Last updated: August 19, 2026
bright-savanna is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Union and United Kingdom.
We process personal data based on the following legal grounds:
For the purposes of GDPR, bright-savanna acts as the data controller for personal information collected through our website and services.
Contact details:
bright-savanna
142 Sauchiehall Street
Glasgow G2 3EW
United Kingdom
[email protected]
Under GDPR, you have the following rights regarding your personal data:
You can request confirmation of whether we process your personal data and obtain a copy of that data.
You can request correction of inaccurate or incomplete personal data.
You can request deletion of your personal data under certain circumstances, including when data is no longer necessary for the purposes collected.
You can request limitation of processing your personal data in specific situations.
You can request to receive your personal data in a structured, commonly used format and transmit it to another controller.
You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you can withdraw that consent at any time.
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month.
For questions specifically related to data protection, you may contact our designated representative at [email protected].
When we transfer personal data outside the UK or EU, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local supervisory authority.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities within 72 hours as required by GDPR.