Privacy policy
Who we are
This notice explains how Bright Beany uses personal information about people who visit our website, contact us, download our guides or tools, or receive our marketing.
"Bright Beany", "we" and "us" means Bright Beany Accounting Ltd, a company registered in England and Wales (company number 13708476), registered office Fenchurch House, 12 King Street, Nottingham NG1 2AS. We are the data controller for this information and are registered with the Information Commissioner's Office (registration number ZB308241).
If you have any questions, email hello@brightbeany.com or call 0115 654 5114.
What we collect
- Contact details: name, email address, phone number, company name and job title, when you fill in a form or book a call.
- What you tell us: the content of your enquiry, your answers to our health check or scorecard, your turnover band, and anything you share in a call.
- Your choices: whether you have agreed to receive marketing from us, and which guides you have downloaded.
- How you use our website: pages visited, how you arrived (for example a link or QR code in one of our guides) and device information, collected through cookies and analytics. See our cookie policy for details.
How we use it, and our lawful basis
- Reply to your enquiry and arrange a call: legitimate interests in responding to people who contact us, and steps you ask us to take before entering a contract.
- Send you a guide, scorecard result or health check result you asked for: legitimate interests in providing what you requested.
- Record you as a contact in our client relationship system: legitimate interests in managing enquiries and prospective clients.
- Send you marketing emails, such as insights and event invitations: your consent. You can withdraw it at any time.
- Filter out spam and unsolicited sales messages: legitimate interests in keeping our systems secure and our inbox usable.
- Understand how our website and marketing perform: your consent for analytics cookies, and legitimate interests for anonymised reporting.
- Meet our legal and professional obligations: legal obligation.
We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
Who we share it with
We do not sell your information. We share it only with service providers who process it on our behalf, under contracts that require them to keep it secure:
- Website hosting and forms (our website platform and its form builder)
- Email delivery for form responses (Mailgun)
- Email, calendars and file storage (Microsoft 365)
- Meeting booking (Calendly)
- Our client relationship and pipeline system (data stored in London, UK, with Supabase; the application is hosted by Vercel)
- Internal messaging, for alerts about new enquiries (Slack)
- Website analytics (Google Analytics)
We may also share information if the law requires it, or with our professional advisers and insurers where needed.
International transfers
Some of these providers are based in, or store data in, the United States. Where information leaves the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the UK International Data Transfer Agreement or Addendum, so it stays protected to UK standards.
How long we keep it
- Enquiries that don't become clients: up to 2 years from our last contact with you.
- Marketing contacts: until you unsubscribe or withdraw consent, or 2 years after you last engaged with us, whichever is sooner.
- Website form submissions: 12 months in the website system, after which only the record in our client relationship system remains.
- If you become a client: as set out in our engagement letter.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct it
- ask us to delete it
- object to us using it, including for direct marketing (we will always stop marketing when asked)
- ask us to restrict how we use it
- ask for it in a portable format
- withdraw your consent at any time, where we rely on consent
To use any of these rights, email hello@brightbeany.com. We will respond within one month. To stop marketing emails, you can also use the unsubscribe link in any email.
Complaints
If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, we do not have any control over that website or their privacy and cookie policies. Therefore, we are not responsible for the protection and privacy of any information provided on other websites.
Cookie policy
Please visit our cookie policy discussing what cookies we use, why we use them and for updating your preferences of use.
If you believe that your information is incorrect or incomplete, please email us on hello@brightbeany.com as soon as possible, so we may address any issues and promptly correct your information.
Changes to this notice
We review this notice regularly. This version was last updated in October 2026.