Privacy Notice
Privacy Notice
Who we are
Brightman Business Solutions Limited (“Brightman”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how we collect, use, store and share personal information when you:
visit or contact us through our website;
communicate or do business with Brightman;
are a customer, supplier, partner or other business contact;
apply for, or are considered for, a role or engagement with Brightman; or
are provided with access to Brightman systems.
Brightman Business Solutions Limited is the data controller for the personal information described in this notice.
If you have questions about this notice, how we use your information or your data-protection rights, please contact:
Brightman Business Solutions Limited 35 Ballards Lane London N3 1XW United Kingdom
Email: allison.standley@brightman.uk.com
What personal information we collect
The information we collect depends on your relationship with us and why we need the information.
It may include:
your name and contact details;
your job title, employer and business contact information;
information contained in correspondence or enquiries;
information required to establish, manage or deliver a customer, supplier or other business relationship;
contract, commercial and payment information;
website and technical information;
information about access to and use of Brightman systems; and
recruitment and candidate information where you apply for, or are considered for, a role or engagement with Brightman.
We aim to collect only the personal information reasonably necessary for the relevant purpose.
Recruitment and candidate information
If you apply for a job, associate engagement or other opportunity with Brightman, or are introduced to us as a prospective candidate, we may process information including:
your name and contact details;
your CV, employment history, qualifications, skills and professional memberships;
role preferences, availability, salary or rate information and relevant engagement information;
interview, assessment and selection information;
references and background information;
identity and right-to-work information where required;
security clearance, vetting or access information where relevant to the role; and
information required for onboarding if you are successful.
Where necessary and lawful, we may also process special-category information, such as information required to provide reasonable adjustments, and information relating to criminal-offence or security-vetting checks.
We use recruitment information to:
manage applications and candidate relationships;
assess suitability for roles and engagements;
communicate with candidates;
carry out appropriate pre-engagement checks;
meet legal, regulatory, contractual, customer and security requirements; and
where appropriate, consider candidates for future opportunities.
Depending on the circumstances, our lawful bases may include taking steps before entering into a contract, complying with our legal obligations and pursuing our legitimate interests in carrying out and managing our business.
Where special-category or criminal-offence information is processed, we will also rely on an appropriate condition permitted by data-protection law.
Security logging
When you use or are given access to Brightman systems, including through a guest account, Brightman may automatically record sign-in and administrative-event information for security monitoring, assurance and investigation.
This may include account details, date and time, IP address, approximate location, device and application information, sign-in outcome and information about relevant administrative changes.
This security logging does not capture the content of emails, files or messages as part of this activity.
Security logs are retained for three years and are then deleted automatically. Access is restricted.
Where necessary, we may share the minimum relevant information with a customer, partner or competent authority for a lawful investigation.
We rely on our legitimate interests in protecting, monitoring and investigating the security of Brightman systems for this processing.
How we use personal information
Depending on our relationship with you, we may use personal information to:
respond to enquiries and communicate with you;
provide or obtain services;
establish and manage customer, supplier and other business relationships;
administer contracts and commercial arrangements;
process payments and maintain financial records;
manage recruitment and candidate relationships;
meet legal, regulatory, contractual, customer and security requirements;
protect Brightman’s people, information, services and systems;
investigate security incidents, complaints, claims or disputes; and
maintain appropriate business, governance and compliance records.
Our lawful bases
We only process personal information where we have an appropriate lawful basis.
Depending on the purpose, this may include:
performing a contract or taking steps before entering into one;
complying with a legal obligation;
pursuing our legitimate interests, where those interests are not overridden by your rights and interests; or
consent, where consent is the appropriate lawful basis.
Where we process special-category or criminal-offence information, we apply the additional conditions required by data-protection law.
Where we obtain personal information
We may receive personal information:
directly from you;
from your employer or organisation;
from customers, suppliers and business partners;
from recruitment agencies or other candidate sources;
from referees, screening or vetting providers;
from publicly available professional or business sources; and
automatically through your interaction with Brightman systems.
Who we share personal information with
We do not sell personal information.
Where necessary and appropriate for the purposes described in this notice, we may share information with:
organisations providing services to Brightman;
professional and legal advisers;
customers, suppliers and business partners where necessary for a legitimate business purpose;
recruitment agencies, referees and approved screening or vetting providers;
relevant customers or partners where candidate information needs to be submitted in connection with a particular role or engagement;
government, regulatory, law-enforcement or other competent authorities where required or lawfully appropriate; and
other recipients where disclosure is required or permitted by law.
We aim to share only the personal information necessary for the relevant purpose.
How long we keep personal information
We keep personal information only for as long as it is required for the purpose for which it was collected and in accordance with our legal, regulatory, contractual, security and legitimate business requirements.
Different types of information therefore have different retention periods.
For example, Brightman security sign-in and audit logs are retained for three years.
Where information is relevant to a legal claim, investigation, audit, complaint or other preservation requirement, we may need to retain it beyond its normal retention period.
How we protect personal information
We take proportionate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.
Access to personal information is restricted according to business need, the nature of the information and the responsibilities of the people requiring access.
Your data-protection rights
Depending on the circumstances and the lawful basis on which we process your information, you may have rights to:
ask us for access to your personal information;
ask us to correct inaccurate or incomplete information;
ask us to erase your personal information in certain circumstances;
ask us to restrict processing in certain circumstances;
object to certain processing; and
receive or transfer certain information where the right to data portability applies.
Where we rely on consent, you may withdraw your consent.
These rights do not apply in every circumstance and may be subject to exemptions or other legal requirements.
To exercise a data-protection right, please contact us using the details at the beginning of this notice.
Complaints
If you have concerns about the way Brightman has used your personal information, please contact us so that we can consider them.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
Cookies
Our website may use cookies and similar technologies.
Cookies that are strictly necessary may be used where required for the website to operate. Where a cookie or similar technology requires consent, we will ask for that consent before using it.
You can manage relevant cookies using any cookie controls provided on our website and through your browser settings.
Changes to this Privacy Notice
We may update this Privacy Notice where our processing activities, legal obligations or business arrangements change.
The latest version will be published on our website.
