Privacy policy — found from the homepage — BrightLocal

Cited by

Facts read from this source

• Controller Report an error

  “BrightLocal Ltd is the controller and responsible for your personal data and this website”

• Address Report an error

  “Address: First Floor, Huntingdon House, 20-25 North Street, Brighton, BN1 1EB, UK”

• Policy version Report an error

  “This version was last updated in May 2026, and may be subject to further revisions.”

• GDPR Report an error

  “In order to be compliant with the implementation of the UK GDPR, we have updated this Privacy Policy and revised our use of personal data in line with the most recent guidance from the Information Commissioner’s Office (ICO).”

• No sale Report an error

  “We will never sell your personal data to a third party.”

• No children Report an error

  “This website is not intended for children and we do not knowingly collect data relating to children.”

• Special categories Report an error

  “We do not collect any Special Categories of Personal Data about you or any information about criminal convictions and offenses.”

• Analytics Report an error

  “analytics providers such as Google and Hotjar based inside or outside the UK or EEA;”

• Payments Report an error

  “Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as PayPal and Stripe, based inside or outside the UK or EEA, and HM Revenue & Customs (HMRC).”

• Advertising Report an error

  “advertising networks, such as Google Ads or Facebook, based inside or outside the UK or EEA;”

• International transfers Report an error

  “In order to perform our services, we may transfer your personal data outside the European Economic Area (EEA).”

• Transfer mechanisms Report an error

  “We will only transfer your personal data to third parties that have signed our own Data Processing Agreement to safeguard and secure your personal data, or which are located in countries deemed to provide an adequate level of protection by the European Commission. Where this is the case, we will ensure that we have an International Data Transfer Agreement (IDTA) in place.”

• US data bridge Report an error

  “Where we use service providers based in the United States, we rely on the UK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge) as a lawful mechanism for transferring personal data.”

• ISO 27001 Report an error

  “We seek to use third-party technology providers that are ISO27001 certified or equivalent (SOC II) where practical.”

• Breach procedures Report an error

  “We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.”

• Retention financial Report an error

  “By law we have to keep basic information about our customers and employees (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers or employees for tax and legal liability purpose”

• Retention account Report an error

  “Your account on the BrightLocal platform will be retained for 3 years from the last recorded activity.”

• Response time Report an error

  “We try to respond to all legitimate requests within one calendar month.”

• Dpia Report an error

  “Data Protection Impact Assessments (DPIAs) have been done where necessary to ascertain and mitigate against risk.”

• AI training Report an error

  “Where we connect AI to our tools, we ensure that customer data is protected from model training, and is subject to human review and oversight where necessary.”

• AI visibility platform Report an error

  “The AI Visibility Platform analyses publicly available business information. It does not analyse personal data as part of its core AI functionality. The platform is hosted in the UK and is currently available on an invite-only basis as part of a proof of concept. Users can delete their account at any time.”

• Marketing cookies sharing Report an error

  “If you consent to marketing cookies, we share limited personal data (including hashed email addresses & phone numbers) with advertising partners such as Microsoft and Google Ads to enable enhanced conversion tracking.”

• Marketing optin Report an error

  “We will seek your express opt-in consent before we share your personal data with any company outside of the BrightLocal group of companies for marketing purposes.”

• Copyright Report an error

  “© 2026 BrightLocal Ltd. All rights reserved. BrightLocal® is a registered trademark in the USA, EU and UK.”

Scores citing this record

• The Agency Owner Rank tracking & index quality
• The Agency Owner European sovereignty
• The Content Strategist Data portability & exit
• The Content Strategist European sovereignty
• The Data Analyst Data portability & exit
• The Data Analyst European sovereignty
• The In-House SEO Lead Data portability & exit
• The In-House SEO Lead European sovereignty
• The Skeptic Data portability & exit
• The Skeptic European sovereignty
• The Technical SEO Data portability & exit
• The Technical SEO European sovereignty