the Information Commissioner’s Office; individuals in the Philippines may raise concerns with the National Privacy Commission. US state rights vary by state and circumstances.

To exercise a right, email us. We may request information needed to verify identity and will respond in accordance with applicable law.

Cookies and third-party services

This website is designed to operate without advertising cookies. It may use essential technical services for delivery and security and load third-party resources such as web fonts or images, which may receive limited technical information. If we introduce non-essential analytics or advertising technologies, we will update this notice and provide any required choice mechanism beforehand.

Changes to this notice

We may update this notice when our practices or legal requirements change. The “Last updated” date shows when it was last revised. Material changes will be communicated in an appropriate way.