Privacy Policy
Last updated: July 2026
Controller
Edgemont Group SL (Bright Future Academy), NIF B26786806, Av. de Bruselas, 5, 28108 Alcobendas, Madrid. Contact: support@brightfuture.es.
Data We May Process
- Contact details you send us by email, WhatsApp, phone, or social media.
- Academic details needed to answer your enquiry or manage classes: subject, year, school, level, and goals.
- Account data if you use the platform: name, email, access credentials managed by Supabase, role, communication preferences, and session data.
- Platform usage data, such as courses, teacher availability, access to protected books, and security records needed to prevent unauthorised use.
- Anonymous browsing statistics through Vercel Web Analytics, such as page viewed, referrer, approximate country, device, browser, and operating system. We do not use these statistics to identify you or for advertising.
Purposes and Legal Bases
- Answer enquiries and manage class requests: consent or pre-contractual steps.
- Provide contracted academic services: performance of a contract.
- Administration, invoicing, and legal compliance: legal obligation.
- Maintain security, prevent unauthorised access or use, and obtain anonymous statistics to improve the website: legitimate interest.
- Send promotional communications only if you voluntarily select the relevant option: consent, which you may withdraw at any time.
Minors
If the student is under 14, consent-based processing must be authorised by a parent or legal guardian. For students over 14, we may request additional information or authorisation when required by the service.
Recipients
We use providers needed to operate the website and platform, primarily Vercel (hosting and analytics), Supabase (accounts, database, and storage), Google Fonts, and the communication services you choose, such as email or WhatsApp. Some providers may process data outside the European Economic Area using applicable legal safeguards. We do not sell personal data.
Retention
We keep data for as long as needed to answer enquiries, maintain the account, and provide the service. We may then retain blocked data for periods required by law or needed to address possible liabilities. Data based on consent is deleted when you withdraw it unless another legal duty applies.
Your Rights
You can request access, rectification, deletion, objection, restriction, and portability by writing to support@brightfuture.es. Requests are free, although we may ask you to verify your identity. You may also lodge a complaint with the Spanish Data Protection Agency.