Privacy Policy

This policy explains what personal information Bright Axis IT collects, why we collect it, and what rights you have over it.

Who we are

Bright Axis IT (“we”, “us”) is the data controller for the information described in this policy.

Bright Axis IT LLC
1021 E Lincolnway
Cheyenne, Wyoming 82001
United States

You can reach us about anything in this policy at hello@brightaxisit.com.

This website does not track you

We want to be specific rather than vague about this. This website sets no cookies, runs no analytics or tracking scripts, embeds no advertising pixels, and contains no forms. We do not build a profile of you, and we receive no information about your visit beyond what our hosting provider records to serve the page.

Because we set no cookies, there is no cookie banner and nothing for you to consent to or opt out of here.

When you message us through one of our ads

We advertise on Facebook and Instagram. If you click one of our ads and start a conversation with us in Messenger, Instagram Direct or WhatsApp, we collect what you choose to tell us in that conversation. That typically includes:

• your name and the profile name attached to your Meta account
• an email address or phone number, if you give us one
• answers to the qualifying questions we ask, for example what you are trying to build and when you want to start
• anything else you write in the conversation

We use this only to work out whether we can help you, to reply to you, and to prepare a quote or scope if you want one. We do not sell it, and we do not use it for advertising to you.

Meta Platforms operates the messaging service and handles your message data under its own terms and privacy policy, which are separate from ours. Their handling of your data is governed by Meta’s Privacy Policy.

When you email us

If you email us we keep the message and your address so we can reply and keep a record of what was agreed. Nothing more.

Our lawful basis

• Legitimate interests — responding to an enquiry you started, and running our business. You approached us; replying is what you would reasonably expect.
• Contract — where you go on to engage us, to carry out the work and to invoice you.
• Legal obligation — where we are required to keep records, for example for tax.

Who else sees it

We keep this list short deliberately. Your information may be handled by:

• Meta Platforms, where the conversation takes place
• our email and business software providers, as part of storing and sending messages
• our hosting and accounting providers, where your information forms part of a project or invoice
• professional advisers or authorities, where we are legally required to disclose

We do not sell your personal information to anyone.

Where your information is handled

Bright Axis IT LLC is established in the United States. If you are in the UK or the EEA, this means your information is transferred outside your country when you contact us.

Bright Axis IT LLC is registered in Wyoming. Our team works from Bangladesh, and your information is handled there. Our email and business software providers may also store it on servers in the United States and the European Union.

The United Kingdom has not issued an adequacy decision for Bangladesh. Where you start a conversation with us to ask about our services, we rely on Article 49(1)(b) of the UK GDPR: the transfer is necessary to take steps at your request before entering into a contract. In plain terms, you contacted us to ask whether we can build something for you, and we cannot answer that without reading what you sent us.

This is a derogation rather than a standing safeguard, and it is limited by design. If we go on to work together, we will put an appropriate transfer mechanism in place, such as the UK International Data Transfer Agreement, before your information is used for anything beyond answering your enquiry.

You can ask us at any time to delete what you sent, and we will.

How long we keep it

• Enquiries that do not become projects: 24 months from our last contact, then deleted.
• Client project records: 6 years after the project ends.
• Invoices and financial records: 6 years, to meet tax and accounting requirements.

If you ask us to delete your information sooner we will, unless we are legally required to keep it.

UK representative

We have not appointed a UK representative. Article 27(2)(a) of the UK GDPR exempts processing that is occasional, does not involve special category data on a large scale, and is unlikely to result in a risk to people’s rights and freedoms. Our contact with people in the UK is a small number of enquiries about our services, which we consider falls within that exemption.

You can reach us directly at hello@brightaxisit.com about anything in this policy, and we will answer.

Your rights

If you are in the UK or the EEA you have the right to ask us for a copy of your personal information, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format.

Email hello@brightaxisit.com and we will respond within one month.

If you are unhappy with how we have handled your information you can complain to the UK Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.

Children

Our services are for businesses. We do not knowingly collect information from anyone under 18.

Changes

If we change this policy we will update the date at the top of this page.