Privacy Policy
Last updated: August 2026
Controller
Edgemont Group S.L.U. (Bright Future Academy), NIF B26786806, Av. de Bruselas, 5, 28108 Alcobendas, Madrid. Contact: support@brightfuture.es.
Data We May Process
- Contact details you send us by email, WhatsApp, phone, or social media.
- Academic details needed to answer your enquiry or manage classes: subject, year, school, level, and goals.
- Account data if you use the platform: name, email, access credentials managed by Supabase, role, communication preferences, and session data.
- Platform usage data, such as courses, teacher availability, access to protected books, and security records needed to prevent unauthorised use.
- If you request a Free IB Mark Review: your name, email, grade, subject and level, the mark you received, optionally your school and your comments, and the exam file you upload (PDF or image).
- Anonymous browsing statistics through Vercel Web Analytics, such as page viewed, referrer, approximate country, device, browser, and operating system. We do not use these statistics to identify you or for advertising.
Free IB Mark Review
When you submit an exam through the Free IB Mark Review form, we process the form data and the file you upload for the sole purpose of re-marking your exam against IB criteria and sending you the resulting report. The legal basis is your consent, which you give explicitly on the form and may withdraw at any time.
The exam file is stored in private Supabase storage, is accessible only to the academy's administrator staff, and is kept along with the remainder of the request in order to apply the limit of one free review per student per term and to keep a record of the service provided.
The form is intended for Diploma Programme students (grades 11 and 12). If you are under 14, do not use it without authorisation from a parent or legal guardian.
Purposes and Legal Bases
- Answer enquiries and manage class requests: consent or pre-contractual steps.
- Provide contracted academic services: performance of a contract.
- Administration, invoicing, and legal compliance: legal obligation.
- Maintain security, prevent unauthorised access or use, and obtain anonymous statistics to improve the website: legitimate interest.
- Send promotional communications only if you voluntarily select the relevant option: consent, which you may withdraw at any time.
Minors
If the student is under 14, consent-based processing must be authorised by a parent or legal guardian. For students over 14, we may request additional information or authorisation when required by the service.
Recipients
We use providers needed to operate the website and platform, primarily Vercel (hosting and analytics), Supabase (accounts, database, and storage, including exams you upload), Cloudflare (anti-spam verification on forms), Google Fonts, and the communication services you choose, such as email or WhatsApp. Some providers may process data outside the European Economic Area using applicable legal safeguards. We do not sell personal data.
Retention
We keep data for as long as needed to answer enquiries, maintain the account, and provide the service. We may then retain blocked data for periods required by law or needed to address possible liabilities. Data based on consent is deleted when you withdraw it unless another legal duty applies.
Your Rights
You can request access, rectification, deletion, objection, restriction, and portability by writing to support@brightfuture.es. Requests are free, although we may ask you to verify your identity. You may also lodge a complaint with the Spanish Data Protection Agency.
