Last updated: 2 September 2026
About this policy
This policy explains how Bright Arc handles personal data through brightarc.in. Bright Arc provides mentorship and career guidance, thought-leadership, strategic-consulting, and media and content-production services.
Information we collect
When you send a Contact enquiry, we collect your name, work email, message, and—only if you choose to provide them—your phone number and company or organisation. We also keep the time and version of the privacy acknowledgement you accepted.
The separate newsletter form collects your email address, the page from which you subscribed, and a record of your separate newsletter consent. A Contact enquiry never subscribes you to marketing.
Our hosting and form infrastructure receives ordinary request information such as IP address, browser information, requested URL and timestamps. Bright Arc does not store full IP addresses or device/browser fingerprints in the enquiry database. For spam prevention, the form converts the request IP into a salted one-way hash used only for a short rate-limit window.
Why we use it
We use enquiry information to assess and respond to your request, identify relevant Bright Arc support, keep an accurate record of the interaction and consent notice, protect the service from abuse, and meet applicable legal obligations or handle legal claims. Newsletter information is used only to manage the communications you separately requested.
Consent and your choices
The Contact form requires an unchecked acknowledgement for handling your enquiry. Newsletter consent is a different, optional and unchecked choice. You may withdraw consent by making a privacy request. Withdrawal may mean we cannot continue the requested communication, but it does not make earlier permitted processing unlawful.
Service providers
We use Vercel to host and deliver the website, Supabase for form processing and database storage, Storyblok for website content management/build and preview, Google Fonts for web fonts, and Bright Arc's email host for enquiry notifications. These providers process information under their own infrastructure and contractual arrangements.
We do not sell personal data. We may disclose limited information to professional advisers, regulators, public authorities or courts where reasonably necessary and permitted or required by law.
Cookies, analytics and tracking
The current website does not set Bright Arc analytics or advertising cookies and does not include an advertising pixel or behavioural-analytics script. Google Fonts is requested from Google's servers and may receive ordinary request metadata. If we add analytics, advertising or another tracking technology, we will update this notice and any consent controls before activating it.
International processing
Our infrastructure providers operate internationally, so processing or support access may occur outside India depending on the selected service regions. We will apply any transfer restrictions or requirements notified under Indian law.
Security
We use server-side validation, input and payload limits, restricted website origins, spam controls, Row Level Security, restricted database permissions, output escaping, and server-only credentials. The database remains the source of truth if an email notification fails. No internet service can be guaranteed completely secure.
Retention
We retain an unconverted enquiry for up to 12 months after the last meaningful interaction, then delete or anonymise it unless it became a client record, you requested continued contact, or a legal requirement or claim requires longer retention. Newsletter information is kept while the subscription remains active and is removed after withdrawal, subject to any minimal record needed to honour that withdrawal. Short-lived spam-prevention records are kept only for their operational window.
Children
The website is not designed for children to submit enquiries independently. If you are under 18, please ask a parent or lawful guardian to contact us. Bright Arc will not knowingly offer an online service directly to a child without the legally required process.
Your requests and grievances
Subject to applicable law, you may ask us for access to information associated with your email, correction, erasure, consent withdrawal, or review of a privacy concern. We will verify identity proportionately before disclosing, changing or deleting information.
To make a privacy request or grievance, use the Contact page and begin your message with Privacy request. This routes the request into Bright Arc's restricted enquiry process for review and response.
Changes
We may update this policy when our services, vendors, legal obligations or data practices change. The current version and date will be published here. Material purpose changes will receive an appropriate new notice and consent where required.