Bright Legacy (“Bright Legacy,” “the company,” “we,” “our,” or “us”) is committed to protecting the privacy of our users. We adhere to the highest standards of data privacy and comply with all relevant privacy laws and regulations, including the EU General Data Protection Regulation (GDPR), the Personal Information Protection Law (PIPL) of the People’s Republic of China, and the California Consumer Privacy Act (CCPA).

WHAT OUR PRIVACY POLICY COVERS

Our privacy policy aims to make it easier for our users to understand how and where their data is used. We consider the information our users share as assets, and protecting it is our sole concern. This privacy statement shall discuss which privacy rights we comply with and how your data has been utilized.

We have a consent mechanism procedure in place that ensures our users are informed and give their consent before we collect their user data and use it for any purpose. You will be asked to give your consent through checkboxes, which will allow you to give or withdraw the right to use your personal information. As per this guideline, we are obligated to use only the data for which you have given us permission and not more than that.

EUROPEAN PRIVACY RIGHTS

The European Union enacted the General Data Protection Regulation (GDPR) in 2018 to safeguard the privacy of personal data. This regulation is designed to give individuals maximum control over their personal data.

Key Principles:

Lawfulness, Fairness, and Transparency:

Under the GDPR, personal data must be processed in a lawful and fair manner, with transparency at the forefront. Individuals should be informed about how, when, and why their data is being used.

Purpose Restriction:

The policy stipulates that personal data should be collected only for specific, legitimate purposes. Once these purposes have been fulfilled, the data should not be used for any other reasons.

Data Minimization:

Organizations or any other party should collect data as much as required to meet their defined purposes.

Accuracy:

Personal information for individuals should be correct while sharing. In case of any changes in personal events that influence the shared information, it has to be modified or corrected.

Storage Limitation:

The information collected has to be stored in a method that assists in recognizing the concerned individuals as long as the defined purposes are met.

Integrity and Confidentiality:

Organizations collecting the personal information of individuals should provide the utmost security to the data so that there is no chance of any damage or destruction. Additionally, it restricts illegal usage of the data.

Accountability:

Organizations or other parties who are collecting data from individuals to meet their purposes must adhere to the GDPR principles and policies.

Key Units:

Data Subject:

The people whose personal information has been collected.

Data Controller:

The organization or other parties who collect the personal data of individuals to meet their purposes.

Data Processor:

The unit that uses and processes collected data for the data controller.

Supervisory Authority:

Independent and unbiased public control bodies to observe GDPR compliance.

Rights of Data Subjects:

Right to Access:

The people whose data has been collected possess the right to know whether their information is being used. If they find out any data usage, they can access it.

Right to Rectification:

If there is any wrong information, individuals can request corrections.

Right to Erasure:

Under specific situations, individuals can request deletion or erasure of their personal information.

Right to Restriction of Processing:

Under specific situations, individuals can request limitations on the usage of their personal information

Right to Object:

GDPR allows individuals to object to the usage of their personal information.

Data Transfer

By submitting your information, you consent to its transfer to third parties as necessary. The protection of your data will then depend on the privacy practices followed by these third parties. Additionally, if required, you also permit us to transfer your personal data to other countries or continents. In such cases, the security of your data may be governed by the privacy regulations of those regions, which may differ from your own. By providing your data, you agree to its transfer, storage, and processing as needed.

Data Subject Rights

If you are a resident of a European country subject to GDPR, you have the following rights regarding your personal information:

1. Request Access: You may request access to the personal data we hold about you, allowing you to review what information we have, and how and where it is being used.
2. Request Correction: You can request corrections or updates to any personal data you have shared with us to ensure accuracy and address any errors.
3. Request Deletion: If you are uncomfortable with how your data is being processed, you can request its deletion. If we are unable to fully or partially delete your data, we will inform you of the reason.
4. Withdraw Consent: You may withdraw your consent for processing your personal data for marketing purposes or third-party sharing. However, there may be instances where we may decline your request based on legitimate data processing grounds.
5. Request Limitation: You can request limitations on the use of your personal data in cases of data inaccuracy, unlawful processing, prolonged storage, or use after you have raised an objection.
6. Request Transfer: You have the right to request the transfer of your personal data to other parties. We will provide your data in a structured and easily accessible format for transfer.

Data Security

We are committed to safeguarding our users’ information by maintaining robust security systems and continually enhancing them as needed. Our security measures are designed to protect your personal data from unauthorized access. Based in Pune, India, we handle the storage and processing of your data with the utmost care. We regularly update our security protocols to ensure the protection of your information and adhere to privacy guidelines across different countries and regions to guard against cross-border data breaches.

However, it is important to note that no data transmitted over the internet can be guaranteed to be completely secure. If you have any questions or need further clarification about our data protection policies or security practices, please feel free to contact us at info@.com.

Data Retention

We may retain your personal data for an extended period as long as necessary to fulfill our requirements. We will store and use your data solely for legitimate purposes. Once the data is no longer needed, we will ensure it is securely erased or deleted.

Bright Legacy is committed to upholding your privacy with the highest level of security. In compliance with GDPR, we fully respect and protect our users’ right to privacy.

PEOPLE’S REPUBLIC OF CHINA PRIVACY RIGHTS:

Under the Personal Information Protection Law (PIPL) in the People’s Republic of China (PRC), individuals have the right to access and update their personal information. You may also request limitations on or objections to the processing of your data. Additionally, you have the right to obtain a copy of your personal data. If you are a close relative of a deceased person in the PRC, you are entitled to access, correct, and delete the deceased individual’s personal information.

To exercise your rights under the PIPL, please click here or contact us at info@brightlegacy.com. We may need additional information to verify your identity as required by the applicable regulations. We aim to respond within the legally required timeframe, typically within 30 days. If you agree to or submit any requests under these regulations, you consent to the transfer of your personal data to third parties as necessary. You also have the right to request information about the third parties with whom Bright Legacy shares your data.

If you have difficulty understanding our privacy policies, you are entitled to request a detailed explanation of how we manage your personal information. For any questions or concerns, please contact us at info@brightlegacy.com.

(如果您无法理解本隐私政策并希望获得更多信息，请发送电子邮件至 info@brightlegacy.com)

CALIFORNIA CONSUMER PRIVACY ACT (CCPA) POLICIES:

If you are a California resident, the CCPA provides you with the following essential privacy rights:

Residents of California may request information about Bright Legacy’s disclosure of personal data to third parties for direct marketing purposes. To make such a request, please email info@brightlegacy.com. Include your name, residential address, and email if you prefer to receive a response via email. Otherwise, we will respond by postal mail within the timeframe required by applicable law.

California residents can request that Bright Legacy not sell their personal information by emailing us with the subject line “Do not share my information.”

If you are a California resident under the age of 18 and a registered user of our Services, you can request the removal of any content you created and publicly posted on our website (“User Content”). To do so, please email a detailed description of the specific User Content to info@brightlegacy.com. Bright Legacy may request additional information to verify that you created and posted the content.

We will remove your User Content from public view as soon as reasonably possible. However, please note that removing your content does not guarantee complete deletion. Your User Content may still exist in backup systems, caches, or may be retained for legal or administrative purposes. Additionally, if your content has been forwarded or reposted on other websites, it may remain publicly available. In certain cases, Bright Legacy may be legally required not to remove your User Content.

Cookies and Similar Technology

Cookies are small files that collect user data and are stored on various parts of your device to gather information. These may include details such as your browsing history, the browser you’re using, your IP address, clicked links, and the location of your device. Cookies help improve communication between users and the websites they visit, and allow us to customize site elements to enhance your experience. Similar to cookies, other technologies like pixels, clear GIFs, web beacons, and tags may also be used to collect data from your devices.

Third-Party Sources/Links:

We may collect your personal data from third-party sources and external links to meet our business requirements. Before obtaining your information from these sources, we ensure that your consent for such transfers is in place.

Data Collection, Management, and Regulation in Compliance with Anti-Spam Laws

In line with our commitment to maintaining high standards of privacy and data protection, as outlined in our core privacy policy, we are dedicated to providing transparency about how we collect, manage, and regulate data, while fully complying with anti-spam regulations across different countries.

Data Collection: