1. Overview and Scope
Brightssortscot Media Nordic Ltd ("we", "our", or "us"), registered under company number SC784912 in Edinburgh, United Kingdom, operates the web domain brightssortscot.quest. We are committed to safeguarding personal data entrusted to us by our readers and website visitors in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU General Data Protection Regulation (EU GDPR), and relevant international privacy frameworks including the California Consumer Privacy Act (CCPA).
2. Categories of Information We Collect
We restrict data collection to the minimum required to deliver our editorial content and maintain website security:
- Information Provided Voluntarily: When you complete our contact inquiry form, we collect your full name, email address, topic of inquiry, and message content. This information is utilized solely to address your query and is not sold, rented, or repurposed for unrequested advertising.
- Automatically Collected Technical Data: When browsing our pages, our servers receive standard web log information, including truncated (pseudonymized) IP addresses, browser types, operating systems, referring URLs, and timestamps. This technical data is examined in aggregate to ensure network integrity and monitor platform performance.
- Cookie and Local Storage Identifiers: We collect preference data (such as your choice to accept or decline analytics cookies) via browser localStorage to respect your consent choices during subsequent sessions.
3. Lawful Basis for Processing
Under Article 6 of the UK and EU GDPR, we process personal information based on the following legal grounds:
- Legitimate Interests: To operate, safeguard, and ensure the technical stability of our public editorial platform.
- Consent: Where you explicitly submit an inquiry through our contact form or consent to non-essential analytical cookies via our banner.
- Legal Obligation: Where compliance with regulatory, corporate, or legal mandates is required by applicable law.
4. Third-Party Processors
We do not sell personal information to commercial data brokers. We engage carefully vetted infrastructure providers to assist with web hosting and security monitoring. Any external processor operating on our behalf is bound by contractual Data Processing Agreements (DPAs) requiring adherence to strict confidentiality, technical safeguards, and restricted data handling permissions.
5. International Data Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area (EEA), we verify that appropriate transfer mechanisms are in place, including UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs), ensuring equivalent levels of data protection.
6. Data Retention Guidelines
Direct communication inquiries submitted through our contact form are retained for twenty-four (24) months to facilitate ongoing editorial communication, after which they are securely purged. Anonymous server log files are overwritten or deleted within ninety (90) days, unless needed to resolve a specific technical vulnerability or security incident.
7. Your Statutory Rights (GDPR & CCPA)
Depending on your jurisdiction, you are entitled to exercise specific data rights regarding your personal information, including:
- Right of Access: You may request confirmation of whether we hold your personal data and obtain a copy.
- Right to Rectification: You may request corrections to inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal records where no overriding legal obligation applies.
- Right to Restrict or Object to Processing: You may challenge the processing of personal data conducted under legitimate interests.
- Right to Data Portability: You may request your supplied records in a structured, machine-readable format.
- Non-Discrimination: California residents exercising CCPA rights will receive equal service and pricing without penalty.
8. Data Protection Officer & Inquiries
To exercise any of your data rights or to submit an inquiry regarding our compliance practices, please contact our designated privacy team:
Data Protection Officer
Brightssortscot Media Nordic Ltd
14 St Andrew Square, Edinburgh, EH2 2AF, United Kingdom
Email: [email protected]
If you believe our processing violates applicable data protection legislation, you also have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or your local European data protection supervisory authority.