Privacy Policy

1. Introduction

Brightshape ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website (brightshape.nl) or use our services.

Brightshape is based in Amsterdam, the Netherlands, and complies with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller responsible for your personal data is:

Brightshape
Amsterdam, Netherlands
Email: hello@brightshape.nl

3. What Data We Collect

Contact form submissions

When you submit our contact form, we collect your name, email address, and message content. This data is used solely to respond to your inquiry.

Analytics

We use Google Analytics 4 in cookieless mode to understand how visitors use our website. This collects anonymized, aggregate data such as page views and scroll depth. No personal data or cookies are used for analytics purposes.

Server logs

Our web server automatically collects standard log data including IP addresses, browser type, and pages visited. This data is retained for security purposes and automatically deleted after 30 days.

4. How We Use Your Data

We use your personal data only for the following purposes:

• To respond to your contact form inquiry
• To improve our website and services
• To ensure the security of our website

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Legal Basis

We process your personal data based on:

• Legitimate interest (Article 6(1)(f) GDPR) — for website analytics and security
• Consent (Article 6(1)(a) GDPR) — when you voluntarily submit the contact form

6. Data Retention

Contact form submissions are retained for up to 12 months after your inquiry has been resolved. Server logs are retained for 30 days. Analytics data is anonymized and aggregated.

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise any of these rights, contact us at hello@brightshape.nl.

8. Cookies

Our website does not use tracking cookies. We use Google Analytics 4 in cookieless mode, which does not store cookies on your device.

9. Third-Party Services

We use the following third-party services:

• Google Fonts — to serve the Inter typeface. Google may collect anonymized usage data per their privacy policy.
• Google Analytics 4 — in cookieless mode for anonymized website analytics.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at hello@brightshape.nl.