Legal
Privacy Policy
This policy explains how we handle personal information you provide to BRIGHT / forma. Colloco Marketing Ltd is the data controller.
Effective from August 2026. BRIGHT / forma is a trading name of Colloco Marketing Ltd, registered in England and Wales (company number 12305516). Registered office: 71–75 Shelton Street, London, WC2H 9JQ. Contact: hello@colloco.marketing.
1. Who we are
BRIGHT / forma is a trading name of Colloco Marketing Ltd, a company registered in England and Wales under company number 12305516.
Registered office: 71–75 Shelton Street, London, WC2H 9JQ.
You can contact us at hello@colloco.marketing.
2. Information we collect
We only collect information you give us directly, which may include:
- Your name, business name, email address and telephone number
- Enquiry messages sent through our contact form
- Project information, brand details and files supplied through our onboarding questionnaires
- Order and payment confirmation details received from our payment provider
- Correspondence with us by email
3. How we use it
We use your information to answer enquiries, to deliver the services you have purchased, to keep records of orders and correspondence, and to meet our legal and accounting obligations.
We do not sell your personal information, and we do not use it for automated decision-making or profiling.
4. Our lawful bases
Under UK GDPR we rely on:
- Contract — to deliver a service you have purchased
- Legitimate interests — to respond to enquiries and to run our business
- Legal obligation — to keep accounting and tax records
5. Payment information
Card payments are handled by our payment provider on their own secure systems. We do not receive or store full card details.
6. Who we share it with
We share information only where it is needed to deliver our service or to run the business, for example with our website and database hosting provider, our email provider, our payment provider, our accountant, and — where you have bought specialist SEO or social media work — a specialist partner working on your account.
We may also disclose information where we are required to do so by law.
7. Storage and security
Enquiry and onboarding submissions are stored in a secure database that is not publicly readable, and access is limited to people who need it to deliver your service.
Some providers may process data outside the UK. Where that happens, we rely on the safeguards those providers have in place for international transfers, such as UK-approved standard contractual clauses.
8. How long we keep it
Enquiries that do not become projects are kept for up to 24 months. Project and client records are kept for the life of the relationship and then for at least six years, to meet UK accounting and tax requirements. Files supplied for a project are kept for as long as they are needed to deliver and support that work.
9. Your rights
Under UK data protection law you have the right to:
- Ask for a copy of the personal information we hold about you
- Ask us to correct information that is inaccurate
- Ask us to delete information we no longer need to keep
- Object to or ask us to restrict certain processing
- Ask us to transfer information you gave us to another provider
- Withdraw consent where we have relied on consent
10. Complaints
Please contact us first at hello@colloco.marketing and we will do our best to put things right. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), the UK's data protection regulator.
11. Cookies
See our Cookie Policy for how cookies and similar technologies are used on this website.
12. Contact
Data protection enquiries: hello@colloco.marketing, or write to Colloco Marketing Ltd, 71–75 Shelton Street, London, WC2H 9JQ.
