GDPR Compliance Policy

Principles of Data Processing

We adhere to the following GDPR principles:

• Lawfulness, Fairness, and Transparency: Data is processed lawfully, fairly, and in a transparent manner.
• Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
• Data Minimization: Only data that is necessary for the purposes for which it is processed is collected.
• Accuracy: Efforts are made to ensure that personal data is accurate and, where necessary, kept up to date.
• Storage Limitation: Personal data is kept in a form that permits identification of data subjects for no longer than is necessary.
• Integrity and Confidentiality: Personal data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to Access: You have the right to access your personal data and obtain a copy of the personal data which is being processed.
• Right to Rectification: You have the right to obtain rectification of inaccurate personal data.
• Right to Erasure: Under certain circumstances, you have the right to have your personal data erased.
• Right to Restriction of Processing: You have the right to restrict the processing of your personal data.
• Right to Data Portability: You have the right to receive the personal data concerning you in a structured, commonly used format.
• Right to Object: You have the right to object to the processing of your personal data.

Data Collection and Use

Compare Bright Ltd collects personal data only when it is necessary for the services we provide and with your consent. This includes information provided directly by you when using our comparison tools or contacting us for inquiries. Our use of your data is limited to providing you with the requested services and improving our website functionality.

Sharing and Transferring Data

We do not sell your data. We may share your data with third-party service providers who perform services on our behalf. Any data transfer outside the EU/EEA is conducted in compliance with GDPR requirements, ensuring that your data is protected regardless of where it is processed.

Data Security

We implement appropriate technical and organizational measures to ensure the security of your personal data, protecting it against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Changes to This Policy

We may update this GDPR Compliance Policy from time to time. We will notify you of any significant changes and reflect those changes in this document.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e‑mail at hello@comparebright.com or by mail using the details provided in our contact information.

This GDPR Compliance Policy is part of our commitment to protect your privacy and ensure that your personal data is collected and processed in compliance with the GDPR.