Privacy policy

This privacy policy explains how Bright Noise collects, uses and protects your personal data when you visit our website, contact us, book a call or work with us. It also explains your rights under UK data protection law.

1. Who we are

Bright Noise is a PR and communications studio based in London. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Bright Noise is the controller of the personal data described in this policy.

Bright Noise is the trading name of Vale Strategy Ltd, a company registered in England and Wales under company number 17101003, with its registered office at 244 Randolph Avenue, London, W9 1PF. Our Information Commissioner’s Office (ICO) registration number is ZC236402.

If you have any questions about this policy or how we handle your data, email us at hello@brightnoise.studio.

2. The personal data we collect

We only collect the personal data we need. Depending on how you interact with us, this may include:

Enquiry data: the information you give us when you get in touch, such as your name, company, email address and details of what you need help with and hope to achieve.
Communication data: the content of emails and other messages you send us, and our replies.
Booking data: your name, email address and any other details you give when you book a call through our scheduling provider, Cal.com.
Client and supplier data: business contact details, job titles, and information needed to deliver and invoice our services, if you or your organisation works with us.
Technical data: your IP address, browser type, device information and pages visited. Our hosting provider, Vercel, records this information in server logs, and our font provider (Google Fonts) receives it when your browser loads our fonts.
Cookie preferences: a record of whether you accepted or rejected non-essential cookies. See our cookie policy for details.

We do not intentionally collect special category data, such as health information or political opinions, and we ask you not to send it to us when you get in touch.

3. How we use your data and our lawful basis

Under UK GDPR, we must have a lawful basis for each way we use your personal data. We use your data as follows:

Purposes and lawful bases
Purpose	Lawful basis
Responding to your enquiry and arranging a call	Steps taken at your request before entering into a contract, and our legitimate interests in responding to business enquiries
Delivering our services, managing our client relationship and invoicing	Performance of a contract
Keeping records for accounting, tax and legal purposes	Legal obligation
Running, securing and improving our website	Our legitimate interests in operating a safe, working website
Setting non-essential cookies, such as analytics cookies	Your consent, which you can withdraw at any time
Sending you occasional updates about our work, if you have asked to receive them	Your consent, or our legitimate interests for existing business contacts, as permitted by the Privacy and Electronic Communications Regulations (PECR). You can unsubscribe at any time.

Where we rely on legitimate interests, we have considered your interests and rights and concluded that they do not override ours. You can ask us for more information about this assessment.

We do not sell your personal data, and we do not use it for automated decision-making or profiling that has legal or similarly significant effects on you.

We share personal data only where necessary, with trusted service providers who process it on our behalf and under our instructions. These include:

Google (Google Workspace), which provides our email and stores our correspondence with you.
Cal.com, which manages call bookings when you choose to book a discovery call.
Xero, which we use for accounting and invoicing if you or your organisation works with us.
Google Fonts, which delivers the fonts used on our website.
Vercel, which hosts this website and keeps server logs.
Professional advisers, such as accountants, lawyers and insurers, where needed.

We may also disclose personal data where the law requires it, or to protect our rights, property or safety, or those of others.

5. International transfers

Some of our service providers, including Google, Cal.com, Xero and Vercel, may process personal data outside the UK, including in the United States. When this happens, we make sure the data is protected by appropriate safeguards. These include UK adequacy regulations (such as the UK Extension to the EU–US Data Privacy Framework), the International Data Transfer Agreement, or the International Data Transfer Addendum to the EU Standard Contractual Clauses. You can contact us for more information about these safeguards.

6. How long we keep your data

We keep personal data only for as long as we need it for the purposes described above:

Enquiries that don’t lead to work together: up to 24 months from our last contact.
Client and supplier records: for the length of our relationship, plus six years to meet our legal, tax and accounting obligations.
Cookie preferences: 12 months, after which we will ask you again.
Server logs: in line with Vercel’s standard retention period.

When we no longer need your data, we securely delete or anonymise it.

7. How we protect your data

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These include encrypted connections (HTTPS), access controls and reputable service providers. No method of transmission over the internet is completely secure, but we work to protect your data and will respond promptly to any security issue.

8. Your rights

Under UK data protection law, you have the right to:

Access the personal data we hold about you
Rectification: ask us to correct inaccurate or incomplete data
Erasure: ask us to delete your data in certain circumstances
Restriction: ask us to limit how we use your data
Object to processing based on our legitimate interests, and to direct marketing at any time
Data portability: receive your data in a structured, commonly used format, or ask us to send it to another organisation
Withdraw consent at any time where we rely on it. This won’t affect any processing we carried out before you withdrew it.

To exercise any of these rights, email hello@brightnoise.studio. Exercising your rights is usually free. We will respond within one month, and we may need to confirm your identity first.

9. Complaints

If you have concerns about how we use your personal data, please contact us first and we will try to resolve them. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Make a complaint on the ICO website

10. Cookies

We use only strictly necessary cookies and similar technologies unless you agree to others. For details of what we use and how to change your choice, read our cookie policy.

11. Children

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 13.

12. Links to other websites

Our website links to other websites, such as news sources and Cal.com. We are not responsible for how those sites handle your data, so please read their privacy policies.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.

14. Contact us

For any questions about this privacy policy or your personal data, email hello@brightnoise.studio or write to us at Vale Strategy Ltd, 244 Randolph Avenue, London, W9 1PF.

Last updated: 13 October 2026