Last updated: August 2026
Bright Heath is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we meet our obligations under data protection law and how you can exercise your rights.
Bright Heath acts as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing personal data in connection with our property consultation services.
We only process personal data when we have a valid lawful basis. The bases we rely upon include:
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you. We will provide this information free of charge within one month of your request.
You have the right to request correction of any inaccurate personal data we hold about you, or completion of incomplete data.
In certain circumstances, you have the right to request deletion of your personal data. This applies when the data is no longer necessary for the purpose it was collected, when you withdraw consent, or when processing is unlawful.
You have the right to request restriction of processing your data in certain circumstances, such as when you contest the accuracy of data or object to processing.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have rights related to automated decision-making and profiling. We do not currently engage in automated decision-making that produces legal or similarly significant effects.
To exercise any of your data protection rights, please contact us using the details below. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month.
We implement appropriate technical and organisational measures to ensure the security of personal data, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, affected individuals without undue delay.
For any questions about our GDPR compliance or to exercise your rights:
Bright Heath
45 Colmore Row
Birmingham B3 2AA
United Kingdom
Email: [email protected]
If you are not satisfied with our response to your concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters. Visit ico.org.uk for contact details and guidance on making a complaint.