Privacy notice

This privacy notice explains how we collect, use and protect your personal data when you use our services.
We are Bright Exchanges Ltd, a company registered in England (company number 10118695) with registered office at 6a St Andrews Court Wellington Street Thame OX9 3WT, trading as Bright Global Learning. 
Bright Exchanges Ltd is registered with the Information Commissioner's Office (ICO) under registration number ZB035160. 
We act as the data controller for your personal data.

1. What data do we collect?

We collect:
•    contact data - name, email address (and telephone/postal address if you provide it);
•    training data - course enrollments, progress, completion records, feedback, quiz answers, role, training needs, certificates issued and certificate verification details;
•    payment data -transaction details via payment processors (we do not store full card details);
•    usage data - IP address, device/browser details, pages visited (via cookies); and
•    marketing preferences - your choices about updates, newsletters, promotions, and event invitations.

We do not intentionally collect special category data (e.g. health information). Please don't send it to us. 

2. When do we collect your data?

·         When you sign up for training, newsletters, or resources.

·         When you use LearnWorlds or payment processors.

·         When you contact us or submit feedback or quiz answers.

·         Automatically via cookies when you use our site/platform.

3. How will we use your data?

We collect your data so that we can:

·         manage your account and enrollments;

·         deliver training and related services;

·         communicate with you (updates and support);

·         send newsletters (you can unsubscribe at any time);

·         process payments via payment processors;

·         improve our services by analysing usage through cookies;

·         comply with legal obligations.

 

We rely on contract performance, legitimate interests (in running, improving, and promoting our business), consent, and legal obligations as our legal bases for processing.

We do not use automated decision-making that produces legal or similarly significant effects.

4. Cookies

Cookies are small text files stored on your device that record basic information about your visit. You can learn more at www.allaboutcookies.org.

We use essential cookies for functionality and other cookies to improve your experience including to keep you logged into, understand how you use, and remember your preferences when using, our website.

You can manage cookies through our cookie banner or your browser settings. Some features may not work if cookies are disabled. If you use any LearnWorlds cookies or embedded features, they are used in connection with the platform and its functionality.

5. Who do we share data with?

We never share your data for third-party marketing. We share data only with processors acting on our instructions, including:
•    LearnWorlds (for platform hosting, course delivery, account management);
•    LearnWorlds sub-processors (for hosting, platform, delivery, support, and related infrastructure);
•    Payment processors (for payments);
•    Email providers (for updates and newsletters);
•    Professional advisers as required (accountants, lawyers);
•    Government authorities when required by law.

6. International transfers

Some processors (eg LearnWorlds) are outside the UK. They ensure that appropriate safeguards are in place: adequacy decisions, International Data Transfer Agreements, or approved frameworks.

7. How do we keep your data?

We securely store data on LearnWorlds and other encrypted cloud backups with access controls.

We retain your data:

·         For active clients: For as long as you remain a client (so we can deliver services).

·         After relationship ends: Up to 7 years for tax/legal/insurance purposes.

·         For marketing purposes: Until you unsubscribe, then keep a record of your unsubscribe preference (so we do not contact you again). 

8. What are your data protection rights?

In respect of your data, you have rights:
•    to access – request copies of your data;
•    to rectification – correct inaccuracies;
•    to erasure – delete your data (certain conditions);
•    to restrict processing – limit how we use it;
•    to object – stop certain processing (eg marketing);
•    of portability – transfer data to another service;
•    to withdraw consent – where applicable.

We may need to verify your identity before replying to a rights request.

If your request relates to data LearnWorlds holds, we will ask LearnWorlds for the relevant export or records.  

How to exercise rights: Email judith@brightgloballearning.com. We try to reply within 1 month; for complex or multiple requests we will tell you if we need to extend by a further two months.
Complaints: You may contact the Information Commissioner at www.ico.org.uk.

9. Other websites

Linked third-party sites have their own privacy policies. 

10. Changes to this notice.

We'll update you about material changes via email or website.

Last updated: April 2026 
Created with